UBUNTU-CVE-2026-56416

In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded domain name as 'datstart + dnamevaliddatstart, ...' and passes it straight to 'querydnametolower'...

CVE-2026-56416

creationtimestamp| type| source ---|---|--- 2026-07-22 13:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrahrrt6bq2e 2026-07-23 08:41:15+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrcgvzpmty2m 2026-07-23 08:41:17+00:00| seen|...