Red Hat Product Errata RHSA-2026:24365 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24365 - Security Advisory Overview Updated Packages Synopsis Important: unbound security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for unbound is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944) unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2479774 - CVE-2026-42944 unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options BZ - 2479806 - CVE-2026-42959 unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages CVEs CVE-2026-42944 CVE-2026-42959 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM unbound-1.16.2-5.11.el8_10.src.rpm SHA-256: 4a01bd43b735c38a07c6b7b22457d00fae2c2f3fc537e541d262d01d13eaa363 x86_64 python3-unbound-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 974924140a8a5da9811885c68f325226361e9e2bf4337f97e527ee2a3217f070 python3-unbound-debuginfo-1.16.2-5.11.el8_10.i686.rpm SHA-256: b837320485b2f9b9ae87c657453d8529fdd31ec2a67295efc90322175f74100c python3-unbound-debuginfo-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 4cad789ba0ecc49a89bd651e56f334131343938b8fc93aa910dd916995b691fe unbound-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: c1801b011fa9c80963241a4e82fedb47f9b9317697244d48bfbacc21e720e215 unbound-debuginfo-1.16.2-5.11.el8_10.i686.rpm SHA-256: a9046f99c2a91716ba1847f9288654bbd539685230b4aa2a202f9c818b25cc74 unbound-debuginfo-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 0b6e97f3718104c983f46a8d41f85670e52d6c02423ca2087da457c964a40d8f unbound-debugsource-1.16.2-5.11.el8_10.i686.rpm SHA-256: ae98bcc29d1718e7fd72ec697fa65013ad9fe105e2ad03e41f1b082692b8c1e0 unbound-debugsource-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 5bd193234ad2b9056ffc7b79944ffd208abfa410ad382d69eac1124ba2969edb unbound-devel-1.16.2-5.11.el8_10.i686.rpm SHA-256: 2783339cce0e2b67ccc8cd7625b83374fb0d37ddb8a9f68983b7046682140ce4 unbound-devel-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: bde580da93554cd249268ab53fe93bb6abc77b0a2151fb237891e74ea1b6720d unbound-libs-1.16.2-5.11.el8_10.i686.rpm SHA-256: 5ac0247ac9970526a61c7ff1a2bc71b2223f4cf4b5d54b01404cc45a2d2c769b unbound-libs-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 3efcaf430bd40860efd443081b3cb4ca948c9532988179315bb1a61a9106a64d unbound-libs-debuginfo-1.16.2-5.11.el8_10.i686.rpm SHA-256: 71e5d5b3d8e7e794afe42cb713022bb3195579e576074ab7c63cdd8ba30106bb unbound-libs-debuginfo-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 12267471a13ba7976395c43b5103c4479550faca13213dda0e0b495dfdc17d9c Red Hat Enterprise Linux for IBM z Systems 8 SRPM unbound-1.16.2-5.11.el8_10.src.rpm SHA-256: 4a01bd43b735c38a07c6b7b22457d00fae2c2f3fc537e541d262d01d13eaa363 s390x python3-unbound-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 8d88d0d1a695187c357fce597271dca34fb49556a29ccf50c958b6815a8e2cbf python3-unbound-debuginfo-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 55742f7a01862a49205278a8769cc9a11ae839ea63ad75c4c63a62037ef9f3fb unbound-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 1ea92cf31813056f13850652a492d749b2d6e14b75e91e1010cc9888b82bb1d9 unbound-debuginfo-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 605fc422df1dd363e0412172f578b43b26854ff85986a46aa631085a70f7d8bf unbound-debugsource-1.16.2-5.11.el8_10.s390x.rpm SHA-256: eb50d19ade0c22ce14a1117a87b7922118e1b2f4b5a976722273fa1d2a9d4a68 unbound-devel-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 396dc5308909213573ec12d7758b1f5b65b4468fef239dd9c6ed64156bb00bcc unbound-libs-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 7ffdcfa13009d9d7330649617b2bfe781192af16b7c3028af6faf94f451021f8 unbound-libs-debuginfo-1.16.2-5.11.el8_10.s390x.rpm SHA-256: 577f3727cbc017ca8fbd9f44c280dfb3755f2d48f86712cfe0dc5f3c48c04ba9 Red Hat Enterprise Linux for Power, little endian 8 SRPM unbound-1.16.2-5.11.el8_10.src.rpm SHA-256: 4a01bd43b735c38a07c6b7b22457d00fae2c2f3fc537e541d262d01d13eaa363 ppc64le python3-unbound-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: 317fbcefa059d536cac8f09d79fbe7b969c3e516ed3b74a5c5fa75dd51c97082 python3-unbound-debuginfo-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: 23a34c580fa3f35bae42096915d1d61849f819b8d040eccb819043b6c6949934 unbound-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: e0ae3b2166a62848eca6af124341fd7f3f246470b064719626a8bec319d7fdde