[CLSA-2026:1790784899] unbound: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-30 16:15:13 UTC
Description:
- CVE-2026-81634: bounds-check the scratch buffer in rrset_canonical() and rrset_canonicalize_to_buffer() before writing the RRSIG rdata, the first canonical owner name and each RR's rdata, so a large rrset can no longer be written past the end of the buffer - CVE-2026-80225: cap the number of pipelined TCP/DoT queries drained per event-loop visit in tcp_req_info_read_again() and tcp_more_read_again() and defer the remainder via a zero-delay timer, so one connection can no longer starve the other file descriptors
Updated packages:
  • python3-unbound-1.16.2-19.el9_6.1.tuxcare.els14.aarch64.rpm
    sha:94d97c375703d109747a0484ee4c92df92a1ccd08a022fb8d354af2d843c7d66
  • python3-unbound-1.16.2-19.el9_6.1.tuxcare.els14.i686.rpm
    sha:d898706e2d7ade9d0ff981ae167feaeb651e40287698f62a09d173fbfad1a94b
  • python3-unbound-1.16.2-19.el9_6.1.tuxcare.els14.x86_64.rpm
    sha:05c923020eed1ffbf8d46945fbc7d2621f782070c884cc5d0c851b96bfd90625
  • unbound-1.16.2-19.el9_6.1.tuxcare.els14.aarch64.rpm
    sha:1980791c0bec6d14aea8352cdf6dc8b8c16adb82984968d58be2a8e92d46ce06
  • unbound-1.16.2-19.el9_6.1.tuxcare.els14.i686.rpm
    sha:274045797e61330c176433dfb645464b63d708ad9673db3423be2f5e17152628
  • unbound-1.16.2-19.el9_6.1.tuxcare.els14.x86_64.rpm
    sha:0698ace1e8c1ef3a2e5609889c486e2fc4f3881c2b3c9d872d857822180f9d32
  • unbound-devel-1.16.2-19.el9_6.1.tuxcare.els14.aarch64.rpm
    sha:e98a8b5af5d060713052f9e2a969e9a573f40ee96a93393497f4b715f49f3e5d
  • unbound-devel-1.16.2-19.el9_6.1.tuxcare.els14.i686.rpm
    sha:9db71726b05cb03f9f00de9b66877c54e6be23eb4ac634f34b2f7b51d26f6c76
  • unbound-devel-1.16.2-19.el9_6.1.tuxcare.els14.x86_64.rpm
    sha:708122b44110dbd1a4677e0773958009b2b925eb80d68f4689bd12e7b3562d4e
  • unbound-dracut-1.16.2-19.el9_6.1.tuxcare.els14.aarch64.rpm
    sha:37fc4cf844f5d39a0cda96d556407b2c20480fe21e39d0101b6e76dd6a07be5b
  • unbound-dracut-1.16.2-19.el9_6.1.tuxcare.els14.i686.rpm
    sha:b73fdcddc2c2f3e081066b33678506d3624a543953c08cc227a7abe6abe940dc
  • unbound-dracut-1.16.2-19.el9_6.1.tuxcare.els14.x86_64.rpm
    sha:697429330404c162d28ad9e731b3c383378ef8eb1016e44f34c77f6a41b0322a
  • unbound-libs-1.16.2-19.el9_6.1.tuxcare.els14.aarch64.rpm
    sha:c21f25f199df0ad42edf65e9ae38e0b993b1c0d4ef40d02554b559f368f333de
  • unbound-libs-1.16.2-19.el9_6.1.tuxcare.els14.i686.rpm
    sha:fa184effae123245509782d8fad9f890ab980148dcc2b280be780796d0ec122b
  • unbound-libs-1.16.2-19.el9_6.1.tuxcare.els14.x86_64.rpm
    sha:ccc1ce7a706ba1b47814cef15cc0ccf7e05211bbe109e748c43ccb53b022b79f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.