{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-41292: cap parsed incoming EDNS options at 100 to prevent\n per-thread parse stalls under crafted long-option-list queries\n- CVE-2026-42944: de-duplicate NSID/Padding EDNS options at parse time\n to prevent heap overflow during EDNS encoding in attach_edns_record\n- CVE-2026-44608: hold the auth-zone read lock across nsip/nsdname\n trigger application in rpz_callback_from_iterator_module to avoid\n use-after-free under concurrent RPZ XFR reload", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.6esu/advisories/2026/clsa-2026_1780068958.json" } ], "tracking": { "current_release_date": "2026-05-29T15:37:21Z", "generator": { "date": "2026-05-29T15:37:21Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1780068958", "initial_release_date": "2026-05-29T15:37:21Z", "revision_history": [ { "date": "2026-05-29T15:37:21Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "unbound: Fix of 3 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.6", "product": { "name": "AlmaLinux 9.6", "product_id": "AlmaLinux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.6", "product": { "name": "Rocky Linux 9.6", "product_id": "Rocky Linux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_id": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.16.2-19.el9_6.1.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_id": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-19.el9_6.1.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_id": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-19.el9_6.1.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_id": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-19.el9_6.1.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_id": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.16.2-19.el9_6.1.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_id": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-19.el9_6.1.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_id": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-19.el9_6.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_id": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.16.2-19.el9_6.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_id": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-19.el9_6.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_id": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-19.el9_6.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_id": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-19.el9_6.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_id": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.16.2-19.el9_6.1.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els5?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els5?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "product": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "product_id": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-19.el9_6.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "product": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "product_id": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-19.el9_6.1.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64" }, "product_reference": "unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-32792", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt'). A bad DNSCrypt query could underflow Unbound's DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of '0x00' bytes and does not contain the expected '0x80' marker. Unbound would then start reading more bytes than necessary until it finds a non-'0x00' byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound's later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "known_affected": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-32792" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-32792.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-32792.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-05-29T15:36:01.324963Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-42959", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter to calculate write offsets for ADDITIONAL section rrsets. DNAME duplication could increase the ANSWER section count and authority filtering could decrease the AUTHORITY section count and create an uninitialized array slot. Combining these two, the validator later dereferences this uninitialized pointer, causing an immediate process crash. An adversary controlling a DNSSEC-signed domain can trigger this bug with a single query by configuring a DNAME chain with unsigned CNAMEs and a response containing unsigned AUTHORITY records alongside signed ADDITIONAL glue records. Unbound 1.25.1 contains a patch with a fix to use the proper counters to calculate the write offsets.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "known_affected": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42959" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42959.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42959.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-05-29T15:36:01.324963Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-44608", "cwe": { "id": "CWE-413", "name": "Improper Resource Locking" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR reload, RPZ zone with 'rpz-nsip'/'rpz-nsdname' triggers) it could result in heap use-after-free and eventual crash. An adversary can exploit the vulnerability if conditions are first met on a vulnerable Unbound, i.e., multi-threaded, an RPZ zone with 'rpz-nsip'/'rpz-nsdname' triggers and an ongoing XFR for that RPZ zone. Local RPZ files do not trigger the vulnerability. If the timing is right and an XFR happens at the same time another thread needs to read that RPZ zone, the reader may not hold the lock long enough and the thread applying the XFR may free objects that the reader is about to walk causing the use-after-free. Unbound 1.25.1 contains a patch with a fix to the locking code.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "known_affected": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-44608" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44608.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44608.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-05-29T15:36:01.324963Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-41292", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data structures for the options. Coordinated attacks can result in degradation and/or denial of service. Unbound 1.25.1 contains a patch with a fix to limit acceptable incoming EDNS options (100).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "known_affected": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-41292" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-41292.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-41292.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-05-29T15:36:01.324963Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-42944", "cwe": { "id": "CWE-197", "name": "Numeric Truncation Error" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', 'pad-responses' (default)) need to be enabled for the vulnerability to be exploited. An adversary who can query Unbound can exploit the vulnerability by attaching multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options to the query. A flaw in the size calculation of the EDNS field truncates the correct value which allows the encoder to overflow the available space when writing. Those two combined lead to a heap overflow write of Unbound controlled data and eventually a crash. Unbound 1.25.1 contains a patch with a fix to de-duplicate the EDNS options and a fix to prevent truncation of the EDNS field size calculation.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "known_affected": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42944" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42944.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42944.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-05-29T15:36:01.324963Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-44390", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above the root can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. An adversary can exploit the vulnerability by querying Unbound for the specially crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will try to apply name compression which was an unbounded operation that could lock the CPU until the whole packet was complete. A compression limit was introduced in 1.21.1 for this but it didn't account for the case where records would not share any suffix above the root. That causes Unbound to go in a different code path because of the compression tree lookup failure and eventually not increment the compression counter for those operations. Unbound 1.25.1 contains a patch with a fix that increments the compression counter regardless of the compression tree lookup. This is a complement fix to CVE-2024-8508.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "known_affected": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-44390" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44390.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44390.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-05-29T15:36:01.324963Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780068958" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els1.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "AlmaLinux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-devel-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-dracut-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.i686", "Rocky Linux-9.6:unbound-libs-0:1.16.2-19.el9_6.1.tuxcare.els5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }