Skip to content
OpenAdvisories
High RHSA-2026:68786 1 CVE

Red Hat Security Advisory: perl-Net-DNS security update

Published Sep 18, 2026 · Updated Sep 18, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Net-DNS 0:1.29-6.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::crb perl-Net-DNS-Nameserver 0:1.29-6.el9_8.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-81928

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a message by re-encoding it, and removes TSIG records only from the additional section. …

    libnet-dns-perl libnet-dns-perl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2527155
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68786.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-81928
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-81928
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-81928
  • article
    https://datatracker.ietf.org/doc/html/rfc8945#section-5.2
  • article
    https://metacpan.org/release/NLNETLABS/Net-DNS-1.56/source/lib/Net/DNS/RR/TSIG.pm#L245-262
  • article
    https://metacpan.org/release/NLNETLABS/Net-DNS-1.56/source/lib/Net/DNS/RR/TSIG.pm#L62-73
  • article
    https://metacpan.org/release/NLNETLABS/Net-DNS-1.57/changes
  • article
    https://rt.cpan.org/Ticket/Display.html?id=181125