CVE-2026-56444

CVE-2026-56444 affects NLnet Labs Unbound 1.20.0 through 1.25.1. When configured with serve-expired: yes and serve-expired-client-timeout > discard-timeout > 0, the discard-timeout branch in the serve-expired logic fails to decrement the counter for aged client replies, unlike other branche...