Python-Dns Security Update — AlmaLinux 8 (ALSA-2026:94749)
ALSA-2026:94749 updates the Python dns (dnspython) package on AlmaLinux 8, fixing CVE-2026-114605 in DNS resolution handling. Update with dnf update python3-dns and restart Python applications that perform DNS lookups.
What this means under a SharedLicense license
DNS resolution flaws in a Python library affect every application doing lookups — crafted responses or names can crash or misdirect resolution, undermining anything relying on correct DNS answers.
Type:
security
Severity:
important
Release date:
2026-11-04
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal (CVE-2026-114605)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
| Architecture | Package | Checksum |
| noarch | python3-dns-1.15.0-13.el8_10.noarch.rpm | a1b17c30a2eade104842eeae71440c018590f749368d3ca8a5fde8940ddfecc2 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Frequently Asked Questions
What is CVE-2026-114605?
Who is affected?
How do I apply the fix?
Why does DNS handling keep producing CVEs?
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System