Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. A KEY/DNSKEY record with PRIVATEDNS algorithm (253) and an overlong algorithm identifier can be stored, then crashes named when rendered to text. Requires UI:R (user interaction) — someone must first store the malformed record.
ISC DHCP is not affected by CVE-2026-10822. This is a BIND server-side issue specific to named's handling of KEY/DNSKEY records using the PRIVATEDNS algorithm (253); ISC DHCP does not store or render DNS key records in this manner. Additionally, the affected BIND versions start at 9.18.0, while ISC DHCP bundles bind-export-libs 9.11.36, which is below the affected range. ISC DHCP uses portions of the ISC BIND libraries (primarily libdns, omapi, and libisccfg) only to support DDNS (TSIG support, DNS message construction/parsing, DHCID generation), OMAPI-related operations, and basic functions (configuration handling, data structures, logging, networking primitives), not for DNS zone data handling or record-to-text rendering.