Skip to content
OpenAdvisories
High RHSA-2026:98949 1 CVE

Red Hat Security Advisory: ldns security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream ldns 0:1.7.0-21.el8_4.1
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream ldns 0:1.7.0-21.el8_4.1

Vulnerabilities 1

  • High 8.2
    CVE-2026-10846

    Insufficient verification that responses belong to a query

    NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the questio…

    NLnet Labs ldns ldns ldns Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487437
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98949.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-10846
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10846
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10846
  • article
    https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt