Opened 101 minutes ago

Last modified 67 minutes ago

#24164 new enhancement

unbound-1.26.2 (sysv-only)

Reported by: zeckma Owned by: SecurityAdvisory
Priority: high Milestone: 13.2
Component: BOOK Version: git
Severity: high Keywords:
Cc:

Description

New point release.

This fixes multiple CVEs.

Defaulting to high until I get more information.

Change History (2)

comment:1 by zeckma, 81 minutes ago

Security Fixes

  • CVE-2026-35501 (Low): Configured island trust anchor bypassing
  • CVE-2026-50106 (Medium): Possible insecure NXDOMAIN
  • CVE-2026-96405 (Medium): Degradation of service via aggregate DNS name chained pointer decompression
  • CVE-2026-97206 (High): Use-after-free for DoQ path-migration in multi-threaded deployments
  • CVE-2026-109125 (Medium): Possible cache poisoning

comment:2 by zeckma, 67 minutes ago

Owner: changed from zeckma to SecurityAdvisory
Status: assigned → new

Fixed at d52f8353bb876f44cb4ea086e7fcda1f741c3296. Leaving open for security advisory.

Note: See TracTickets for help on using tickets.