OPENSUSE-SU-2026:22082-1
Vulnerability from csaf_opensuse - Published: 2026-10-09 15:11 - Updated: 2026-10-19 17:25Summary
Security update for unbound
Severity
Important
Notes
Title of the patch: Security update for unbound
Description of the patch: This update for unbound fixes the following issues:
- CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403).
- CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404).
- CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission (bsc#1280405).
- CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406).
- CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409).
- CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411).
- CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412).
- CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413).
- CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414).
Changes for unbound:
- Update to 1.26.1:
* Update icannbundle.pem certificates in unbound-anchor, valid
for 2009-2029 and 2025-2045
* Add max-transfer-size and max-transfer-time options to limit
auth-zone and rpz transfer size and time, default disabled
* Overload local_data_remove in unbound-control to also remove
specific records
* Add local-zone types block_aaaa, block_a_wdata and
block_aaaa_wdata; fix respip+dns64 to use original A records
instead of ones already modified by respip
* ipsecmod hook script now needs to start with '#!/bin/sh', it
is executed with execv instead of system for security
* Server now continues to start if a secondary zone fails to
load from its zonefile, or if a primary zonefile is missing;
$INCLUDE is no longer allowed in secondary zone zonefiles
* Auth-zone and RPZ zones now drop out-of-zone content on load
* Primary hostname for zone transfers can now use CNAME(s)
* Fix windows 64bit build for libssp dependency
* Update IANA portlist
* Fix heap out-of-bounds write via size_t-to-int truncation in
setup_if()/outside_network_create() for large num_ports values
* Fix to clean up log ids after a failure to start a worker
thread
* Relax assertions after the TTL 0 handling change in cachedb
and packet_rrset_copy_region
* Fix val_find_DS to check the result of packet_rrset_copy_region
before using it
* Fix that dns64 answers check the AAAA query is DNSSEC
validated, improving RFC6147 conformance
* Fix allocation-failure hardening of rrset cache wildcard
storage and canonical NSEC owner replacement
* Fix DNSSEC validation and DNSKEY size calculation for
noncanonical RSA DNSKEYs with leading zeroes
* Fix mixed class referrals to use the query class
* Fix serve-expired responses from cachedb to not store bogus
data
* Fix lame server detection for selfpointed glue records
* Fix cleanup of DoH sessions when the same query is on multiple
streams
* Fix for signed same-owner CNAME and ordinary RRset responses
* Fix mesh new client/callback to roll back added address, tcp
mesh state and callback on initialization failure
* Fix autotrust state-file line overflow that could give a
hold-down bypass
* Fix to limit the DSNS per-label walk in the iterator
* Fix that the ratelimit is decremented on successful referrals
* Fix msgencode insert_query assertion for a local_alias
* Fix to reset the tcp-timeout before applying a load based
reduction
* Fix to correctly decrement per-netblock tcp connection limits
* Fix, in depth, for respip rewrite of dns64 responses
* Fix that dns64 with subnetcache does not write ECS scoped
answers to the global cache
* Fix ipset module name-too-long checks and race conditions on
the local name buffer and socket close
* Fix validator to cap the number of ANY RRsets it validates and
shorten the wait timer
* Fix race condition causing segfault when starting threads
* Fix header_seen detection for trust anchor files to detect the
id line
* Fix heap use-after-free in class response processing when at
least two distinct classes are configured
* Fix negative cache to work with NSEC3 records without salt
* Fix parse of svcbparam ech, it had an incorrect length
* Fix that quotation and escaping works the same in auth-zone
url content as in zonefile reads
* Fix ipset module to use larger domain name buffers and check
buffer lengths
* Fix PROXYv2 header read and consume to check the header size
* Fix negative cache NSEC3 nodata proof to use the correct
message size
* Fix fast_reload for when a ZONEMD lookup is in progress
* Fix that validation canonicalization of domain names in rdata
checks buffer bounds
* Fix dump_cache to use a larger record buffer and check that an
owner name does not collide with BADRR
* Fix that dns64 cleans up the allocated message if the adjust
routines fail, and checks for malformed A/AAAA in auth-zones
* Fix pythonmod script read for numeric overflow
* Fix configure to detect the correct QUIC early-data function
and to check for the ngtcp2_crypto_ossl header
* Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and
earlier in server cleanup
* Fix that auth-zone/rpz allow-notify addresses and netblocks
are available from start, and fix the probe step skip
