Red Hat Security Advisory

RHSA-2026:24365

unbound security update

Released 2026-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-5.11.el8_10, unbound-1.16.2-5.11.el8_10, unbound-devel-1.16.2-5.11.el8_10 +1

Fixes 2 records

TI-2026-31146 CVE-2026-42959 · GHSA-5jp8-75xr-qrmf

Crash during DNSSEC validation of malicious content

MEDIUM 45

NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00807 Published 2026-05-20 Partial fix · 1.25.1 CWE-824

TI-2026-31135 CVE-2026-42944 · GHSA-7mmq-q3m9-jrv7

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

MEDIUM 45

NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00842 Published 2026-05-20 Partial fix · 1.25.1 CWE-197