Python-Dns Security Update — AlmaLinux 8 (ALSA-2026:94749)
ALSA-2026:94749 updates the Python dns (dnspython) package on AlmaLinux 8, fixing CVE-2026-114605 in DNS resolution handling. Update with dnf update python3-dns and restart Python applications that perform DNS lookups.
Was das unter einer SharedLicense-Lizenz bedeutet
DNS resolution flaws in a Python library affect every application doing lookups — crafted responses or names can crash or misdirect resolution, undermining anything relying on correct DNS answers.
Type:
security
Severity:
important
Release date:
2026-11-04
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal (CVE-2026-114605)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
| Architecture | Package | Checksum |
| noarch | python3-dns-1.15.0-13.el8_10.noarch.rpm | a1b17c30a2eade104842eeae71440c018590f749368d3ca8a5fde8940ddfecc2 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Häufig gestellte Fragen
What is CVE-2026-114605?
Who is affected?
How do I apply the fix?
Why does DNS handling keep producing CVEs?
Referenzen
System auf Schwachstellen prüfen
Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.
System prüfen