RLSA-2026:24369

Опубликовано: 11 июн. 2026

Источник: rocky

Оценка: Important

Описание

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944)
unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959)
unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 9

Наименование	Архитектура	Релиз	RPM
python3-unbound	aarch64	3.el9_8.1	python3-unbound-1.24.2-3.el9_8.1.aarch64.rpm
unbound	aarch64	3.el9_8.1	unbound-1.24.2-3.el9_8.1.aarch64.rpm
unbound-dracut	aarch64	3.el9_8.1	unbound-dracut-1.24.2-3.el9_8.1.aarch64.rpm
unbound-libs	aarch64	3.el9_8.1	unbound-libs-1.24.2-3.el9_8.1.aarch64.rpm
python3-unbound	x86_64	3.el9_8.1	python3-unbound-1.24.2-3.el9_8.1.x86_64.rpm
unbound	x86_64	3.el9_8.1	unbound-1.24.2-3.el9_8.1.x86_64.rpm
unbound-dracut	x86_64	3.el9_8.1	unbound-dracut-1.24.2-3.el9_8.1.x86_64.rpm
unbound-libs	i686	3.el9_8.1	unbound-libs-1.24.2-3.el9_8.1.i686.rpm
unbound-libs	x86_64	3.el9_8.1	unbound-libs-1.24.2-3.el9_8.1.x86_64.rpm