Red Hat Security Advisory

RHSA-2026:55841

unbound security update

Released 2026-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.24.2-3.el9_8.4, unbound-1.24.2-3.el9_8.4, unbound-dracut-1.24.2-3.el9_8.4 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) unbound-devel-1.24.2-3.el9_8.4

Fixes 2 records

TI-2026-40374 CVE-2026-55973 · GHSA-g479-fg97-pf5w

'dns-error-reporting: yes' leads to stack buffer overflow

LOW 39

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response is read and uses the option's length as the length…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00281 Published 2026-07-22 Partial fix · 1.25.2 CWE-20

TI-2026-32581 CVE-2026-44690 · GHSA-jwg4-375h-655h

Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

LOW 38

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that perm…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00153 Published 2026-07-22 Partial fix · 1.25.2 CWE-345