[CLSA-2026:1789042546] Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-10 12:16:01 UTC
Description:
* SECURITY UPDATE: Possible remote code execution during DNSSEC validation - debian/patches/CVE-2026-33278.patch: Possible remote code execution during DNSSEC validation - CVE-2026-33278 * SECURITY UPDATE: Ghost domain name variant - debian/patches/CVE-2026-40622.patch: Ghost domain name variant - CVE-2026-40622 * SECURITY UPDATE: Parsing a long list of incoming EDNS options degrades performance - debian/patches/CVE-2026-41292.patch: Parsing a long list of incoming EDNS options degrades performance - CVE-2026-41292 * SECURITY UPDATE: Crash during DNSSEC validation of malicious content - debian/patches/CVE-2026-42959.patch: Crash during DNSSEC validation of malicious content - CVE-2026-42959 * SECURITY UPDATE: Possible cache poisoning attack while following delegation - debian/patches/CVE-2026-42960.patch: Possible cache poisoning attack while following delegation - CVE-2026-42960 * SECURITY UPDATE: Degradation of resolution service when discard-timeout and serve-expired-client-timeout are combined - debian/patches/CVE-2026-56444.patch: Degradation of resolution service when discard-timeout and serve-expired-client-timeout are combined - CVE-2026-56444
CVEs fixed:
Updated packages:
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els2_amd64.deb
    sha:5aa7d04529da99c9e8101b9f315d788b78ab632a
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els2_amd64.deb
    sha:5a515213ff234653dcc82bf7e0ed6336a1923a4b
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els2_amd64.deb
    sha:c424b57d995943894fbdd078deaaa5e32764aec7
  • unbound_1.13.1-1+deb11u7+tuxcare.els2_amd64.deb
    sha:c3e6c0ddefd48a92b7623b97e15563f1a861a4c9
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els2_amd64.deb
    sha:9d8a9a0fde07412496d851118d929d22846b3cc3
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els2_amd64.deb
    sha:60cdad1311481bdbc4f6532a42c1774408f013ee
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els2_arm64.deb
    sha:999b0e92e2e778898e31b1cc1a153494b1e6d759
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els2_arm64.deb
    sha:755a89303c0d973265bd9c50efde85a49a14aabc
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els2_arm64.deb
    sha:1d232f60644b41d9e749caac75bd9a58ae8b7c15
  • unbound_1.13.1-1+deb11u7+tuxcare.els2_arm64.deb
    sha:0f1e9a358b19f88e42f55bffa520db4f4f94d73e
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els2_arm64.deb
    sha:5ab90602b7213fcf605da8a321c0edf1f6fb1a28
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els2_arm64.deb
    sha:94385a175660ce9e3fdbd3d969f2a40cead916e1
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els2_armel.deb
    sha:26bf4c4891e0ddb78db4e42718be8683b873de97
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els2_armel.deb
    sha:0f7ba54c644a5448c1e58b271a373b89124dc667
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els2_armel.deb
    sha:2c5ae5e299c980bd88201d997f90cae889f5d51a
  • unbound_1.13.1-1+deb11u7+tuxcare.els2_armel.deb
    sha:37a3e81d0e0bf3fda0b528881c71c4269715c89d
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els2_armel.deb
    sha:211f412f8deba05eafdc31b69589a6ad35dc6723
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els2_armel.deb
    sha:fc8601aa50979975851d2f31a06f3db391b4d6bf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.