Summary
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
* unbound: Unbound Cache poisoning (CVE-2025-5994)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | python3-unbound | 1.20.0-12.el10_0 |
| AlmaLinux · 10 | unbound | 1.20.0-12.el10_0 |
| AlmaLinux · 10 | unbound-anchor | 1.20.0-12.el10_0 |
| AlmaLinux · 10 | unbound-devel | 1.20.0-12.el10_0 |
| AlmaLinux · 10 | unbound-dracut | 1.20.0-12.el10_0 |
| AlmaLinux · 10 | unbound-libs | 1.20.0-12.el10_0 |
Vulnerabilities 1
-
High 8.7
Cache poisoning via the ECS-enabled Rebirthday Attack
A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send E…