Red Hat Security Advisory

RHSA-2026:72183

unbound security update

Released 2026-09-25 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) unbound-1.7.3-15.el8_4.4, unbound-libs-1.7.3-15.el8_4.4
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) unbound-1.7.3-15.el8_4.4, unbound-libs-1.7.3-15.el8_4.4

Fixes 1 record

TI-2026-56302 CVE-2026-81642 · GHSA-xxc4-rpp8-3fw7

Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

MEDIUM 49

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00962 Published 2026-09-16 Partial fix · 1.26.1 CWE-122