Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python3-unbound | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python3-unbound-debuginfo | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | unbound | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | unbound-debuginfo | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | unbound-debugsource | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | unbound-dracut | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | unbound-libs | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | unbound-libs-debuginfo | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3-unbound-debuginfo | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | unbound-debuginfo | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | unbound-debugsource | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | unbound-devel | 0:1.24.2-2.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | unbound-libs-debuginfo | 0:1.24.2-2.el9 |
Vulnerabilities 2
-
High 7.5
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by…
-
Medium 5.7
Possible domain hijacking via promiscuous records in the authority section
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information fo…
References
-
article
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2279942
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2405706
-
article
https://issues.redhat.com/browse/RHEL-77716
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18931.json
-
report
https://access.redhat.com/security/cve/CVE-2024-33655
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-33655
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-33655
-
article
https://www.nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/
-
report
https://access.redhat.com/security/cve/CVE-2025-11411
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-11411
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11411
-
article
https://www.nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt