[ALSA-2026:70754] Critical: unbound security update
Type:
security
Severity:
critical
Release date:
2026-09-24
Description:
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 unbound-devel-1.16.2-5.14.el8_10.4.aarch64.rpm 15ccc99a1ab39219ac754a2462900c3ca35129d48dccf153027d4e3e6b4b7f8d
aarch64 python3-unbound-1.16.2-5.14.el8_10.4.aarch64.rpm 33860175c7de9b9e2b21cf9374d2f5cd2eb6d4cb8ee92a1f92b72db7402781bf
aarch64 unbound-libs-1.16.2-5.14.el8_10.4.aarch64.rpm 5b2ad2d2954a6341a35ec379dc045ea938e904ea78c75f1e890c38ed4f7bbfd4
aarch64 unbound-1.16.2-5.14.el8_10.4.aarch64.rpm 74a0331bd09058a60fe121aa1316ee3c26e60e23953e878d9c09f158fceebf35
i686 unbound-libs-1.16.2-5.14.el8_10.4.i686.rpm 8e665da77736ca54bf613107cbd4f5cb8da20b9b6bab804bd1f65f9ec2e6c2f1
i686 unbound-devel-1.16.2-5.14.el8_10.4.i686.rpm dd4c262d78a04c272ff49479e4422fead0f424d746c45f475e8282aad11cbad7
ppc64le unbound-1.16.2-5.14.el8_10.4.ppc64le.rpm 80eba6879614af8648a7e097195aad46c6dda469e53790bde4d43b2c91a1214d
ppc64le python3-unbound-1.16.2-5.14.el8_10.4.ppc64le.rpm 85e4f31debb534ed46876774c3c6d7251129cfd423824b2ee5776bb99e24d336
ppc64le unbound-devel-1.16.2-5.14.el8_10.4.ppc64le.rpm d104c781ec5c2c98f126798d9ed9c8e79184e489faab60ef0e49c5a27f5548fc
ppc64le unbound-libs-1.16.2-5.14.el8_10.4.ppc64le.rpm f33021f597197443df7fd5a0274edec9e689dec5d8e7dc1e481288b8104e1bd3
s390x python3-unbound-1.16.2-5.14.el8_10.4.s390x.rpm 4ad16bd15444fede08392c811565d15ca3113353d581852bfbfc931c5d7c4082
s390x unbound-libs-1.16.2-5.14.el8_10.4.s390x.rpm 940b514bc21a5bf48543e4d5c970090a553311f3b06b91517e9273967e5d57ef
s390x unbound-1.16.2-5.14.el8_10.4.s390x.rpm d01d69824a16d09b79a88722120ed3fc2ed93a407dc4fc57c0dc4b30cca21260
s390x unbound-devel-1.16.2-5.14.el8_10.4.s390x.rpm f8a09f2132e939ed7b54fcdc2321dcea6d70ab025987d80d5333d055ae05b60d
x86_64 unbound-devel-1.16.2-5.14.el8_10.4.x86_64.rpm 53d8d361775bccb838ff4f0148f9475e0a3d57184eb45e7b12b21105894b70c0
x86_64 unbound-1.16.2-5.14.el8_10.4.x86_64.rpm 5d815387a93dba670ffdcea345a0802f450e24969717b127f1a0e2bd9b2d0d08
x86_64 python3-unbound-1.16.2-5.14.el8_10.4.x86_64.rpm 63aa1320ca1bbb5cd8f54701ec947041e169f13317d702d676b70e84cb5e9ac3
x86_64 unbound-libs-1.16.2-5.14.el8_10.4.x86_64.rpm d5b4094c70f8416dd424b74070c03e19ce577fd01b7dae7b409fcff20896e9a7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.