[SECURITY] [DSA 6507-1] unbound security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
5B-------------------------------------------------------------------------
Debian Security Advisory DSA-6507-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 19, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : unbound
CVE ID : CVE-2026-14586 CVE-2026-32665 CVE-2026-40622 CVE-2026-40691
CVE-2026-41637 CVE-2026-42955 CVE-2026-44621 CVE-2026-44687
CVE-2026-44690 CVE-2026-46582 CVE-2026-50045 CVE-2026-50046
CVE-2026-50243 CVE-2026-50248 CVE-2026-50251 CVE-2026-50252
CVE-2026-52863 CVE-2026-54478 CVE-2026-55708 CVE-2026-55717
CVE-2026-55973 CVE-2026-55990 CVE-2026-55991 CVE-2026-56416
CVE-2026-56444 CVE-2026-77860 CVE-2026-77955 CVE-2026-78227
CVE-2026-80225 CVE-2026-81634 CVE-2026-81642 CVE-2026-82717
CVE-2026-82720 CVE-2026-85501
Multiple security vulnerabilities were discovered in Unbound, a validating,
recursive, caching DNS resolver, which could result in denial of service,
cache poisoning, DNS cookie bypass or potentially the execution of
arbitrary code.
For the stable distribution (trixie), these problems have been fixed in
version 1.26.1-0+deb13u1.
We recommend that you upgrade your unbound packages.
For the detailed security status of unbound please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/unbound
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmquo0gACgkQEMKTtsN8
TjbKvA/+JAuFOeOVvx7PZl1Ypqkcr8QR+ImZe8IfARsOXvYeEqixkWSuxMWBeVX3
vDumjUcil8P/3uaFPfZTj+SZDe3vKbD3NF9wyp1fsCGslSAoIoVlg8kUFRhWXOb9
zxc9hVOSowHbbBEkxANcx38FhoTK4yKX6UtkrMcoTu8RaEVYPzcDsInyZLcTY5yB
AOBpYJC91d71vo7UQotkhAfr55oRoLfi3ML4FA9Obbz8Rt8OZqrXVgju+3TaIp0/
YUNIxNOarKhzOyIF/GgbYUX0GCl/05Dq9z/q7L19DdFWMCYElOBhr+Ql51MewQFu
LXuWTIrl5cYAvPEzMVy/S0/jYJMOUAIoFE38YP3WoXGmGToI4bsN0GEknnnycqBW
radZlLgRlv62xFMV+32Jsx8G1IwP9VG9LhczTvNBTC7rhMnyDrjv6HbsumOBsJdy
oK/LNjqiieFVlOMHRQ/E4tct3nNhM2OgXJWgFzOsn6JgAPCj5mdSyKuRSH7vAmBF
u8g44XYEGG+DjiAVbbSfx52+x6GS2KyfBTrXKWVZKzliZNa6TwFiVj4APIVF/Du7
FJcBZYU3xiFL/AEh3c3n/l5Aol8IocRgS0RjgwjLHhK362liEu0m36JQqcs5pSGv
6KRkfYx095E3il1fOT1s8sKjlNS7MwFLFtKx7J10n2FHstNjlU0=
=yreS
-----END PGP SIGNATURE-----
Reply to: