Skip to content
OpenAdvisories
High RHSA-2026:49836 1 CVE

Red Hat Security Advisory: ldns security update

Published Aug 4, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 ldns 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 ldns-debuginfo 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 ldns-debugsource 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 ldns-devel 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 ldns-doc 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 ldns-utils 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 ldns-utils-debuginfo 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ldns 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ldns-debuginfo 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 python3-ldns 0:1.8.3-18.el10_2.1
Red Hat · RHEL 10 enterprise_linux:10.2 python3-ldns-debuginfo 0:1.8.3-18.el10_2.1

Vulnerabilities 1

  • High 8.2
    CVE-2026-10846

    Insufficient verification that responses belong to a query

    NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the questio…

    NLnet Labs ldns ldns ldns Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487437
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49836.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-10846
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10846
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10846
  • article
    https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt