RLSA-2026:94749: Important: python-dns security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal (CVE-2026-114605)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/python-dnsto a version that resolves this vulnerability.Fixed in 0:1.15.0-13.el8_10
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using the Rocky Linux python-dns package may be exposed if they process attacker-controlled DNS data. The issue is remotely exploitable and requires no privileges or user interaction.
What can an attacker do?
An attacker can trigger a denial of service through excessive traversal of DNS compression pointers. The provided severity vector indicates availability impact only; no confidentiality or integrity impact is identified.
How urgent is remediation?
The advisory rates the issue high severity with a CVSS score of 7.5. Apply the security update for rocky-linux/python-dns from the Rocky Linux advisory.