{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-42960: in scrub_normalize(), mark additional-section glue as allowed\n only for NS rrsets in the authority section, so address records can no longer\n be cached as a side effect of a delegation response\n- CVE-2026-80225: bound the number of pipelined queries drained from one TCP/DoT\n connection per event-loop visit to NUM_TCP_PER_SELECT and defer the remainder\n through a zero-delay timer, so a single connection can no longer monopolise a\n worker event loop\n- CVE-2026-85501: add the val-validation-attempts and val-hash-attempts limits\n (default 32 each) to bound DNSSEC signature and hash work per validation, and\n require only the answer and authority sections to be secure\n (reply_an_ns_rrsets_secure), so the additional section is no longer validated", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791175484.json" } ], "tracking": { "current_release_date": "2026-10-05T04:46:02Z", "generator": { "date": "2026-10-05T04:46:02Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791175484", "initial_release_date": "2026-10-05T04:46:02Z", "revision_history": [ { "date": "2026-10-05T04:46:02Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "unbound: Fix of 5 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-80225", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolizes a single worker's entire event loop for as long as its writes stay ahead of the drain.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-80225" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-80225.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-80225.txt" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T04:44:46.363163Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484", "product_ids": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-85501", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones are used to serve the algorithmic complexity vulnerabilities. NLnet Labs Unbound up to and including 1.26.0 is vulnerable to some of them. TagTrap, where the triple(Zone, Algo, KeyTag) matching mechanism introduces a significant attack vector when resolvers handle malicious responses containing numerous mismatched DNSKEY, RRSIG, and DS record. DelegationTrap, where constructing the chain-of-trust requires iterative validation of DNSKEY and DS records from the root zone downward. For deeply nested domains, this results in significant computational overhead. NsecTrap, where responses with excessive invalid NSEC records compel the resolver to validate each one. AdditionalTrap, where Unbound by default would try to DNSSEC validate the ADDITIONAL section as well. This can be exploited to waste validation resources by malicious users.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-85501" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-85501.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-85501.txt" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T04:44:46.363163Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484", "product_ids": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-42960", "cwe": { "id": "CWE-349", "name": "Acceptance of Extraneous Untrusted Data With Trusted Data" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be used to trick Unbound to cache such records. If an adversary is able to attach such records in a reply (i.e., spoofed packet, fragmentation attack) he would be able to poison Unbound's cache. A malicious actor can exploit the possible poisonous effect by injecting RRSets other than NS that are also accompanied by address records in a reply, for example MX. This could be achieved by trying to spoof a reply packet or fragmentation attacks. Unbound would then accept the relative address records in the additional section and cache them if the authority RRSet has enough trust at this point, i.e., in-zone data for the delegation point. Unbound 1.25.1 contains a patch with a fix that disregards address records from the additional section if they are not explicitly relevant only to authority NS records, mitigating the possible poison effect. This is a complement fix to CVE-2025-11411.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42960" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42960.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42960.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T04:44:46.363163Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484", "product_ids": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-81634", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-81634" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-81634.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-81634.txt" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T04:44:46.363163Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484", "product_ids": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-81642", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-81642" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T04:44:46.363163Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484", "product_ids": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791175484" } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }