SUSE-SU-2026:2462-1

Details

Description of the patch:

This update for ldns fixes the following issue

CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).

Affected Packages

ldns-devel

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

1.8.3-150600.3.3.1

libldns3

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

1.8.3-150600.3.3.1

perl-DNS-LDNS

SUSE Linux Enterprise Module for Development Tools 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

1.8.3-150600.3.3.1

ldns

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

1.8.3-150600.3.3.1

References

ADVISORY

https://bugzilla.suse.com/1267670

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-June/047436.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-10846/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262462-1/