This update for ldns fixes the following issue
- CVE-2026-10846: when ldns is used by applications for (stub) resolving, it does not sufficiently verify that received
responses belong to a sent query (bsc#1267670).
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-958=1
- openSUSE Leap 16.0:
ldns-1.8.4-160000.3.1
ldns-devel-1.8.4-160000.3.1
libldns3-1.8.4-160000.3.1
perl-DNS-LDNS-1.8.4-160000.3.1
python3-ldns-1.8.4-160000.3.1
* bsc#1267670
References:
* https://www.suse.com/security/cve/CVE-2026-10846.html
Get the latest Linux and open source security news straight to your inbox.