CLSA-2026-1791327169
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791327169.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791327169
- Upstream
- Published
- 2026-10-08T21:56:57Z
- Modified
- 2026-10-26T09:43:27Z
- Summary
- unbound: Fix of 4 CVEs
- Details
-
- CVE-2026-81642: fix heap buffer overflow when digesting DNSKEY
- CVE-2026-81634: add the missing first owner name and signature length bounds checks to rrset_canonical(), preventing a heap buffer overflow during RRset canonicalisation
- CVE-2026-82717: restore the packet buffer position on malformed names in pkt_dname_len() and bound the copy lengths in rdata_copy(), preventing heap corruption on the CNAME synthesis error path
- CVE-2026-85501: bound DNSSEC validation work per query: key-tag matches capped at 256, NSEC/NSEC3 verifications at 8 per message, new val-validation-attempts and val-hash-attempts options (default 32), oversized referral DS RRsets shortened to 20, and val-clean-additional now defaults to no
- References
Affected packages
TuxCare:CentOS:7 / unbound
Package
- Name
- unbound
- Purl
- pkg:rpm/tuxcare/unbound?distro=centos-7
TuxCare:CentOS:7 / unbound-devel
Package
- Name
- unbound-devel
- Purl
- pkg:rpm/tuxcare/unbound-devel?distro=centos-7
TuxCare:CentOS:7 / unbound-libs
Package
- Name
- unbound-libs
- Purl
- pkg:rpm/tuxcare/unbound-libs?distro=centos-7