{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache (Rebirthday attack)\n- CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain)\n- CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus\n- CVE-2026-96405: add a per-packet budget for name decompression pointers\n- CVE-2026-109125: clear pending queries on a port when the unwanted-reply threshold is hit\n- CVE-2026-35501: fix NSEC-not-at-apex parent-side key lookup for island trust anchors", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/advisories/2026/clsa-2026_1792947906.json" } ], "tracking": { "current_release_date": "2026-10-28T16:39:43Z", "generator": { "date": "2026-10-28T16:39:43Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792947906", "initial_release_date": "2026-10-25T17:05:07Z", "revision_history": [ { "date": "2026-10-25T17:05:07Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-28T16:39:43Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "unbound: Fix of 6 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product": { "name": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_id": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product": { "name": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_id": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-devel@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product": { "name": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_id": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-libs@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product": { "name": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_id": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-python@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product": { "name": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_id": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product": { "name": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_id": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-devel@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product": { "name": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_id": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-libs@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product": { "name": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_id": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-python@1.6.6-5.0.1.el7_8.tuxcare.els3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686" }, "product_reference": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" }, "product_reference": "unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686" }, "product_reference": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" }, "product_reference": "unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" }, "product_reference": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686" }, "product_reference": "unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686" }, "product_reference": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" }, "product_reference": "unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-40622", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to one cached TTL configured value. Similar to other 'ghost domain names' attacks, an adversary needs to control a (ghost) zone and be able to query a vulnerable Unbound. A single client NS query can cause Unbound to overwrite the cached expired parent-side referral NS rrset with the child-side apex NS rrset and essentially extend the ghost domain window by up to one cached TTL configured value ('cache-max-ttl'). In configurations where 'harden-referral-path: yes' is used (non-default configuration), no client NS query is required since Unbound implicitly performs that query. Unbound 1.25.1 contains a patch with a fix that does not allow extension of TTLs for (parent) NS records regardless of their trust.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40622" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-40622.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-40622.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T17:05:07.598561Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "product_ids": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-35501", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "description", "text": "When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor with a forged NSEC reply with the SOA bit cleared can trick Unbound to treat the configured trust island as insecure. This happens because the DNSSEC validator in Unbound accepts and caches the NSEC insecure response bypassing the RRSIG validation that the validator was supposed to do. The acceptance of the NSEC record at the trust anchor apex was allowed due to and old fix for type DS and NSEC queries from clients when trust anchor for that name existed.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-35501" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-35501.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-35501.txt" } ], "release_date": "2026-10-21T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T17:05:07.598561Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "product_ids": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-109125", "cwe": { "id": "CWE-205", "name": "Observable Behavioral Discrepancy" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but its TXID does not match any pending query, Unbound counts the packet as an unwanted reply. When the accumulated count reaches the configured threshold, Unbound clears the worker's RRset cache and message cache. This cache clear action does not destroy the current upstream UDP pending query. Therefore, an external observer can distinguish whether a candidate port matches the current upstream source port by checking whether an existing cached item has been cleared. This is a cache side-channel vulnerability that can be used to probe the upstream source port. Although the attack is not feasible on default configurations and the suggested value (10 million) makes it an ureliable attack on a public resolver, in scenarios where the attacker can keep a concurrent query window alive, the attacker can first filter the source port and then perform birthday-style guessing against the TXID, making cache poisoning a feasible attack path.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-109125" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-109125.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-109125.txt" } ], "release_date": "2026-10-21T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T17:05:07.598561Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "product_ids": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50106", "cwe": { "id": "CWE-807", "name": "Reliance on Untrusted Inputs in a Security Decision" }, "notes": [ { "category": "description", "text": "When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor who can deliver one forged NXDOMAIN response for a name inside the island, with the NSEC/SOA RRSIG 'SignerName' set to the insecure parent, tricks Unbound's validator to use the root trust anchor instead, and consecutively the insecure parent, thus causing that record to be treated as insecure and denying existence for records in the trust island.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50106" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-50106.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-50106.txt" } ], "release_date": "2026-10-21T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T17:05:07.598561Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "product_ids": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-5994", "cwe": { "id": "CWE-349", "name": "Acceptance of Extraneous Untrusted Data With Trusted Data" }, "notes": [ { "category": "description", "text": "A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-5994" }, { "category": "external", "summary": "https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt", "url": "https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00019.html" } ], "release_date": "2025-07-16T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T17:05:07.598561Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "product_ids": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-96405", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious actor with recursive-query access and control of an ordinarily delegated authority that serves specially crafted replies can exploit the vulnerability and degrade Unbound's general performance.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-96405" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-96405.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-96405.txt" } ], "release_date": "2026-10-21T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T17:05:07.598561Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906", "product_ids": [ "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-devel-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-libs-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.i686", "CloudLinux-7:unbound-python-0:1.6.6-5.0.1.el7_8.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792947906" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }