An update for python-dns is now available for openEuler-22.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4672 Final 1.0 1.0 2026-11-04 Initial 2026-11-04 2026-11-04 openEuler SA Tool V1.0 2026-11-04 python-dns security update An update for python-dns is now available for openEuler-22.03-LTS-SP4 \ Security Fix(es): dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial of service in applications that process untrusted DNS messages. This issue is fixed in version 2.9.0.(CVE-2026-114605) An update for python-dns is now available for openEuler-22.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High python-dns https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4672 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-114605 https://nvd.nist.gov/vuln/detail/CVE-2026-114605 openEuler-22.03-LTS-SP4 python-dns-2.2.1-4.oe2203sp4.src.rpm python-dns-help-2.2.1-4.oe2203sp4.noarch.rpm python3-dns-2.2.1-4.oe2203sp4.noarch.rpm dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial of service in applications that process untrusted DNS messages. This issue is fixed in version 2.9.0. 2026-11-04 CVE-2026-114605 openEuler-22.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H python-dns security update 2026-11-04 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4672