* Fix to perform a full transfer periodically to stop increasing
memory usage for rpz zones
* Fix assertion failure for a long HTTP header that fills the
buffer, and buffer overflow with lower than default size and
http transfer
* Fix that misconfigured iter-scrub-ns: 0 causes request failures
* Fix fast_reload handling of in-progress ZONEMD lookups and of
removing an auth zone while its lookups are in progress
* Fix integer overflow in infra-cache-max-rtt calculation and for
very high values of sock-queue-timeout
* Fix erroneous DNS error report values after a bogus AAAA query
* Fix fast_reload to not terminate the server on config errors
for key files
* Fix log of an aliased qname to not use freed region memory
* Fix DNAME synthesis from cache to keep using 0TTL entries
within a sliding window without surpassing RRSIG expiry
* Fix that dns64 bypasses the rpz-passthru rule during synthesis
* Fix to disallow $INCLUDE for secondary zones; failed loads now
clear the zone data so there is no partial zone
* Fix zone read to allow SVCB records in unknown format that
cannot be written out
* Fix that a half-written trust anchor file does not crash the
server at runtime
* Fix that auth-zone and RPZ zones drop out-of-zone records
* Fix that dns64 honors the forward-no-cache and stub-no-cache
options
* Fix that a signed wildcard NSEC is checked before use, so it
does not allow insecure DS proofs inappropriately
* Fix several crashes after malloc failure: half-built
local_alias, RPZ list, delegation point cleanup,
dns64_inform_super, new_local_rrset for RPZ qname trigger, doq
connection setup, ngtcp2_conn_server_new, TCP accept handling,
rpz_strip_nsdname, edns subnet addrtree insert, and rpz
response create
* Fix that a zonefile-only zone continues server startup with a
warning if the file is missing on start
* Fix that dnscrypt configuration does not crash on a
secret/public key mismatch, and duplicate files are skipped
* Fix locking in libunbound ub_ctx_set_event
* Fix that libunbound pipe functions fail with an error after an
event base is set
* Fix incorrect cleanup after an allocation failure for a
delegation point
* Fix that the server does not crash if shared memory cannot be
created for shm-enable
* Fix auth primary host name lookup to allow CNAMEs
* Fix memory leak on DNAME 0TTL records
* Fix that fast_reload disown of the auth zone transfer task
cleans up the chunk list
* Fix unbound-checkconf to check for auth-zone download filename
collisions
* Fix malloc failure in auth-zone insert rr to avoid an empty
node and infinite loop
* Fix that unbound-control auth_zone_reload stops answering from
the zone after a read failure
* Fix stats pipe draining after a malloc failure so internal
messaging stays correct, and the server no longer exits on
stats pipe communication failure
* Fix that fast_reload does not terminate the server if random
init for DNS cookies fails
* Fix thread setname for dnstap and fast_reload thread start
* Add libunbound/remote.h, a shared header with prototypes for
remote control connections
* Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation
fails with an out of memory error
* Fix DoH POST requests missing content-length causing :status
400 from strict resolvers like Cloudflare and Mullvad
* Fix randomness generation on macOS/iOS under chroot
* Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and
possible deref on null after reply_find_answer_rrset()
* Fix that DoQ responses were never padded; pad-responses now
applies to comm_doq per RFC 9250 section 5.4
* Fix log printout error in the fix for CVE-2026-50248 when the
primary name is bogus
* Fix NSEC3 proofs to check the b32 name matches the signer name;
RRSIGs are no longer valid when this does not match
* Fix aggressive negative cache to not insert NSEC records with
an overreaching next owner name outside the trust anchor's
bailiwick
* Fix mesh cycle detection for respip CNAME loop with tagged
clients
* Fix unbound-anchor to check the return value of
X509_NAME_get_text_by_NID for the emailaddress
* Fix locking of the shared_ports structure during
initialisation, and of the anchor structure when a file is set
during header parsing
* Fix memory leak in xfer_set_masters() error path in authzone
* Fix to use tls-port after a referral when tls-upstream is set
* Fix pthread detection on Solaris 11.4
* Fix to call OPENSSL_cleanup on exit when it is defined
* pythonmod: check the return value after ftell()
Patchnames: openSUSE-Leap-16.0-1895
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
important
8.1 (High)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
important
8.1 (High)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
21 products, the same list as for
CVE-2026-77860
Threats
Impact
moderate
References
38 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for unbound",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for unbound fixes the following issues:\n\n- CVE-2026-77860: \u0027serve-expired\u0027 can bypass Unbound \u0027wait-limit\u0027 (bsc#1280403).\n- CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404).\n- CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission (bsc#1280405).\n- CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406).\n- CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409).\n- CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411).\n- CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412).\n- CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413).\n- CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414).\n\nChanges for unbound:\n\n- Update to 1.26.1:\n * Update icannbundle.pem certificates in unbound-anchor, valid\n for 2009-2029 and 2025-2045\n * Add max-transfer-size and max-transfer-time options to limit\n auth-zone and rpz transfer size and time, default disabled\n * Overload local_data_remove in unbound-control to also remove\n specific records\n * Add local-zone types block_aaaa, block_a_wdata and\n block_aaaa_wdata; fix respip+dns64 to use original A records\n instead of ones already modified by respip\n * ipsecmod hook script now needs to start with \u0027#!/bin/sh\u0027, it\n is executed with execv instead of system for security\n * Server now continues to start if a secondary zone fails to\n load from its zonefile, or if a primary zonefile is missing;\n $INCLUDE is no longer allowed in secondary zone zonefiles\n * Auth-zone and RPZ zones now drop out-of-zone content on load\n * Primary hostname for zone transfers can now use CNAME(s)\n * Fix windows 64bit build for libssp dependency\n * Update IANA portlist\n * Fix heap out-of-bounds write via size_t-to-int truncation in\n setup_if()/outside_network_create() for large num_ports values\n * Fix to clean up log ids after a failure to start a worker\n thread\n * Relax assertions after the TTL 0 handling change in cachedb\n and packet_rrset_copy_region\n * Fix val_find_DS to check the result of packet_rrset_copy_region\n before using it\n * Fix that dns64 answers check the AAAA query is DNSSEC\n validated, improving RFC6147 conformance\n * Fix allocation-failure hardening of rrset cache wildcard\n storage and canonical NSEC owner replacement\n * Fix DNSSEC validation and DNSKEY size calculation for\n noncanonical RSA DNSKEYs with leading zeroes\n * Fix mixed class referrals to use the query class\n * Fix serve-expired responses from cachedb to not store bogus\n data\n * Fix lame server detection for selfpointed glue records\n * Fix cleanup of DoH sessions when the same query is on multiple\n streams\n * Fix for signed same-owner CNAME and ordinary RRset responses\n * Fix mesh new client/callback to roll back added address, tcp\n mesh state and callback on initialization failure\n * Fix autotrust state-file line overflow that could give a\n hold-down bypass\n * Fix to limit the DSNS per-label walk in the iterator\n * Fix that the ratelimit is decremented on successful referrals\n * Fix msgencode insert_query assertion for a local_alias\n * Fix to reset the tcp-timeout before applying a load based\n reduction\n * Fix to correctly decrement per-netblock tcp connection limits\n * Fix, in depth, for respip rewrite of dns64 responses\n * Fix that dns64 with subnetcache does not write ECS scoped\n answers to the global cache\n * Fix ipset module name-too-long checks and race conditions on\n the local name buffer and socket close\n * Fix validator to cap the number of ANY RRsets it validates and\n shorten the wait timer\n * Fix race condition causing segfault when starting threads\n * Fix header_seen detection for trust anchor files to detect the\n id line\n * Fix heap use-after-free in class response processing when at\n least two distinct classes are configured\n * Fix negative cache to work with NSEC3 records without salt\n * Fix parse of svcbparam ech, it had an incorrect length\n * Fix that quotation and escaping works the same in auth-zone\n url content as in zonefile reads\n * Fix ipset module to use larger domain name buffers and check\n buffer lengths\n * Fix PROXYv2 header read and consume to check the header size\n * Fix negative cache NSEC3 nodata proof to use the correct\n message size\n * Fix fast_reload for when a ZONEMD lookup is in progress\n * Fix that validation canonicalization of domain names in rdata\n checks buffer bounds\n * Fix dump_cache to use a larger record buffer and check that an\n owner name does not collide with BADRR\n * Fix that dns64 cleans up the allocated message if the adjust\n routines fail, and checks for malformed A/AAAA in auth-zones\n * Fix pythonmod script read for numeric overflow\n * Fix configure to detect the correct QUIC early-data function\n and to check for the ngtcp2_crypto_ossl header\n * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and\n earlier in server cleanup\n * Fix that auth-zone/rpz allow-notify addresses and netblocks\n are available from start, and fix the probe step skip\n * Fix to perform a full transfer periodically to stop increasing\n memory usage for rpz zones\n * Fix assertion failure for a long HTTP header that fills the\n buffer, and buffer overflow with lower than default size and\n http transfer\n * Fix that misconfigured iter-scrub-ns: 0 causes request failures\n * Fix fast_reload handling of in-progress ZONEMD lookups and of\n removing an auth zone while its lookups are in progress\n * Fix integer overflow in infra-cache-max-rtt calculation and for\n very high values of sock-queue-timeout\n * Fix erroneous DNS error report values after a bogus AAAA query\n * Fix fast_reload to not terminate the server on config errors\n for key files\n * Fix log of an aliased qname to not use freed region memory\n * Fix DNAME synthesis from cache to keep using 0TTL entries\n within a sliding window without surpassing RRSIG expiry\n * Fix that dns64 bypasses the rpz-passthru rule during synthesis\n * Fix to disallow $INCLUDE for secondary zones; failed loads now\n clear the zone data so there is no partial zone\n * Fix zone read to allow SVCB records in unknown format that\n cannot be written out\n * Fix that a half-written trust anchor file does not crash the\n server at runtime\n * Fix that auth-zone and RPZ zones drop out-of-zone records\n * Fix that dns64 honors the forward-no-cache and stub-no-cache\n options\n * Fix that a signed wildcard NSEC is checked before use, so it\n does not allow insecure DS proofs inappropriately\n * Fix several crashes after malloc failure: half-built\n local_alias, RPZ list, delegation point cleanup,\n dns64_inform_super, new_local_rrset for RPZ qname trigger, doq\n connection setup, ngtcp2_conn_server_new, TCP accept handling,\n rpz_strip_nsdname, edns subnet addrtree insert, and rpz\n response create\n * Fix that a zonefile-only zone continues server startup with a\n warning if the file is missing on start\n * Fix that dnscrypt configuration does not crash on a\n secret/public key mismatch, and duplicate files are skipped\n * Fix locking in libunbound ub_ctx_set_event\n * Fix that libunbound pipe functions fail with an error after an\n event base is set\n * Fix incorrect cleanup after an allocation failure for a\n delegation point\n * Fix that the server does not crash if shared memory cannot be\n created for shm-enable\n * Fix auth primary host name lookup to allow CNAMEs\n * Fix memory leak on DNAME 0TTL records\n * Fix that fast_reload disown of the auth zone transfer task\n cleans up the chunk list\n * Fix unbound-checkconf to check for auth-zone download filename\n collisions\n * Fix malloc failure in auth-zone insert rr to avoid an empty\n node and infinite loop\n * Fix that unbound-control auth_zone_reload stops answering from\n the zone after a read failure\n * Fix stats pipe draining after a malloc failure so internal\n messaging stays correct, and the server no longer exits on\n stats pipe communication failure\n * Fix that fast_reload does not terminate the server if random\n init for DNS cookies fails\n * Fix thread setname for dnstap and fast_reload thread start\n * Add libunbound/remote.h, a shared header with prototypes for\n remote control connections\n * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation\n fails with an out of memory error\n * Fix DoH POST requests missing content-length causing :status\n 400 from strict resolvers like Cloudflare and Mullvad\n * Fix randomness generation on macOS/iOS under chroot\n * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and\n possible deref on null after reply_find_answer_rrset()\n * Fix that DoQ responses were never padded; pad-responses now\n applies to comm_doq per RFC 9250 section 5.4\n * Fix log printout error in the fix for CVE-2026-50248 when the\n primary name is bogus\n * Fix NSEC3 proofs to check the b32 name matches the signer name;\n RRSIGs are no longer valid when this does not match\n * Fix aggressive negative cache to not insert NSEC records with\n an overreaching next owner name outside the trust anchor\u0027s\n bailiwick\n * Fix mesh cycle detection for respip CNAME loop with tagged\n clients\n * Fix unbound-anchor to check the return value of\n X509_NAME_get_text_by_NID for the emailaddress\n * Fix locking of the shared_ports structure during\n initialisation, and of the anchor structure when a file is set\n during header parsing\n * Fix memory leak in xfer_set_masters() error path in authzone\n * Fix to use tls-port after a referral when tls-upstream is set\n * Fix pthread detection on Solaris 11.4\n * Fix to call OPENSSL_cleanup on exit when it is defined\n * pythonmod: check the return value after ftell()\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1895",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22082-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1280403",
"url": "https://bugzilla.suse.com/1280403"
},
{
"category": "self",
"summary": "SUSE Bug 1280404",
"url": "https://bugzilla.suse.com/1280404"
},
{
"category": "self",
"summary": "SUSE Bug 1280405",
"url": "https://bugzilla.suse.com/1280405"
},
{
"category": "self",
"summary": "SUSE Bug 1280406",
"url": "https://bugzilla.suse.com/1280406"
