[CLSA-2026:1791654193] Fix CVE(s): CVE-2026-80225, CVE-2026-81634
Type:
security
Severity:
Important
Release date:
2026-10-10 17:43:26 UTC
Description:
* SECURITY UPDATE: Denial of service via unbounded consecutive reads on a TCP/DoT connection - debian/patches/CVE-2026-80225.patch: limit the number of pipelined TCP/DoT queries drained per event loop turn and defer the rest with a zero-delay timer - CVE-2026-80225 * SECURITY UPDATE: Heap buffer overflow during DNSSEC RRset canonicalisation - debian/patches/CVE-2026-81634.patch: check the RRSIG rdata, the first owner name and each RR's rdata against the remaining buffer space in rrset_canonical() - CVE-2026-81634
CVEs fixed:
Updated packages:
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els5_amd64.deb
    sha:0b14da476414f449078c4974e4fd1d7582eb7809
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els5_amd64.deb
    sha:1c1e68933c550596fc4c2c2a2f944e55d62988a8
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els5_amd64.deb
    sha:cb239d8aa19072ede3de6ba1289fc45388484ef0
  • unbound_1.13.1-1+deb11u7+tuxcare.els5_amd64.deb
    sha:870f92eb8509c909672a314b70d3c3ee296f3bc3
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els5_amd64.deb
    sha:4bd4d1007bebdca0d847a5ea55c031709bff6be8
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els5_amd64.deb
    sha:09b6198ba17e9bfc26cd116cbedb9684d3685482
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els5_arm64.deb
    sha:61c84db8de67600f6a29842b293a72dc38b6fe4a
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els5_arm64.deb
    sha:7022fc5b81463c6805b7707d1acbd04f0e3cb9da
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els5_arm64.deb
    sha:fefe079c7d8a09388d5cafd7e83e68d212941213
  • unbound_1.13.1-1+deb11u7+tuxcare.els5_arm64.deb
    sha:36fe2c92857fc08de3bbbf42b7c5201524798d29
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els5_arm64.deb
    sha:a46afa93700df593f901383b634eca6daa232242
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els5_arm64.deb
    sha:0bdedbe574ce8b7538b42e89809fcd81895fedd2
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els5_armel.deb
    sha:f086ee6ab174bc5cb5fea1a9b1900ce006112540
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els5_armel.deb
    sha:cbbcb80503e2e195da233b53f0f59d37d293394f
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els5_armel.deb
    sha:ec5e7af8db85eff301c289c32e8684fd0134e7de
  • unbound_1.13.1-1+deb11u7+tuxcare.els5_armel.deb
    sha:2af99cf5b9aacbb16508638ae9bbf053a6100715
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els5_armel.deb
    sha:21ce66121742d583309f772163fefba3e6c48aa2
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els5_armel.deb
    sha:721b7ffc1f2da2a3296fce822f8fb678370cfb10
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.