Release date:
2026-10-06 09:23:07 UTC
Description:
- CVE-2026-85501: bound the DNSSEC validation work per query (ReTrap): add
the val-validation-attempts and val-hash-attempts limits (default 32),
limit DNSKEY/RRSIG and DS key-tag matches and the NSEC/NSEC3 records
checked per message, shorten oversized referral DS RRsets, stop validator
restarts once the limits are hit, and require only the answer and
authority sections to be secure; the built-in val-clean-additional
default is now no, the shipped unbound.conf keeps val-clean-additional: yes
Updated packages:
-
python3-unbound-1.16.2-19.el9_6.1.tuxcare.els15.aarch64.rpm
sha:abf08af614ad7eea37421b21efd017890d7775a7da86db95694c7b58cd05a800
-
python3-unbound-1.16.2-19.el9_6.1.tuxcare.els15.i686.rpm
sha:e8d8f010cc884401ac1d1247c882d1c67e07946b988cd6c92358830ac98cb1fe
-
python3-unbound-1.16.2-19.el9_6.1.tuxcare.els15.x86_64.rpm
sha:9de9fafa7530236a13acb6d8772079668c8a7cb047a7e9067111fc9a3f6cff9e
-
unbound-1.16.2-19.el9_6.1.tuxcare.els15.aarch64.rpm
sha:a02d391984f41aa1e8cf761e6abea1bbbbd8e63b80fcc6b00b4dcac501bbe49d
-
unbound-1.16.2-19.el9_6.1.tuxcare.els15.i686.rpm
sha:ef57dd9fb38d35be1f16988f5eabd945aed9fa3d35e861c287c3ec2eeca4930e
-
unbound-1.16.2-19.el9_6.1.tuxcare.els15.x86_64.rpm
sha:2317215f023bb5a38a652e22a9cfb38adbfeb3586c48e80ccb9c419998308beb
-
unbound-devel-1.16.2-19.el9_6.1.tuxcare.els15.aarch64.rpm
sha:2c5292db0f5d5d166772b0755a81b54b0707c63199c58edc3867ea3208abf466
-
unbound-devel-1.16.2-19.el9_6.1.tuxcare.els15.i686.rpm
sha:e7fffc033fc86e5223674c3458741937a9ab5aede0ba2a01c922f9422f054a9d
-
unbound-devel-1.16.2-19.el9_6.1.tuxcare.els15.x86_64.rpm
sha:30be1a734a1a6c4700db9c1b91f7171febf629354bf9a1d28aedc83b4086bc54
-
unbound-dracut-1.16.2-19.el9_6.1.tuxcare.els15.aarch64.rpm
sha:c84c30213c9b5a2be9bf032fa83e030bbb57a05bf95432805c76e5c70f3f280d
-
unbound-dracut-1.16.2-19.el9_6.1.tuxcare.els15.i686.rpm
sha:6891a6586a881114910584da6b9b43caf99669c8a5f6fbf43bfd40eb0a9099b6
-
unbound-dracut-1.16.2-19.el9_6.1.tuxcare.els15.x86_64.rpm
sha:810d15385f71a150f30d75c99eaf8814e7b2f1070d91ada5d90cb96f9d41faa0
-
unbound-libs-1.16.2-19.el9_6.1.tuxcare.els15.aarch64.rpm
sha:abb916999d2b1ef02f9306fa51c8837376f15abef7c4de17334f86030ba4de8d
-
unbound-libs-1.16.2-19.el9_6.1.tuxcare.els15.i686.rpm
sha:6432f47a0186a8258c0bfa6b282325e53c4bf28eb1890f690186b6ff7aba08a5
-
unbound-libs-1.16.2-19.el9_6.1.tuxcare.els15.x86_64.rpm
sha:25240346609b063d711146a8566cb3b23bcd804be7a7a99dffa049e0c21f9816
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
