Photon OS 5.0: Unbound PHSA-2026-5.0-92-0943

An update of the unbound package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0943. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-55717

creationtimestamp| type| source ---|---|--- 2026-07-22 14:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrakkgvgsy2a...

CVE-2026-55717 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...