Release date:
2026-10-25 21:37:04 UTC
Description:
- CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache (Rebirthday attack)
- CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain)
- CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus
- CVE-2026-96405: add a per-packet budget for name decompression pointers
- CVE-2026-109125: clear pending queries on a port when the unwanted-reply threshold is hit
- CVE-2026-35501: fix NSEC-not-at-apex parent-side key lookup for island trust anchors
Updated packages:
-
unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:6f3ae3d2f5e102a57595f414c3535e206857ad54cd4c1cc1d5c4d1a21f2f2af7
-
unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:ff98dca5c25ea3431588fcaf559fc67d81b1abebbf97eb8e8db1834ff8e53307
-
unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:8fd0a2af6b80e30a4aad4b4de1b43b3de99c688a05555c8b8f1dbc2ee6498a15
-
unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:dad595bc59d2e2c42292f9613c65dc2b7c98dcf74dfbeb60386f9b0ac0a06a9d
-
unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:14a116119ef6102f18b72ad7ec566b7b638f91237f188eb07f2f857741802da1
-
unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:680680179537fbcbae7dd468603c6772ed0477563a0b0b0dfc7d410b1e7cf29c
-
unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:cc896778272505a3998a7f0bd6914d5cb1865661fa05562322ccdd7fe05c509b
-
unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:e8a0e5be4f97de2522461ecaf1dbffc02bdb537ce7e98430e6abf911c9d5ea76
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
