Red Hat Security AdvisoryRHSA-2026:72199
unbound security update
Released 2026-09-26 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) unbound-1.6.6-5.el7_9.2, unbound-libs-1.6.6-5.el7_9.2, unbound-libs-1.6.6-5.el7_9.2.ppc
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) unbound-devel-1.6.6-5.el7_9.2, unbound-devel-1.6.6-5.el7_9.2.ppc, unbound-python-1.6.6-5.el7_9.2
Fixes 1 record
Priority MEDIUM 49
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs.
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00962 · Published 2026-09-16 · Partial fix · 1.26.1 CWE-122