RHSA-2026:37282 — Security Advisory

Red Hat Security Advisory: unbound security update

Loading…

Severity

Important

Red Hat Product Security

RHEL 8

Products

Official CSAF product identity

Published · July 9, 2026

Updated · November 1, 2026

Topic

An update for unbound is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292)
unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622)
unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390)
unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.