Red Hat Product Errata RHSA-2026:54377 - Security Advisory
Issued:
2026-08-12
Updated:
2026-08-12

RHSA-2026:54377 - Security Advisory

Synopsis

Important: ldns security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ldns is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets.

Security Fix(es):

  • ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching (CVE-2026-10846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x

Fixes

  • BZ - 2487437 - CVE-2026-10846 ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
x86_64
ldns-1.7.1-11.el9_2.1.i686.rpm SHA-256: f0f5dd8df21269581f62533f93c779196db04a4caa726340f0b59ab66eb20192
ldns-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 2005d9ff1bceeb2395c8b9c968ff9e5b802036c526b01d5abe11e50dff85b748
ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: 877e6acc01b22fdf2d988a3d7c48d4baeeee864ce9fbcad36a55d0c5d55a6228
ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: ae60dd9d4c1571044d959b0f6a445a8912b8cfd2665feffaf8f9ce64d0ce1e86
ldns-debugsource-1.7.1-11.el9_2.1.i686.rpm SHA-256: d308bd82bfcea5444fd3d9e68a22f46f7aae057f34444ec7f20194490fea1b94
ldns-debugsource-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 20c1e722c96e730c278ba0d33c0f15d304e4a67002c2ce54940c073760a03f16
ldns-utils-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: b1ed33535e495845bb386bb19db3876eaa5b90140d50033be437c5710f8a9794
ldns-utils-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 36b9bb3dce2d755d7bd8bb01d80322adf33ac76218ff6291b3fe569f50322761
perl-ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: e099c2cb892e13382514edebfadcb803c6424aab99ee766837ce77b41d68ee8f
perl-ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: a25875d79f937d5932b09079f0b3a03359c7d4a4ce9b3746ce6bc78e9107f638
python3-ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: 0b33a196a6f32a50f2214e745d92ed0066da94ef9297a5bed7f79c9dbc8aa2c5
python3-ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 4b3e705a12a207a9168cb9b1630383d77ab044dc46b428ea7b294a1ff54359d8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
ppc64le
ldns-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 87e818c496f394ac39710e225c424d1a2d967bbdc528faa8407d72474e658c93
ldns-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 89b0b3b8b9aca326ab368aef579b9c691c7615d791d839fee3b96ef6890b5d2d
ldns-debugsource-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 0bcb1668a5894e98f5d4dbd818b825d8fe33319115aa653968d85a8d7c317ec4
ldns-utils-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 45d3dc58c747ff3e0212c546f4e6343156f89234de076923306d59b756a2d287
perl-ldns-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 2a47466f6ab425efc67070a6e43de608a4e5bc19142e7c2d6a9340194ed034fb
python3-ldns-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 90d3367f656cdf8e58e409ebdfb08dedeb6a45da9d4e97ef9b5eba146e13a78b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
x86_64
ldns-1.7.1-11.el9_2.1.i686.rpm SHA-256: f0f5dd8df21269581f62533f93c779196db04a4caa726340f0b59ab66eb20192
ldns-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 2005d9ff1bceeb2395c8b9c968ff9e5b802036c526b01d5abe11e50dff85b748
ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: 877e6acc01b22fdf2d988a3d7c48d4baeeee864ce9fbcad36a55d0c5d55a6228
ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: ae60dd9d4c1571044d959b0f6a445a8912b8cfd2665feffaf8f9ce64d0ce1e86
ldns-debugsource-1.7.1-11.el9_2.1.i686.rpm SHA-256: d308bd82bfcea5444fd3d9e68a22f46f7aae057f34444ec7f20194490fea1b94
ldns-debugsource-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 20c1e722c96e730c278ba0d33c0f15d304e4a67002c2ce54940c073760a03f16
ldns-utils-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: b1ed33535e495845bb386bb19db3876eaa5b90140d50033be437c5710f8a9794
ldns-utils-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 36b9bb3dce2d755d7bd8bb01d80322adf33ac76218ff6291b3fe569f50322761
perl-ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: e099c2cb892e13382514edebfadcb803c6424aab99ee766837ce77b41d68ee8f
perl-ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: a25875d79f937d5932b09079f0b3a03359c7d4a4ce9b3746ce6bc78e9107f638
python3-ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: 0b33a196a6f32a50f2214e745d92ed0066da94ef9297a5bed7f79c9dbc8aa2c5
python3-ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 4b3e705a12a207a9168cb9b1630383d77ab044dc46b428ea7b294a1ff54359d8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
aarch64
ldns-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: c13f4bcb5cb2bf720844b67e14dfc9faaf9327d26ed3e793af8a83945c401b46
ldns-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 3558d9fa82aa73e7be84fe07f035d789cfa2305c76b11bb21e5c383e888850d8
ldns-debugsource-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 364c5ff9a915697ea3a18a94fb17f366c653cd4525f4ad6152c9fe800891e32f
ldns-utils-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 88504b382d34c98044b551edec1213ad22c5c0fe3c07e7e4f05bf403e3f2ffbc
perl-ldns-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 7c131ce46d95d4b76701c2f87dc7ab1c1503c52e3752c3e7f918d4f070e7f1e8
python3-ldns-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 0c1fcb94f9a8720493d4ad3423c0d9a1c1a58206cc3e86387ff7800991e5f91a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
s390x
ldns-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 71f013de5982d5370213eb3fc255736ab6b6426e950ecf55060485ef915eb132
ldns-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 6e1581ab9373e401337d3ce7f43e3b49ddf833487e457d20de4bab5cb9591dc3
ldns-debugsource-1.7.1-11.el9_2.1.s390x.rpm SHA-256: bc9702fa371442e4ca411abb5a3a326cacb3d2c02802b4add8cd8179f9a4e640
ldns-utils-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 745bb4ec828c8943f07b4d91138eeb17368f4666d52ca39fb432a5f8445da583
perl-ldns-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 6030d4b4f224552d0c02604a6ae5d85b430c47061919f0d5db14ef0ffb10e088
python3-ldns-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: dbf67ff4ee41fd1bbca2c0b1be0e6f42571ad2735fb65628277f7c94ad90f986

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
x86_64
ldns-1.7.1-11.el9_2.1.i686.rpm SHA-256: f0f5dd8df21269581f62533f93c779196db04a4caa726340f0b59ab66eb20192
ldns-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 2005d9ff1bceeb2395c8b9c968ff9e5b802036c526b01d5abe11e50dff85b748
ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: 877e6acc01b22fdf2d988a3d7c48d4baeeee864ce9fbcad36a55d0c5d55a6228
ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: ae60dd9d4c1571044d959b0f6a445a8912b8cfd2665feffaf8f9ce64d0ce1e86
ldns-debugsource-1.7.1-11.el9_2.1.i686.rpm SHA-256: d308bd82bfcea5444fd3d9e68a22f46f7aae057f34444ec7f20194490fea1b94
ldns-debugsource-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 20c1e722c96e730c278ba0d33c0f15d304e4a67002c2ce54940c073760a03f16
ldns-utils-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: b1ed33535e495845bb386bb19db3876eaa5b90140d50033be437c5710f8a9794
ldns-utils-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 36b9bb3dce2d755d7bd8bb01d80322adf33ac76218ff6291b3fe569f50322761
perl-ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: e099c2cb892e13382514edebfadcb803c6424aab99ee766837ce77b41d68ee8f
perl-ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: a25875d79f937d5932b09079f0b3a03359c7d4a4ce9b3746ce6bc78e9107f638
python3-ldns-debuginfo-1.7.1-11.el9_2.1.i686.rpm SHA-256: 0b33a196a6f32a50f2214e745d92ed0066da94ef9297a5bed7f79c9dbc8aa2c5
python3-ldns-debuginfo-1.7.1-11.el9_2.1.x86_64.rpm SHA-256: 4b3e705a12a207a9168cb9b1630383d77ab044dc46b428ea7b294a1ff54359d8

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
aarch64
ldns-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: c13f4bcb5cb2bf720844b67e14dfc9faaf9327d26ed3e793af8a83945c401b46
ldns-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 3558d9fa82aa73e7be84fe07f035d789cfa2305c76b11bb21e5c383e888850d8
ldns-debugsource-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 364c5ff9a915697ea3a18a94fb17f366c653cd4525f4ad6152c9fe800891e32f
ldns-utils-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 88504b382d34c98044b551edec1213ad22c5c0fe3c07e7e4f05bf403e3f2ffbc
perl-ldns-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 7c131ce46d95d4b76701c2f87dc7ab1c1503c52e3752c3e7f918d4f070e7f1e8
python3-ldns-debuginfo-1.7.1-11.el9_2.1.aarch64.rpm SHA-256: 0c1fcb94f9a8720493d4ad3423c0d9a1c1a58206cc3e86387ff7800991e5f91a

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
ppc64le
ldns-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 87e818c496f394ac39710e225c424d1a2d967bbdc528faa8407d72474e658c93
ldns-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 89b0b3b8b9aca326ab368aef579b9c691c7615d791d839fee3b96ef6890b5d2d
ldns-debugsource-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 0bcb1668a5894e98f5d4dbd818b825d8fe33319115aa653968d85a8d7c317ec4
ldns-utils-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 45d3dc58c747ff3e0212c546f4e6343156f89234de076923306d59b756a2d287
perl-ldns-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 2a47466f6ab425efc67070a6e43de608a4e5bc19142e7c2d6a9340194ed034fb
python3-ldns-debuginfo-1.7.1-11.el9_2.1.ppc64le.rpm SHA-256: 90d3367f656cdf8e58e409ebdfb08dedeb6a45da9d4e97ef9b5eba146e13a78b

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2

SRPM
ldns-1.7.1-11.el9_2.1.src.rpm SHA-256: deb5b57a7fde627a27cb237aa758aa212bf083b394f1c88be6181b6695637d3f
s390x
ldns-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 71f013de5982d5370213eb3fc255736ab6b6426e950ecf55060485ef915eb132
ldns-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 6e1581ab9373e401337d3ce7f43e3b49ddf833487e457d20de4bab5cb9591dc3
ldns-debugsource-1.7.1-11.el9_2.1.s390x.rpm SHA-256: bc9702fa371442e4ca411abb5a3a326cacb3d2c02802b4add8cd8179f9a4e640
ldns-utils-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 745bb4ec828c8943f07b4d91138eeb17368f4666d52ca39fb432a5f8445da583
perl-ldns-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: 6030d4b4f224552d0c02604a6ae5d85b430c47061919f0d5db14ef0ffb10e088
python3-ldns-debuginfo-1.7.1-11.el9_2.1.s390x.rpm SHA-256: dbf67ff4ee41fd1bbca2c0b1be0e6f42571ad2735fb65628277f7c94ad90f986

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.