Skip to content
OpenAdvisories
Critical ALSA-2026:71419 3 CVEs

Critical: unbound security update

Published Sep 24, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717)
* unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634)
* unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 7

ReleasePackageFixed in
AlmaLinux · 10 python3-unbound 1.24.2-7.el10_2.6
AlmaLinux · 10 unbound 1.24.2-7.el10_2.6
AlmaLinux · 10 unbound-anchor 1.24.2-7.el10_2.6
AlmaLinux · 10 unbound-devel 1.24.2-7.el10_2.6
AlmaLinux · 10 unbound-dracut 1.24.2-7.el10_2.6
AlmaLinux · 10 unbound-libs 1.24.2-7.el10_2.6
AlmaLinux · 10 unbound-utils 1.24.2-7.el10_2.6

Vulnerabilities 3

  • Critical 9.1
    CVE-2026-81642 Public exploit

    Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

    In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • High 8.4
    CVE-2026-82717

    CNAME synthesis could lead to heap corruption

    In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis duri…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2026-81634

    Possible heap buffer overflow during DNSSEC canonicalization

    In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length chec…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-81634
  • report
    https://access.redhat.com/security/cve/CVE-2026-81642
  • report
    https://access.redhat.com/security/cve/CVE-2026-82717
  • report
    https://bugzilla.redhat.com/2535051
  • report
    https://bugzilla.redhat.com/2535054
  • report
    https://bugzilla.redhat.com/2535059
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-71419.html