Release date:
2026-10-24 02:48:24 UTC
Description:
- CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache (Rebirthday attack)
- CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain)
- CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus
- CVE-2026-96405: add a per-packet budget for name decompression pointers
- CVE-2026-109125: clear pending queries on a port when the unwanted-reply threshold is hit
- CVE-2026-35501: fix NSEC-not-at-apex parent-side key lookup for island trust anchors
Updated packages:
-
unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:ec65d4a617a4105e4eef17dde1382c294e91000590ca5b867644e8fe48a5124e
-
unbound-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:45bc62e58ef7531d9931cf68bf33733cab5ee3f46d36dd5c344bc751a1fc3d55
-
unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:d547e6cf0ac37cb973d8631d39869029f1898b08931c4fbf0526e263fae7cac6
-
unbound-devel-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:53f3dcbb884b014c86cd285baee57b95eaac42a3be291abad57adffff785e95e
-
unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:8d2c11a8513a5754a3f60eeb228280f0bb6ac025ca4c71e19b9d1f287863b210
-
unbound-libs-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:3005e47822ec835529ddacf69b01ef5e1d61bfa8bb55be9c36c0018fc9b97435
-
unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.i686.rpm
sha:0de96437801eb69332fbfd950608b8501d31ebf0fefcd77600ab2090cbe63cbe
-
unbound-python-1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64.rpm
sha:c0c0832939e1cad6b196fd5683eaa29cef89355c71b2e8721d9c1921d34c0c93
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
