Skip to content
OpenAdvisories
High RHSA-2026:49520 1 CVE

Red Hat Security Advisory: ldns security update

Published Aug 3, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream ldns 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream ldns-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream ldns-debugsource 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream ldns-utils-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-ldns-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-ldns-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb ldns-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb ldns-debugsource 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb ldns-devel 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb ldns-doc 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb ldns-utils 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb ldns-utils-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb perl-ldns 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb perl-ldns-debuginfo 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-ldns 0:1.7.0-23.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-ldns-debuginfo 0:1.7.0-23.el8_10

Vulnerabilities 1

  • High 8.2
    CVE-2026-10846

    Insufficient verification that responses belong to a query

    NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the questio…

    NLnet Labs ldns ldns ldns Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487437
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49520.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-10846
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10846
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10846
  • article
    https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt