Red Hat Product Errata RHSA-2026:53402 - Security Advisory
Issued:
2026-08-11
Updated:
2026-08-11

RHSA-2026:53402 - Security Advisory

Synopsis

Important: ldns security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ldns is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets.

Security Fix(es):

  • ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching (CVE-2026-10846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2487437 - CVE-2026-10846 ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
x86_64
ldns-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 4fd632e2b584bace55ff5dbdcebb635de8285053bfa9398b14fec0dee085a119
ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 3196738cc809a7c76b302837e317a806757ced28789e761ae1b62ac45685feb6
ldns-debugsource-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: b5aa2825292d451eca39ccd386d7b445a787d79ab3f732dde5f737c626c7d281
ldns-utils-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 578e9ee19beb130395abd16792b85720ee113a0f4f83433f6d3da4f66267ce62
perl-ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 6363d1ceeba682ad5c6ca522dbd099beedee41185301ae455720d9c3150b873c
python3-ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: f567d90e0dbc55acc75c30246e74898c901329cc24505433444c557279f64426

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
s390x
ldns-1.8.3-18.el10_0.1.s390x.rpm SHA-256: c1038417ad36679a76e07b3434814e03a71381dab14ac801f03be6e9155d8c94
ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: a3e681d3cacac25d42239a85f96c3859b7a927e3380a5ad5ff8a3ac813aea7dc
ldns-debugsource-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 4b82aa37c6651ad3db4e00c10968bb030257a899f695f5128afffc52bbe636c2
ldns-utils-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 5660e458b48aededc26d4770b907a47c0aa27feb75de989a8b99c2ed14debe54
perl-ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 5bf1e14bc9776731c369208ab7a3cda32ed5828032f0e791c5e997946c2c3fc9
python3-ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: fa3df06e012c6b8cb45213e775de53dd2bedbd4f19b66f297b2c4e65c3a3fcac

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
ppc64le
ldns-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 505de727c37db48d2664ce0799fa5a31c3477daa6343a3925040d5d6d537c286
ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: f6382fd8767da136932a25c056a553fc0988196e74a03545ac1e7ea627dc1b79
ldns-debugsource-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 3deb003d1df3b5e9fd7979471fd89c96f30eca30fe068e996b65eee4fcb551fc
ldns-utils-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 48fbd2342ad4a69aafe5818c50cacc58fd30a1151066891dea19e71ae79a4007
perl-ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: f26054970a09ab5ad05d38467c49374c970a47d54974266d2730de213a1397ac
python3-ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 565a79eef51d10ad540c72be57785da08cb8ebd2ce532d30d1eb5a0ea9ca1384

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
aarch64
ldns-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 1efc1525888b0926905385d7fcc6203b0c747f6937c9b2fb5e3911de46c6583f
ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: b90e3ebc5c56288a16c98b836a9b5e30a75c00b6c057d1f89d0ddd06c054b643
ldns-debugsource-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 398d57929b8d02c3ee8e847e2d2dbd695fbc27f905f5773f8ec40891a0379e28
ldns-utils-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 6c584e10d4a7ee548e2adabf6859a07267334550ced07d0dda767d79db71009d
perl-ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: e0c34b52d1e42c2a8712dba0a94726ee67257d3f187c05d1a5eca42f38c7bba9
python3-ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 3768ec53392815ce6cd07eabb8f91705cc65bc7d9b5e0cf42508b6c2702ab200

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 3196738cc809a7c76b302837e317a806757ced28789e761ae1b62ac45685feb6
ldns-debugsource-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: b5aa2825292d451eca39ccd386d7b445a787d79ab3f732dde5f737c626c7d281
ldns-devel-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 16f5ca894b9695b73363fff686bf321b86ee109d91d8f33799252c957acc2d95
ldns-doc-1.8.3-18.el10_0.1.noarch.rpm SHA-256: ed658fdc781987f7310e957c1156829b1c1907d815ab4ce0a3023ede8b422dbb
ldns-utils-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 489f086f7a77cceec80e55b82283f1b5b3ffb956ba11e3d6a169399c9b06dfc9
ldns-utils-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 578e9ee19beb130395abd16792b85720ee113a0f4f83433f6d3da4f66267ce62
perl-ldns-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: a0d18bfea9bca4cb8418c55e3bf98a02409260f3cb575127c1f61cb3a9a839e1
perl-ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 6363d1ceeba682ad5c6ca522dbd099beedee41185301ae455720d9c3150b873c
python3-ldns-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 0177500e13a6c7dd010ea52a4b2f8b9aa8d98296f1c9be055c9d90469861817c
python3-ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: f567d90e0dbc55acc75c30246e74898c901329cc24505433444c557279f64426

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: f6382fd8767da136932a25c056a553fc0988196e74a03545ac1e7ea627dc1b79
ldns-debugsource-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 3deb003d1df3b5e9fd7979471fd89c96f30eca30fe068e996b65eee4fcb551fc
ldns-devel-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: d886bad4f414f454c1726acfacdee32449a22d3f6e08e343e086b1eb7739d0e6
ldns-doc-1.8.3-18.el10_0.1.noarch.rpm SHA-256: ed658fdc781987f7310e957c1156829b1c1907d815ab4ce0a3023ede8b422dbb
ldns-utils-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: e55daa79eebae622526fc26071868c13bac6e572cef924be6d8ab9e681ec61d7
ldns-utils-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 48fbd2342ad4a69aafe5818c50cacc58fd30a1151066891dea19e71ae79a4007
perl-ldns-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 4961fe4c0b0431790ae67bb3d72c3d9f6316920bdf087e72a2a00a474528af2b
perl-ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: f26054970a09ab5ad05d38467c49374c970a47d54974266d2730de213a1397ac
python3-ldns-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 7b18f182f98bb471f41cc37de781d81fdd4fc79c77b02de5fe73610cdb8fe187
python3-ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 565a79eef51d10ad540c72be57785da08cb8ebd2ce532d30d1eb5a0ea9ca1384

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: a3e681d3cacac25d42239a85f96c3859b7a927e3380a5ad5ff8a3ac813aea7dc
ldns-debugsource-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 4b82aa37c6651ad3db4e00c10968bb030257a899f695f5128afffc52bbe636c2
ldns-devel-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 0d0a1152a4596da6e99614de317973e453169dc3c85f4fab4789db54fbb7d29e
ldns-doc-1.8.3-18.el10_0.1.noarch.rpm SHA-256: ed658fdc781987f7310e957c1156829b1c1907d815ab4ce0a3023ede8b422dbb
ldns-utils-1.8.3-18.el10_0.1.s390x.rpm SHA-256: fa6af9ad126d3df3d135abea5d5d43877f7f49c939dec77c2958188f65a9ee41
ldns-utils-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 5660e458b48aededc26d4770b907a47c0aa27feb75de989a8b99c2ed14debe54
perl-ldns-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 800fd1e5b99b1f40191569e293d48ab5147d5101c61002c328b5a31ccf3ca863
perl-ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 5bf1e14bc9776731c369208ab7a3cda32ed5828032f0e791c5e997946c2c3fc9
python3-ldns-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 9f5df73d2fb3d7445d6bfb03dc0470613c2a15b09252c3461178597aa1916ef0
python3-ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: fa3df06e012c6b8cb45213e775de53dd2bedbd4f19b66f297b2c4e65c3a3fcac

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: b90e3ebc5c56288a16c98b836a9b5e30a75c00b6c057d1f89d0ddd06c054b643
ldns-debugsource-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 398d57929b8d02c3ee8e847e2d2dbd695fbc27f905f5773f8ec40891a0379e28
ldns-devel-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: c7881d593863aea580d39f59c0c7850d4ccf57e3cbd6cd5ec49165671bd5c43e
ldns-doc-1.8.3-18.el10_0.1.noarch.rpm SHA-256: ed658fdc781987f7310e957c1156829b1c1907d815ab4ce0a3023ede8b422dbb
ldns-utils-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: a8ccbd18a3c27cf813df3ab3c6762a806206fbc2108df72e3b694ae318ac9a93
ldns-utils-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 6c584e10d4a7ee548e2adabf6859a07267334550ced07d0dda767d79db71009d
perl-ldns-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 9ab9553905b902be5a59b86b21fe53c63f1acb7cf767992ed4671de7b1e8b64d
perl-ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: e0c34b52d1e42c2a8712dba0a94726ee67257d3f187c05d1a5eca42f38c7bba9
python3-ldns-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 8092d5c88ef8596ee3d2516a09e762a8d0b9f8d318c4ecf4e67a17a4baef7462
python3-ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 3768ec53392815ce6cd07eabb8f91705cc65bc7d9b5e0cf42508b6c2702ab200

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
aarch64
ldns-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 1efc1525888b0926905385d7fcc6203b0c747f6937c9b2fb5e3911de46c6583f
ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: b90e3ebc5c56288a16c98b836a9b5e30a75c00b6c057d1f89d0ddd06c054b643
ldns-debugsource-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 398d57929b8d02c3ee8e847e2d2dbd695fbc27f905f5773f8ec40891a0379e28
ldns-utils-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 6c584e10d4a7ee548e2adabf6859a07267334550ced07d0dda767d79db71009d
perl-ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: e0c34b52d1e42c2a8712dba0a94726ee67257d3f187c05d1a5eca42f38c7bba9
python3-ldns-debuginfo-1.8.3-18.el10_0.1.aarch64.rpm SHA-256: 3768ec53392815ce6cd07eabb8f91705cc65bc7d9b5e0cf42508b6c2702ab200

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
s390x
ldns-1.8.3-18.el10_0.1.s390x.rpm SHA-256: c1038417ad36679a76e07b3434814e03a71381dab14ac801f03be6e9155d8c94
ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: a3e681d3cacac25d42239a85f96c3859b7a927e3380a5ad5ff8a3ac813aea7dc
ldns-debugsource-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 4b82aa37c6651ad3db4e00c10968bb030257a899f695f5128afffc52bbe636c2
ldns-utils-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 5660e458b48aededc26d4770b907a47c0aa27feb75de989a8b99c2ed14debe54
perl-ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: 5bf1e14bc9776731c369208ab7a3cda32ed5828032f0e791c5e997946c2c3fc9
python3-ldns-debuginfo-1.8.3-18.el10_0.1.s390x.rpm SHA-256: fa3df06e012c6b8cb45213e775de53dd2bedbd4f19b66f297b2c4e65c3a3fcac

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
ppc64le
ldns-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 505de727c37db48d2664ce0799fa5a31c3477daa6343a3925040d5d6d537c286
ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: f6382fd8767da136932a25c056a553fc0988196e74a03545ac1e7ea627dc1b79
ldns-debugsource-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 3deb003d1df3b5e9fd7979471fd89c96f30eca30fe068e996b65eee4fcb551fc
ldns-utils-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 48fbd2342ad4a69aafe5818c50cacc58fd30a1151066891dea19e71ae79a4007
perl-ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: f26054970a09ab5ad05d38467c49374c970a47d54974266d2730de213a1397ac
python3-ldns-debuginfo-1.8.3-18.el10_0.1.ppc64le.rpm SHA-256: 565a79eef51d10ad540c72be57785da08cb8ebd2ce532d30d1eb5a0ea9ca1384

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
ldns-1.8.3-18.el10_0.1.src.rpm SHA-256: a25a9d0609f43a1175725a433564b96121606d1054313c8ddf226c290ee5648c
x86_64
ldns-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 4fd632e2b584bace55ff5dbdcebb635de8285053bfa9398b14fec0dee085a119
ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 3196738cc809a7c76b302837e317a806757ced28789e761ae1b62ac45685feb6
ldns-debugsource-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: b5aa2825292d451eca39ccd386d7b445a787d79ab3f732dde5f737c626c7d281
ldns-utils-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 578e9ee19beb130395abd16792b85720ee113a0f4f83433f6d3da4f66267ce62
perl-ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: 6363d1ceeba682ad5c6ca522dbd099beedee41185301ae455720d9c3150b873c
python3-ldns-debuginfo-1.8.3-18.el10_0.1.x86_64.rpm SHA-256: f567d90e0dbc55acc75c30246e74898c901329cc24505433444c557279f64426

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.