Release date:
2026-10-24 02:56:17 UTC
Description:
- CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache (Rebirthday attack)
- CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain)
- CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus
- CVE-2026-96405: add a per-packet budget for name decompression pointers
- CVE-2026-109125: clear pending queries on a port when the unwanted-reply threshold is hit
- CVE-2026-35501: fix NSEC-not-at-apex parent-side key lookup for island trust anchors
Updated packages:
-
unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:bdaa68863944222db0452356a56c7cf6978d8762acc02765a64ab9eaecfc14cf
-
unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:138932e560680135fbeb4e5972e729bd6425d5fb1c8227d4aa3da8ba2837b588
-
unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:85efc055327987c91c7c37c1b61955d8fe36f9d555a556230d7de96d333a4c50
-
unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:cdae208b96733303d33eb7c0b9bf3c3a426bc77915f953e1da1914a63b0b86d1
-
unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:07f3e13de21ebf6fa76d4c997f7a60448a3c7161bd5c73f59e5a77a8b4c33428
-
unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:695f951574814a86d8425cc2864b6b7f86151e0c3b410aa02bdc95878cda772b
-
unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:0ea2f77d9b6f90a15c0f14126891bab5791f21b5f58ad9386c5f302dcd238482
-
unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:216e8a46ffa361e5c16b0c6b7ee88db097fb6fedf4f1b1a6313e96e5aaaa9215
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
