Red Hat Security Advisory

RHSA-2025:11849

unbound security update

Released 2025-07-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.16.2-19.el9_6.1, unbound-1.16.2-19.el9_6.1, unbound-dracut-1.16.2-19.el9_6.1 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) unbound-devel-1.16.2-19.el9_6.1

Fixes 1 record

TI-2025-05415 CVE-2025-5994 · GHSA-xrv5-2wwg-jp3r

Cache poisoning via the ECS-enabled Rebirthday Attack

MEDIUM 43

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00218 Published 2025-07-16 Partial fix · 1.23.0 CWE-349