[CLSA-2026:1791497664] Fix CVE(s): CVE-2026-85501
Type:
security
Severity:
Important
Release date:
2026-10-08 22:14:33 UTC
Description:
* SECURITY UPDATE: Denial of service via DNSSEC algorithmic complexity attacks (ReTrap) - debian/patches/CVE-2026-85501.patch: limit DNSKEY/RRSIG and DS/DNSKEY tag matches, DNSSEC validation and hash attempts and NSEC/NSEC3 validations, shorten oversized DS RRsets, stop validator restarts once a limit is hit, add the val-validation-attempts and val-hash-attempts options and change the val-clean-additional default to no - CVE-2026-85501
CVEs fixed:
Updated packages:
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els4_amd64.deb
    sha:4402279f44cd72556232a298248cd586f334a390
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els4_amd64.deb
    sha:698ec60602535dc3b63830a6198c72238b752ded
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els4_amd64.deb
    sha:24a81626a915a1fdca9b22b7b52626d6641b6113
  • unbound_1.13.1-1+deb11u7+tuxcare.els4_amd64.deb
    sha:0a5328d5caa54a9db47e58d7c9239d1832e15239
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els4_amd64.deb
    sha:7161b583ab07f7eb2c7dd18555bb24e318c0ac05
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els4_amd64.deb
    sha:62843069b51b95983073a4452ea88e7a622a1f13
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els4_arm64.deb
    sha:f8578acc838c645b51b26473a5bc46f2b5bfe464
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els4_arm64.deb
    sha:b7c146dc75e4b6d371863c520a6932aae6267910
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els4_arm64.deb
    sha:ffa9f95453becbc07ae3e18af0c10636bc01205e
  • unbound_1.13.1-1+deb11u7+tuxcare.els4_arm64.deb
    sha:35a55c3b6cca8be96bd9ff6d9abc6ea72ec922a9
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els4_arm64.deb
    sha:bc45992f59607c4bf55aee8a46e7fad4efac427b
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els4_arm64.deb
    sha:8b7a0a8737d01ea2ae37d444f73e85ee5adf240a
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els4_armel.deb
    sha:8972ff5122381cf403b90904659a8b7822c4d7ab
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els4_armel.deb
    sha:bc8a29634d5cb40d43a0c1f88697539f88fca7c1
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els4_armel.deb
    sha:36d8e08a2ca60df94d24a896c481c80600141e51
  • unbound_1.13.1-1+deb11u7+tuxcare.els4_armel.deb
    sha:b4801448fe10c09b93ce6fc23293adfcb35168e5
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els4_armel.deb
    sha:78585b959aa0080c8995d758a90914a8109ba74c
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els4_armel.deb
    sha:363104cfb4741384176dcfd09b17d79750727805
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.