Most recent entries from all

ALSA-2026:70754 — Critical: unbound security update

Affected: AlmaLinux:8: python3-unbound, AlmaLinux:8: unbound, AlmaLinux:8: unbound-devel, AlmaLinux:8: unbound-libs

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-369395

fkie_cve-2026-81642

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.

GHSA-xxc4-rpp8-3fw7

msrc_CVE-2026-81642 — Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

msrc_CVE-2026-81642

OESA-2026-4130 — unbound security update

Affected: openEuler:24.03-LTS-SP4: unbound, openEuler:20.03-LTS-SP4: unbound, openEuler:22.03-LTS-SP4: unbound, openEuler:24.03-LTS-SP1: unbound, openEuler:24.03-LTS-SP3: unbound

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn&apos;t make custom builds or provide specific features to paying customers only. Security Fix(es):

openSUSE-SU-2026:11930-1 — libunbound8-1.26.1-1.1 on GA media

libunbound8-1.26.1-1.1 on GA media

RHSA-2026:68590 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

unbound: Unbound: Denial of Service via 'serve-expired' code path bypass unbound: Unbound: ZONEMD verification bypass due to asynchronous DNSSEC resolution unbound: Unbound: Denial of Service via use-after-free in DoQ stream output buffer unbound: Unbound: Denial of Service via continuous queries on TCP/DoT connection unbound: Unbound: Heap buffer overflow via malicious DNSSEC response unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup unbound: Unbound: Denial of Service via algorithmic complexity attacks on DNSSEC

RLSA-2026:70754 — Critical: unbound security update

Affected: Rocky Linux:8: unbound

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717)

* unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634)

* unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-81642

Affected: Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:26.04:LTS: unbound

WID-SEC-W-2026-3392 — Unbound: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Speicher zu korrumpieren, einen Denial of Service zu verursachen oder Code auszuführen.