},
{
"category": "self",
"summary": "SUSE Bug 1280409",
"url": "https://bugzilla.suse.com/1280409"
},
{
"category": "self",
"summary": "SUSE Bug 1280411",
"url": "https://bugzilla.suse.com/1280411"
},
{
"category": "self",
"summary": "SUSE Bug 1280412",
"url": "https://bugzilla.suse.com/1280412"
},
{
"category": "self",
"summary": "SUSE Bug 1280413",
"url": "https://bugzilla.suse.com/1280413"
},
{
"category": "self",
"summary": "SUSE Bug 1280414",
"url": "https://bugzilla.suse.com/1280414"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-77860 page",
"url": "https://www.suse.com/security/cve/CVE-2026-77860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-77955 page",
"url": "https://www.suse.com/security/cve/CVE-2026-77955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-78227 page",
"url": "https://www.suse.com/security/cve/CVE-2026-78227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80225 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81634 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81642 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-82717 page",
"url": "https://www.suse.com/security/cve/CVE-2026-82717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-82720 page",
"url": "https://www.suse.com/security/cve/CVE-2026-82720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-85501 page",
"url": "https://www.suse.com/security/cve/CVE-2026-85501/"
}
],
"title": "Security update for unbound",
"tracking": {
"current_release_date": "2026-10-19T17:25:12Z",
"generator": {
"date": "2026-10-09T15:11:12Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:22082-1",
"initial_release_date": "2026-10-09T15:11:12Z",
"revision_history": [
{
"date": "2026-10-09T15:11:12Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-19T17:25:12Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libunbound8-0:1.26.1-160000.1.1.aarch64",
"product": {
"name": "libunbound8-0:1.26.1-160000.1.1.aarch64",
"product_id": "libunbound8-0:1.26.1-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libunbound8@1.26.1-160000.1.1?arch=aarch64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-unbound-0:1.26.1-160000.1.1.aarch64",
"product": {
"name": "python3-unbound-0:1.26.1-160000.1.1.aarch64",
"product_id": "python3-unbound-0:1.26.1-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python3-unbound@1.26.1-160000.1.1?arch=aarch64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-0:1.26.1-160000.1.1.aarch64",
"product": {
"name": "unbound-0:1.26.1-160000.1.1.aarch64",
"product_id": "unbound-0:1.26.1-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound@1.26.1-160000.1.1?arch=aarch64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"product": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"product_id": "unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-anchor@1.26.1-160000.1.1?arch=aarch64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-devel-0:1.26.1-160000.1.1.aarch64",
"product": {
"name": "unbound-devel-0:1.26.1-160000.1.1.aarch64",
"product_id": "unbound-devel-0:1.26.1-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-devel@1.26.1-160000.1.1?arch=aarch64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "unbound-munin-0:1.26.1-160000.1.1.noarch",
"product": {
"name": "unbound-munin-0:1.26.1-160000.1.1.noarch",
"product_id": "unbound-munin-0:1.26.1-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-munin@1.26.1-160000.1.1?arch=noarch\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libunbound8-0:1.26.1-160000.1.1.ppc64le",
"product": {
"name": "libunbound8-0:1.26.1-160000.1.1.ppc64le",
"product_id": "libunbound8-0:1.26.1-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libunbound8@1.26.1-160000.1.1?arch=ppc64le\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"product": {
"name": "python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"product_id": "python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python3-unbound@1.26.1-160000.1.1?arch=ppc64le\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-0:1.26.1-160000.1.1.ppc64le",
"product": {
"name": "unbound-0:1.26.1-160000.1.1.ppc64le",
"product_id": "unbound-0:1.26.1-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound@1.26.1-160000.1.1?arch=ppc64le\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"product": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"product_id": "unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-anchor@1.26.1-160000.1.1?arch=ppc64le\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"product": {
"name": "unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"product_id": "unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-devel@1.26.1-160000.1.1?arch=ppc64le\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libunbound8-0:1.26.1-160000.1.1.s390x",
"product": {
"name": "libunbound8-0:1.26.1-160000.1.1.s390x",
"product_id": "libunbound8-0:1.26.1-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libunbound8@1.26.1-160000.1.1?arch=s390x\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-unbound-0:1.26.1-160000.1.1.s390x",
