{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2025-11411: scrub promiscuous NS RRsets from positive answers to\n prevent a possible domain hijacking attack; add the iter-scrub-promiscuous\n option (default yes) and extend the mitigation to YXDOMAIN and\n non-referral nodata answers", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1780509244.json" } ], "tracking": { "current_release_date": "2026-06-03T17:55:09Z", "generator": { "date": "2026-06-03T17:55:09Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1780509244", "initial_release_date": "2026-06-03T17:55:09Z", "revision_history": [ { "date": "2026-06-03T17:55:09Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "unbound: Fix of 4 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "product_id": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9_2.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "product_id": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9_2.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "product_id": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9_2.tuxcare.els6?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "product_id": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9_2.tuxcare.els6?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "product_id": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9_2.tuxcare.els5?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "product_id": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9_2.tuxcare.els5?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9_2.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9_2.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9_2.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_id": "unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9_2.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9_2.tuxcare.els6?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9_2.tuxcare.els6?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_id": "unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9_2.tuxcare.els6?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9_2.tuxcare.els6?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_id": "unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9_2.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9_2.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9_2.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9_2.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_id": "unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_id": "unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_id": "unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_id": "unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.16.2-3.el9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_id": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.16.2-3.el9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_id": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.16.2-3.el9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_id": "python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.16.2-3.el9.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-32792", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt'). A bad DNSCrypt query could underflow Unbound's DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of '0x00' bytes and does not contain the expected '0x80' marker. Unbound would then start reading more bytes than necessary until it finds a non-'0x00' byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound's later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "known_affected": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-32792" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-32792.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-32792.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-03T17:54:07.090262Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-11411", "cwe": { "id": "CWE-349", "name": "Acceptance of Extraneous Untrusted Data With Trusted Data" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are used to update the resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their respective address records) from replies mitigating the possible poison effect. Unbound 1.24.2 includes an additional fix that scrubs unsolicited NS RRSets (and their respective address records) from YXDOMAIN and non-referral nodata replies, further mitigating the possible poison effect.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "known_affected": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11411" } ], "release_date": "2025-10-22T12:28:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-03T17:54:07.090262Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244" }, { "category": "none_available", "date": "2025-10-22T12:28:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-44608", "cwe": { "id": "CWE-413", "name": "Improper Resource Locking" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR reload, RPZ zone with 'rpz-nsip'/'rpz-nsdname' triggers) it could result in heap use-after-free and eventual crash. An adversary can exploit the vulnerability if conditions are first met on a vulnerable Unbound, i.e., multi-threaded, an RPZ zone with 'rpz-nsip'/'rpz-nsdname' triggers and an ongoing XFR for that RPZ zone. Local RPZ files do not trigger the vulnerability. If the timing is right and an XFR happens at the same time another thread needs to read that RPZ zone, the reader may not hold the lock long enough and the thread applying the XFR may free objects that the reader is about to walk causing the use-after-free. Unbound 1.25.1 contains a patch with a fix to the locking code.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "known_affected": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-44608" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44608.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44608.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-03T17:54:07.090262Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-44390", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above the root can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. An adversary can exploit the vulnerability by querying Unbound for the specially crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will try to apply name compression which was an unbounded operation that could lock the CPU until the whole packet was complete. A compression limit was introduced in 1.21.1 for this but it didn't account for the case where records would not share any suffix above the root. That causes Unbound to go in a different code path because of the compression tree lookup failure and eventually not increment the compression counter for those operations. Unbound 1.25.1 contains a patch with a fix that increments the compression counter regardless of the compression tree lookup. This is a complement fix to CVE-2024-8508.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "known_affected": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-44390" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44390.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44390.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-03T17:54:07.090262Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1780509244" }, { "category": "none_available", "date": "2026-05-20T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els6.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els1.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els2.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els3.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9.tuxcare.els4.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els5.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:python3-unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-devel-0:1.16.2-3.el9_2.tuxcare.els8.x86_64", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.i686", "AlmaLinux-9.2:unbound-libs-0:1.16.2-3.el9_2.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }