Skip to content
OpenAdvisories
High RHSA-2026:55841 2 CVEs

Red Hat Security Advisory: unbound security update

Published Aug 18, 2026 · Updated Oct 19, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-unbound 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-unbound-debuginfo 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-debuginfo 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-debugsource 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-dracut 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-libs 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-libs-debuginfo 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb python3-unbound-debuginfo 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-debuginfo 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-debugsource 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-devel 0:1.24.2-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-libs-debuginfo 0:1.24.2-3.el9_8.4

Vulnerabilities 2

  • High 7.5
    CVE-2026-44690

    Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

    In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a sin…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2026-55973

    'dns-error-reporting: yes' leads to stack buffer overflow

    In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain nam…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2503063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2503075
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55841.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-44690
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44690
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44690
  • article
    https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44690.txt
  • report
    https://access.redhat.com/security/cve/CVE-2026-55973
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-55973
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-55973
  • article
    https://nlnetlabs.nl/projects/unbound/download/#unbound-1-25-2