Red Hat Security Advisory

RHSA-2025:12520

unbound security update

Released 2025-08-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) python3-unbound-1.13.1-13.el9_0.5, unbound-1.13.1-13.el9_0.5, unbound-libs-1.13.1-13.el9_0.5

Fixes 1 record

TI-2025-05415 CVE-2025-5994 · GHSA-xrv5-2wwg-jp3r

Cache poisoning via the ECS-enabled Rebirthday Attack

MEDIUM 43

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00218 Published 2025-07-16 Partial fix · 1.23.0 CWE-349