[CLSA-2026:1793163165] Fix CVE(s): CVE-2026-109125, CVE-2026-35501, CVE-2026-50106, CVE-2026-96405
Type:
security
Severity:
Moderate
Release date:
2026-10-28 04:52:59 UTC
Description:
* SECURITY UPDATE: clear pending queries on a port when the unwanted-reply threshold is hit - debian/patches/CVE-2026-109125.patch: clear pending queries on a port when the unwanted-reply threshold is hit - CVE-2026-109125 * SECURITY UPDATE: treat an unsigned parent denial of an island trust anchor as bogus - debian/patches/CVE-2026-50106.patch: treat an unsigned parent denial of an island trust anchor as bogus - CVE-2026-50106 * SECURITY UPDATE: fix NSEC-not-at-apex parent-side key lookup for island trust anchors - debian/patches/CVE-2026-35501.patch: fix NSEC-not-at-apex parent-side key lookup for island trust anchors - CVE-2026-35501 * SECURITY UPDATE: add a per-packet budget for name decompression pointers - debian/patches/CVE-2026-96405.patch: add a per-packet budget for name decompression pointers - CVE-2026-96405
CVEs fixed:
Updated packages:
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els6_amd64.deb
    sha:73c4e10fc1ff8714fcb4f790b26415d68c3298fc
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els6_amd64.deb
    sha:4686166abf9047e1af867af9a989c406df135176
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els6_amd64.deb
    sha:60d3914f1e3f8cfdcb5efdfd6fc7636cbc94d8a5
  • unbound_1.13.1-1+deb11u7+tuxcare.els6_amd64.deb
    sha:e0004e5c3530c6b947a560e4c1e232ef5c67ec93
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els6_amd64.deb
    sha:c485d8e8617ddf11193153a418dce51cb3693c1a
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els6_amd64.deb
    sha:a024d9338073eb534a53b5c70bc121891e3dda6e
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els6_arm64.deb
    sha:dfebe2bb2c4bbb10e6f1e4790dfdb256a5fe1330
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els6_arm64.deb
    sha:4406def84a245562f6ddede136ebd0c528d649c1
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els6_arm64.deb
    sha:23facab8a22e16fe697c0eb7b7ae932f80ce4bb3
  • unbound_1.13.1-1+deb11u7+tuxcare.els6_arm64.deb
    sha:3923a05ea4374cf46122795b45b61e4af5c2998f
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els6_arm64.deb
    sha:c21d28fbe807c27c4e4d83310286dd268d5f0361
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els6_arm64.deb
    sha:7a243350b55634aad03b3dd47bcf33bbd6dddb55
  • libunbound-dev_1.13.1-1+deb11u7+tuxcare.els6_armel.deb
    sha:a63354ff773953451a0cacd4195d2630f7bc4668
  • libunbound8_1.13.1-1+deb11u7+tuxcare.els6_armel.deb
    sha:c46f0396719d0c9f03421346d3b766d131bd86b7
  • python3-unbound_1.13.1-1+deb11u7+tuxcare.els6_armel.deb
    sha:e2284e276661feb34be11e2110af1ee6be443d67
  • unbound_1.13.1-1+deb11u7+tuxcare.els6_armel.deb
    sha:37bd3043237c05c4624b3bec0b2ecf9d8c568146
  • unbound-anchor_1.13.1-1+deb11u7+tuxcare.els6_armel.deb
    sha:1226ebdbd9f394406df45eeb391bedc4c357952b
  • unbound-host_1.13.1-1+deb11u7+tuxcare.els6_armel.deb
    sha:f27c9d90748511759a548c4fe09408cd39ea67ed
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.