Skip to content
OpenAdvisories
High RHSA-2026:50108 1 CVE

Red Hat Security Advisory: ldns security update

Published Aug 5, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream ldns 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream ldns-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream ldns-debugsource 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream ldns-utils-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ldns-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-ldns-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb ldns-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb ldns-debugsource 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb ldns-devel 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb ldns-doc 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb ldns-utils 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb ldns-utils-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb perl-ldns 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb perl-ldns-debuginfo 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb python3-ldns 0:1.7.1-12.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb python3-ldns-debuginfo 0:1.7.1-12.el9_8.1

Vulnerabilities 1

  • High 8.2
    CVE-2026-10846

    Insufficient verification that responses belong to a query

    NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the questio…

    NLnet Labs ldns ldns ldns Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487437
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50108.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-10846
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10846
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10846
  • article
    https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt