Red Hat Security Advisory

RHSA-2026:71460

unbound security update

Released 2026-09-24 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) unbound-1.16.2-19.el9_6.2, unbound-libs-1.16.2-19.el9_6.2

Fixes 1 record

TI-2026-56302 CVE-2026-81642 · GHSA-xxc4-rpp8-3fw7

Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

MEDIUM 49

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00962 Published 2026-09-16 Partial fix · 1.26.1 CWE-122