CLSA-2026-1791278576

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791278576.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791278576
Upstream
Published
2026-10-06T09:23:07Z
Modified
2026-10-26T09:31:36Z
Summary
unbound: Fix of CVE-2026-85501
Details
  • CVE-2026-85501: bound the DNSSEC validation work per query (ReTrap): add the val-validation-attempts and val-hash-attempts limits (default 32), limit DNSKEY/RRSIG and DS key-tag matches and the NSEC/NSEC3 records checked per message, shorten oversized referral DS RRsets, stop validator restarts once the limits are hit, and require only the answer and authority sections to be secure; the built-in val-clean-additional default is now no, the shipped unbound.conf keeps val-clean-additional: yes
References

Affected packages

TuxCare:AlmaLinux:9.6
python3-unbound

Package

Name
python3-unbound
Purl
pkg:rpm/tuxcare/python3-unbound?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.16.2-19.el9_6.1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791278576.json"
unbound

Package

Name
unbound
Purl
pkg:rpm/tuxcare/unbound?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.16.2-19.el9_6.1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791278576.json"
unbound-devel

Package

Name
unbound-devel
Purl
pkg:rpm/tuxcare/unbound-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.16.2-19.el9_6.1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791278576.json"
unbound-dracut

Package

Name
unbound-dracut
Purl
pkg:rpm/tuxcare/unbound-dracut?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.16.2-19.el9_6.1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791278576.json"
unbound-libs

Package

Name
unbound-libs
Purl
pkg:rpm/tuxcare/unbound-libs?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.16.2-19.el9_6.1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791278576.json"