Skip to content
OpenAdvisories
High ELSA-2026-68787 1 CVE

Important: perl-Net-DNS security update (Oracle Linux 8)

Published Sep 17, 2026 · Updated Sep 17, 2026

Summary

[1.15-2]
- Fix unbounded recursion in TSIG record processing (CVE-2026-81928)
- Resolves: RHEL-256266

[1.15]
- Resolves rhbz#1544065 Update to 1.15 - Maintenance only

[1.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.14-1]
- Updated to 1.14

[1.13-1]
- Updated to 1.13

[1.12-1]
- Updated to 1.12

[1.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.10-2]
- Perl 5.26 rebuild

[1.10-1]
- Resolves: rhbz#1448614 perl-Net-DNS-1.10 is available

[1.09-1]
- 1.09 bump

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 perl-Net-DNS 0:1.15-2.el8_10

Vulnerabilities 1

  • High 7.5

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a message by re-encoding it, and removes TSIG records only from the additional section. …