SUSE-SU-2026:4620-1
SUSE-SU-2026:4620-1 · Security update for unbound
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission (bsc#1280405). - CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). - CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). - CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). - CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). - CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). - CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for libunbound-devel-mini: - Updated to version 1.26.1 Changes for unbound: - Updated to version 1.26.1
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
unbound SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 1.26.1-150600.23.24.1
Mettez à jour vers 1.26.1-150600.23.24.1
unbound SUSE:Linux Enterprise Module for Package Hub 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 1.26.1-150600.23.24.1
Mettez à jour vers 1.26.1-150600.23.24.1
unbound SUSE:Linux Enterprise Server 15 SP6-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 1.26.1-150600.23.24.1
Mettez à jour vers 1.26.1-150600.23.24.1
unbound SUSE:Linux Enterprise Server for SAP Applications 15 SP6
- Plages de versions concernées
- ECOSYSTEM: < 1.26.1-150600.23.24.1
Mettez à jour vers 1.26.1-150600.23.24.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20264620-1/
- https://bugzilla.suse.com/1280403
- https://bugzilla.suse.com/1280404
- https://bugzilla.suse.com/1280405
- https://bugzilla.suse.com/1280406
- https://bugzilla.suse.com/1280409
- https://bugzilla.suse.com/1280411
- https://bugzilla.suse.com/1280412
- https://bugzilla.suse.com/1280413
- https://bugzilla.suse.com/1280414
- https://www.suse.com/security/cve/CVE-2026-50248
- https://www.suse.com/security/cve/CVE-2026-77860
- https://www.suse.com/security/cve/CVE-2026-77955
- https://www.suse.com/security/cve/CVE-2026-78227
- https://www.suse.com/security/cve/CVE-2026-80225
- https://www.suse.com/security/cve/CVE-2026-81634
- https://www.suse.com/security/cve/CVE-2026-81642
- https://www.suse.com/security/cve/CVE-2026-82717
- https://www.suse.com/security/cve/CVE-2026-82720
- https://www.suse.com/security/cve/CVE-2026-85501
- https://osv.dev/vulnerability/SUSE-SU-2026:4620-1