Skip to content
OpenAdvisories
High RHSA-2026:68787 1 CVE

Red Hat Security Advisory: perl-Net-DNS security update

Published Sep 18, 2026 · Updated Sep 18, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Net-DNS 0:1.15-2.el8_10

Vulnerabilities 1

  • High 7.5
    CVE-2026-81928

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a message by re-encoding it, and removes TSIG records only from the additional section. …

    libnet-dns-perl libnet-dns-perl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2527155
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68787.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-81928
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-81928
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-81928
  • article
    https://datatracker.ietf.org/doc/html/rfc8945#section-5.2
  • article
    https://metacpan.org/release/NLNETLABS/Net-DNS-1.56/source/lib/Net/DNS/RR/TSIG.pm#L245-262
  • article
    https://metacpan.org/release/NLNETLABS/Net-DNS-1.56/source/lib/Net/DNS/RR/TSIG.pm#L62-73
  • article
    https://metacpan.org/release/NLNETLABS/Net-DNS-1.57/changes
  • article
    https://rt.cpan.org/Ticket/Display.html?id=181125