unbound-debuginfo-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: 8146f76d95853682c8fc0f2e5ccbbd688b26bdce19b326e983d7e8b66454c9bc unbound-debugsource-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: e31607bcbf4dbba5b1b81962eb11b46bdf1e4ec25f4ff834132e641d56ca3349 unbound-devel-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: 57f0100c1fa974372ac794de85b8a98f4f0b01092381afc83c3fac5b1ee21b31 unbound-libs-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: ef387f3276da387872677d7fc760f226fcee1f73036e73773c48c4e8a2055410 unbound-libs-debuginfo-1.16.2-5.11.el8_10.ppc64le.rpm SHA-256: 04591a95ef3fc03908cc008e9e5d8741f4c350bd574bb49fe115dc90291572f4 Red Hat Enterprise Linux for ARM 64 8 SRPM unbound-1.16.2-5.11.el8_10.src.rpm SHA-256: 4a01bd43b735c38a07c6b7b22457d00fae2c2f3fc537e541d262d01d13eaa363 aarch64 python3-unbound-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: de4478f03fd2a73bc7e0b00ad10ce115e2dc11cd44f6004d58cc1a919d6876b5 python3-unbound-debuginfo-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: 8009c5a270733d3a8e08e6403b4eff4d48a52653dfc6795eb052981db0434db6 unbound-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: b0a55fd1404a9445fd26b94208888265c8d49de48ef9aa5113edb67c1c45ce5b unbound-debuginfo-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: a5e1ca2f15dcecec63f8fedc0b51f77c475b1ee3dca03ccc90a9f0f71abc850c unbound-debugsource-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: c29921419af367067e8a6a2db38c76cd8a596d2fbcd66be53a4ed81149a6169b unbound-devel-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: e3003d0985d6dfe2c654e8bef588ad66f3dc7adf4a3f43db5471db60b7421eb8 unbound-libs-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: 41d4df5afd3a7c047777144c43bc7404323deec40a7c142f9636440aff3be57e unbound-libs-debuginfo-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: c0c396f0b462b4a1c4a396a2328502216c88f462046825135da842d87dc9ecea Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM unbound-1.16.2-5.11.el8_10.src.rpm SHA-256: 4a01bd43b735c38a07c6b7b22457d00fae2c2f3fc537e541d262d01d13eaa363 x86_64 python3-unbound-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 974924140a8a5da9811885c68f325226361e9e2bf4337f97e527ee2a3217f070 python3-unbound-debuginfo-1.16.2-5.11.el8_10.i686.rpm SHA-256: b837320485b2f9b9ae87c657453d8529fdd31ec2a67295efc90322175f74100c python3-unbound-debuginfo-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 4cad789ba0ecc49a89bd651e56f334131343938b8fc93aa910dd916995b691fe unbound-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: c1801b011fa9c80963241a4e82fedb47f9b9317697244d48bfbacc21e720e215 unbound-debuginfo-1.16.2-5.11.el8_10.i686.rpm SHA-256: a9046f99c2a91716ba1847f9288654bbd539685230b4aa2a202f9c818b25cc74 unbound-debuginfo-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 0b6e97f3718104c983f46a8d41f85670e52d6c02423ca2087da457c964a40d8f unbound-debugsource-1.16.2-5.11.el8_10.i686.rpm SHA-256: ae98bcc29d1718e7fd72ec697fa65013ad9fe105e2ad03e41f1b082692b8c1e0 unbound-debugsource-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 5bd193234ad2b9056ffc7b79944ffd208abfa410ad382d69eac1124ba2969edb unbound-devel-1.16.2-5.11.el8_10.i686.rpm SHA-256: 2783339cce0e2b67ccc8cd7625b83374fb0d37ddb8a9f68983b7046682140ce4 unbound-devel-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: bde580da93554cd249268ab53fe93bb6abc77b0a2151fb237891e74ea1b6720d unbound-libs-1.16.2-5.11.el8_10.i686.rpm SHA-256: 5ac0247ac9970526a61c7ff1a2bc71b2223f4cf4b5d54b01404cc45a2d2c769b unbound-libs-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 3efcaf430bd40860efd443081b3cb4ca948c9532988179315bb1a61a9106a64d unbound-libs-debuginfo-1.16.2-5.11.el8_10.i686.rpm SHA-256: 71e5d5b3d8e7e794afe42cb713022bb3195579e576074ab7c63cdd8ba30106bb unbound-libs-debuginfo-1.16.2-5.11.el8_10.x86_64.rpm SHA-256: 12267471a13ba7976395c43b5103c4479550faca13213dda0e0b495dfdc17d9c Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM unbound-1.16.2-5.11.el8_10.src.rpm SHA-256: 4a01bd43b735c38a07c6b7b22457d00fae2c2f3fc537e541d262d01d13eaa363 aarch64 python3-unbound-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: de4478f03fd2a73bc7e0b00ad10ce115e2dc11cd44f6004d58cc1a919d6876b5 python3-unbound-debuginfo-1.16.2-5.11.el8_10.aarch64.rpm SHA-256: 8009c5a270733d3a8e08e6403b4eff4d48a52653dfc6795eb052981db0434db6 unbound-1.16.