SUSE-SU-2026:24128-1 Security update for unbound

This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. - CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission...

Oracle Linux 10 : unbound (ELSA-2026-71419)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71419 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Preven...

Oracle Linux 9 : unbound (ELSA-2026-71487)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71487 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

Oracle Linux 8 : unbound (ELSA-2026-70754)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70754 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

unbound security update

1.24.2-3.8 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-3.7 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Add unit tests for vulnerabilities too...

unbound security update

1.16.2-5.14.4 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.16.2-5.14.3 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Add unit tests for vulnerabilities too...

unbound security update

1.24.2-23 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-22 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 1.24.2-21 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Add unit test for the vulnerability too...

CVE-2026-81634

NLnet Labs Unbound up to and including 1.26.0 is affected by a heap buffer overflow in the RRSet canonicalisation routine. The root cause is a missing first owner name in the buffer length check, which can be triggered by a 255-length query name combined with a large TCP response. Since canonical...