Release date:
2026-09-30 21:28:25 UTC
Description:
- CVE-2026-81634: check the remaining buffer space in rrset_canonical()
and rrset_canonicalize_to_buffer() before writing the signature, owner
name and RDATA, so an oversized RRset can no longer overflow the heap
buffer during DNSSEC canonicalization; includes the upstream unit test
- CVE-2026-80225: cap the pipelined queries drained from one TCP/DoT
connection per event-loop turn (NUM_TCP_PER_SELECT) and defer the rest
with a zero-delay timer, so one client can no longer starve other
connections
Updated packages:
-
python3-unbound-1.16.2-3.el9_2.tuxcare.els16.aarch64.rpm
sha:b5ddf07cf8482d7a76488f8f86171d58b354598003ff7acc2e6359b328b609e9
-
python3-unbound-1.16.2-3.el9_2.tuxcare.els16.i686.rpm
sha:ebb48f28d3d8a1a78d89f01cad406cc1f34d178dc96c5dea9a49789599df24ff
-
python3-unbound-1.16.2-3.el9_2.tuxcare.els16.x86_64.rpm
sha:0a59e09619d1327725b3b04302738f291f5cf2951de6635332858c00101f631f
-
unbound-1.16.2-3.el9_2.tuxcare.els16.aarch64.rpm
sha:4fce18a0a244f75d77698c8aa8e444599df41a7adb91bbb4ba7840e090edd5cd
-
unbound-1.16.2-3.el9_2.tuxcare.els16.i686.rpm
sha:3fbe51c82a13127661d39f5a268e76289e425608e57b3fd13ece81f079e384e1
-
unbound-1.16.2-3.el9_2.tuxcare.els16.x86_64.rpm
sha:63d5259f365eaac47de5823947daa8a83b66226f0946f1985d0f091a7196db84
-
unbound-devel-1.16.2-3.el9_2.tuxcare.els16.aarch64.rpm
sha:86f84dcf0fd2afa6c18a79f69fbf320f3e72bff0d9dfe8598f577a320d8e531f
-
unbound-devel-1.16.2-3.el9_2.tuxcare.els16.i686.rpm
sha:1ac2350e9f3dd17d6a87df70bc8ca5768412c0c39c92577768072cf8b6f24c5f
-
unbound-devel-1.16.2-3.el9_2.tuxcare.els16.x86_64.rpm
sha:0e44fbbc842762ef39bc010429b5771522702499bd497498df467b6460550d1d
-
unbound-libs-1.16.2-3.el9_2.tuxcare.els16.aarch64.rpm
sha:63ae43281bca42d8c092127736d4506bf28180262757adf1f80653c8e8a10af5
-
unbound-libs-1.16.2-3.el9_2.tuxcare.els16.i686.rpm
sha:69ea32e5b4d8f219bf01dfa7284124c2c34997f8586430703289f96d9c5493a3
-
unbound-libs-1.16.2-3.el9_2.tuxcare.els16.x86_64.rpm
sha:218d0a360321baeb1c0e3788604de9294e1543956043041b5ced150df74e5901
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
