Skip to content
OpenAdvisories
High RLSA-2026:55784 1 CVE

Important: unbound security update

Published Aug 18, 2026 · Updated Aug 18, 2026

Ecosystem: Rocky Linux

Summary

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 unbound 0:1.16.2-5.14.el8_10

Vulnerabilities 1

  • High 7.5
    CVE-2026-44690

    Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

    In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a sin…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2503063
  • advisory
    https://access.redhat.com/errata/RHSA-2026:55784