Skip to content
OpenAdvisories
High RHSA-2026:54377 1 CVE

Red Hat Security Advisory: ldns security update

Published Aug 13, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream ldns 0:1.7.1-11.el9_2.1

Vulnerabilities 1

  • High 8.2
    CVE-2026-10846

    Insufficient verification that responses belong to a query

    NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the questio…

    NLnet Labs ldns ldns ldns Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487437
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54377.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-10846
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10846
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10846
  • article
    https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt