[CLSA-2026:1792811393] unbound: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-24 17:33:26 UTC
Description:
- CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache (Rebirthday attack) - CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain) - CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus - CVE-2026-96405: add a per-packet budget for name decompression pointers - CVE-2026-109125: clear pending queries on a port when the unwanted-reply threshold is hit - CVE-2026-35501: fix NSEC-not-at-apex parent-side key lookup for island trust anchors
CVEs fixed:
Updated packages:
  • unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.aarch64.rpm
    sha:dac15fa6cb819cde50aee27b25a389c91ab4d87b019539505a927b80de647f36
  • unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
    sha:a3a28c8606bf3786ddc7a6869e48c00879db228be6bea05015a68b67b95741c7
  • unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
    sha:d0c1d62482a7b644b55d371386570d5040e003d349aa489f2aa611bc9d0b40f1
  • unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.aarch64.rpm
    sha:e78926185447ccdc3210ffc83243af130a965622b1abbbf0e6ad384a52cd6d97
  • unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
    sha:68badedba9399d52e70418b1ffcbd2351782b569ccf78cdcff9812b8b51f4802
  • unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
    sha:baeee020f0b43d969da19bf368d693c4b57c7b3b65f1538143d97bcc00d6c688
  • unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.aarch64.rpm
    sha:c246a6f16502509d23340eaf8d70ae7da1b5c12eed2f11330e08d3776bcc50ca
  • unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
    sha:a2e7bcb2bd13a1e29746810dece2985461f0aec0bd8cbd64138aa624e5b556f6
  • unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
    sha:d6752b073fa7328d36c5d910c7e0c877789f5453f3efea03f60be833246a1ff7
  • unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.aarch64.rpm
    sha:5871c099760c307b44277d4b03ab305aca74c8433a4166e5e9bcfa4830cb03c7
  • unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
    sha:ac38d4334c88ec57c25eff3a5a200c4394fa41b472969fd62a1a0f7b7fe1937e
  • unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
    sha:4b79a4ffc3b31f75c5e033c725f2e32764ac700be7f25340309d29032b99ea07
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.