Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 44 Dnsx Critical Update Denial of Service CVE-2026-33817

fedora
Calendar Grey July 20, 2026
Scroller Fedora
Fedora 44 updates dnsx to fix several issues, including a denial of service and cross-site scripting vulnerabilities.
Update to 1.3.0

Summary

Dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries

of your choice with a list of user-supplied resolvers.

Update Information:

Update to 1.3.0

Topics%20covered

Topics Covered

security advisory denial of service fedora cross site scripting important dnsx

Change Log

* Fri Jul 17 2026 Mikel Olasagasti Uranga - 1.3.0-1 - Update to 1.3.0 - Closes rhbz#2420897 * Wed Jul 15 2026 Fedora Release Engineering - 1.2.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Feb 2 2026 Maxwell G - 1.2.3-4 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 1.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 1.2.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Dec 17 2025 Mikel Olasagasti Uranga - 1.2.3-1 - Update to 1.2.3 - Closes rhbz#2420897

References


[ 1 ] Bug #2433990 - dnsx: FTBFS in Fedora rawhide/f44 https://bugzilla.redhat.com/show_bug.cgi?id=2433990 [ 2 ] Bug #2456017 - CVE-2026-33817 dnsx: go.etcd.io/bbolt: Denial of Service via index out-of-range error [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2456017 [ 3 ] Bug #2458982 - CVE-2026-5160 dnsx: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2458982 [ 4 ] Bug #2494342 - CVE-2026-27145 dnsx: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494342 [ 5 ] Bug #2495280 - CVE-2026-25681 dnsx: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2495280

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-902340971e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: dnsx
Product: Fedora 44
Version: 1.3.0
Release: 1.fc44
URL: https://github.com/projectdiscovery/dnsx
Summary: Dnsx is a fast and multi-purpose DNS toolkit

Topics%20covered

Topics Covered

security advisory denial of service fedora cross site scripting important dnsx

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.