Read the docs
Red Hat Security Advisory

RHSA-2026:19752

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-05-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2026-25690 CVE-2026-33278 · GHSA-m234-r435-cxjw

Possible arbitrary code execution during DNSSEC validation

Priority MEDIUM 50

NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0142 Published 2026-05-20 Partial fix · 1.25.1 CWE-416
TI-2026-31146 CVE-2026-42959 · GHSA-5jp8-75xr-qrmf

Crash during DNSSEC validation of malicious content

Priority MEDIUM 45

NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00807 Published 2026-05-20 Partial fix · 1.25.1 CWE-824
TI-2026-31135 CVE-2026-42944 · GHSA-7mmq-q3m9-jrv7

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

Priority MEDIUM 45

NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00842 Published 2026-05-20 Partial fix · 1.25.1 CWE-197
TI-2026-32517 CVE-2026-44608 · GHSA-fx8q-9cm5-75v9

Use after free and crash under special conditions in RPZ code

Priority LOW 21

NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR reload, RPZ zone with 'rpz-nsip'/'rpz-nsdname' triggers…

CVSS 4.0MEDIUM 4.6 Network No auth No interaction EPSS 0.00255 Published 2026-05-20 Partial fix · 1.25.1 CWE-413