3 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104801)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104801 advisory. In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only o...
AZL-92961 CVE-2026-46582 affecting package unbound for versions less than 1.25.2-1
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...
CVE-2026-46582 A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...