"product": {
"name": "python3-unbound-0:1.26.1-160000.1.1.s390x",
"product_id": "python3-unbound-0:1.26.1-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python3-unbound@1.26.1-160000.1.1?arch=s390x\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-0:1.26.1-160000.1.1.s390x",
"product": {
"name": "unbound-0:1.26.1-160000.1.1.s390x",
"product_id": "unbound-0:1.26.1-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound@1.26.1-160000.1.1?arch=s390x\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-anchor-0:1.26.1-160000.1.1.s390x",
"product": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.s390x",
"product_id": "unbound-anchor-0:1.26.1-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-anchor@1.26.1-160000.1.1?arch=s390x\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-devel-0:1.26.1-160000.1.1.s390x",
"product": {
"name": "unbound-devel-0:1.26.1-160000.1.1.s390x",
"product_id": "unbound-devel-0:1.26.1-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-devel@1.26.1-160000.1.1?arch=s390x\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libunbound8-0:1.26.1-160000.1.1.x86_64",
"product": {
"name": "libunbound8-0:1.26.1-160000.1.1.x86_64",
"product_id": "libunbound8-0:1.26.1-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libunbound8@1.26.1-160000.1.1?arch=x86_64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-unbound-0:1.26.1-160000.1.1.x86_64",
"product": {
"name": "python3-unbound-0:1.26.1-160000.1.1.x86_64",
"product_id": "python3-unbound-0:1.26.1-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python3-unbound@1.26.1-160000.1.1?arch=x86_64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-0:1.26.1-160000.1.1.x86_64",
"product": {
"name": "unbound-0:1.26.1-160000.1.1.x86_64",
"product_id": "unbound-0:1.26.1-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound@1.26.1-160000.1.1?arch=x86_64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"product": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"product_id": "unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-anchor@1.26.1-160000.1.1?arch=x86_64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "unbound-devel-0:1.26.1-160000.1.1.x86_64",
"product": {
"name": "unbound-devel-0:1.26.1-160000.1.1.x86_64",
"product_id": "unbound-devel-0:1.26.1-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nlnetlabs:unbound:1.26.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/unbound-devel@1.26.1-160000.1.1?arch=x86_64\u0026upstream=unbound-0:1.26.1-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libunbound8-0:1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64"
},
"product_reference": "libunbound8-0:1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libunbound8-0:1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le"
},
"product_reference": "libunbound8-0:1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libunbound8-0:1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x"
},
"product_reference": "libunbound8-0:1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libunbound8-0:1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64"
},
"product_reference": "libunbound8-0:1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-unbound-0:1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64"
},
"product_reference": "python3-unbound-0:1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-unbound-0:1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le"
},
"product_reference": "python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-unbound-0:1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x"
},
"product_reference": "python3-unbound-0:1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-unbound-0:1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64"
},
"product_reference": "python3-unbound-0:1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-0:1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64"
},
"product_reference": "unbound-0:1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-0:1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le"
},
"product_reference": "unbound-0:1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-0:1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x"
},
"product_reference": "unbound-0:1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-0:1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64"
},
"product_reference": "unbound-0:1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64"
},
"product_reference": "unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le"
},
"product_reference": "unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x"
},
"product_reference": "unbound-anchor-0:1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-anchor-0:1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64"
},
"product_reference": "unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-devel-0:1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64"
},
