Red Hat Security Advisory

RHSA-2026:55784

unbound security update

Released 2026-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-5.14.el8_10, unbound-1.16.2-5.14.el8_10, unbound-devel-1.16.2-5.14.el8_10 +1

Fixes 1 record

TI-2026-32581 CVE-2026-44690 · GHSA-jwg4-375h-655h

Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

LOW 38

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that perm…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00153 Published 2026-07-22 Partial fix · 1.25.2 CWE-345