Red Hat Security AdvisoryRHSA-2025:12064
unbound security update
Released 2025-07-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) python3-unbound-1.20.0-12.el10_0, unbound-1.20.0-12.el10_0, unbound-anchor-1.20.0-12.el10_0 +2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) unbound-devel-1.20.0-12.el10_0
Fixes 1 record
Priority MEDIUM 43
A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS).
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00218 · Published 2025-07-16 · Partial fix · 1.23.0 CWE-349