"product_reference": "unbound-devel-0:1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-devel-0:1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le"
},
"product_reference": "unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-devel-0:1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x"
},
"product_reference": "unbound-devel-0:1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-devel-0:1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64"
},
"product_reference": "unbound-devel-0:1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-munin-0:1.26.1-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
},
"product_reference": "unbound-munin-0:1.26.1-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-77860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-77860"
}
],
"notes": [
{
"category": "general",
"text": "In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the \u0027serve-expired\u0027 code path can cause a double decrement on the \u0027wait-limit\u0027 counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb (CVE-2024-33655). A malicious actor can exploit this by controlling an authoritative zone with short TTL, so cached entries expire quickly. Each \u0027slow\u0027 query, one the attacker\u0027s authoritative never answers, is followed by one query for an expired cached name, which is answered immediately via the \u0027serve-expired\u0027 path and decrements the counter twice. This second query was named \u0027pump\u0027. By alternating slow queries and pumps, the attacker keeps the per-client counter at or below the configured \u0027wait-limit\u0027 indefinitely, and can hold an arbitrary number of pending queries from a single source IP, up to the global mesh quota (num-queries-per-thread); eventually bypassing one of the counter measures introduced for DNSBomb (CVE-2024-33655). This vulnerability is present on the \u0027serve-expired\u0027 code path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-77860",
"url": "https://www.suse.com/security/cve/CVE-2026-77860"
},
{
"category": "external",
"summary": "SUSE Bug 1280403 for CVE-2026-77860",
"url": "https://bugzilla.suse.com/1280403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-77860"
},
{
"cve": "CVE-2026-77955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-77955"
}
],
"notes": [
{
"category": "general",
"text": "In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located below (but not at) a trust anchor allow for an attack window where (tampered with) zone contents are served (or stored to disk) prior to the ZONEMD integrity check. This is caused by the needed DS/DNSKEY asynchronous resolution that needs to happen before the ZONEMD check completes. If a zonefile is written to disk (zonefile: option) while the ZONEMD check failed, the tampered data are reloaded on startup and available until ZONEMD verification concludes again. If verification fails, the data is not served any more but still persists on disk for future reloads.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-77955",
"url": "https://www.suse.com/security/cve/CVE-2026-77955"
},
{
"category": "external",
"summary": "SUSE Bug 1280404 for CVE-2026-77955",
"url": "https://bugzilla.suse.com/1280404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-77955"
},
{
"cve": "CVE-2026-78227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-78227"
}
],
"notes": [
{
"category": "general",
"text": "NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with \u0027--with-libngtcp2\u0027. Each DoQ stream owns an output buffer that holds the DNS response. ngtcp2\u0027s retransmission buffer keeps a shallow pointer into the output buffer for as long as a STREAM frame may be resent. On a client RESET_STREAM, the output buffer is freed but ngtcp2 still holds the matching retransmission entries. The next PTO timeout makes ngtcp2 re-encode the STREAM frame and copy from the freed buffer. A malicious actor that can query Unbound over DoQ and that withholds ACKs, sends RESET_STREAM, and waits for PTO, reaches this use-after-free with no privilege. This leads to retransmissions against freed memory and eventually an abnormal server exit under a 20-query spray.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-78227",
"url": "https://www.suse.com/security/cve/CVE-2026-78227"
},
{
"category": "external",
"summary": "SUSE Bug 1280405 for CVE-2026-78227",
"url": "https://bugzilla.suse.com/1280405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "important"
}
],
"title": "CVE-2026-78227"
},
{
"cve": "CVE-2026-80225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80225"
}
],
"notes": [
{
"category": "general",
"text": "In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolizes a single worker\u0027s entire event loop for as long as its writes stay ahead of the drain.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80225",
"url": "https://www.suse.com/security/cve/CVE-2026-80225"
},
{
"category": "external",
"summary": "SUSE Bug 1280406 for CVE-2026-80225",
"url": "https://bugzilla.suse.com/1280406"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-80225"
},
{
"cve": "CVE-2026-81634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81634"
}
],
"notes": [
{
"category": "general",
"text": "In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81634",
"url": "https://www.suse.com/security/cve/CVE-2026-81634"
},
{
"category": "external",
"summary": "SUSE Bug 1280409 for CVE-2026-81634",
"url": "https://bugzilla.suse.com/1280409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "important"
}
],
"title": "CVE-2026-81634"
},
{
"cve": "CVE-2026-81642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81642"
}
],
"notes": [
{
"category": "general",
"text": "In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81642",
"url": "https://www.suse.com/security/cve/CVE-2026-81642"
},
{
"category": "external",
"summary": "SUSE Bug 1280411 for CVE-2026-81642",
"url": "https://bugzilla.suse.com/1280411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "important"
}
],
"title": "CVE-2026-81642"
},
{
"cve": "CVE-2026-82717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-82717"
}
],
"notes": [
{
"category": "general",
"text": "In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to enforce(rewrite) a max TTL value in the packet buffer. Coupled with a compression pointer that points to the overwritten value and invalidates the domain name, it leads to an error path that does not properly move the buffer position and allows for the heap buffer overflow. Since this is heavily reliant on heap memory layout, results are memory corruption that eventually leads to a crash and under specific systems and compilation options remote code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-82717",
"url": "https://www.suse.com/security/cve/CVE-2026-82717"
},
{
"category": "external",
"summary": "SUSE Bug 1280412 for CVE-2026-82717",
"url": "https://bugzilla.suse.com/1280412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "important"
}
],
"title": "CVE-2026-82717"
},
{
"cve": "CVE-2026-82720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-82720"
}
],
"notes": [
{
"category": "general",
"text": "NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with \u0027--with-libnghttp2\u0027. During failure code paths (i.e., RPZ drop query, jostle due to heavy traffic), a dropped DoH stream brings down the whole DoH session and does not account properly for other DoH streams in the same session. This leads to use-after-free in those code paths. If the prerequisites are satisfied (possible RPZ drop or heavy client traffic), a malicious actor can trigger the vulnerability with a single DoH connection and the appropriate traffic. Impact is limited as the reads are not user controlled and the use-after-free leads to early returns. However, a hardened allocator can catch the use-after-free and controllably terminate the process resulting to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-82720",
"url": "https://www.suse.com/security/cve/CVE-2026-82720"
},
{
"category": "external",
"summary": "SUSE Bug 1280413 for CVE-2026-82720",
"url": "https://bugzilla.suse.com/1280413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-82720"
},
{
"cve": "CVE-2026-85501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-85501"
}
],
"notes": [
{
"category": "general",
"text": "Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term \u0027ReTrap\u0027. These result in degradation of service when malicious zones are used to serve the algorithmic complexity vulnerabilities. NLnet Labs Unbound up to and including 1.26.0 is vulnerable to some of them. TagTrap, where the triple(Zone, Algo, KeyTag) matching mechanism introduces a significant attack vector when resolvers handle malicious responses containing numerous mismatched DNSKEY, RRSIG, and DS record. DelegationTrap, where constructing the chain-of-trust requires iterative validation of DNSKEY and DS records from the root zone downward. For deeply nested domains, this results in significant computational overhead. NsecTrap, where responses with excessive invalid NSEC records compel the resolver to validate each one. AdditionalTrap, where Unbound by default would try to DNSSEC validate the ADDITIONAL section as well. This can be exploited to waste validation resources by malicious users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-85501",
"url": "https://www.suse.com/security/cve/CVE-2026-85501"
},
{
"category": "external",
"summary": "SUSE Bug 1280414 for CVE-2026-85501",
"url": "https://bugzilla.suse.com/1280414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:libunbound8-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:python3-unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-anchor-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:unbound-devel-0:1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:unbound-munin-0:1.26.1-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-09T15:11:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-85501"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.