Red Hat Product Errata RHSA-2026:18931 - Security Advisory Issued: 2026-05-19 Updated: 2026-05-19 RHSA-2026:18931 - Security Advisory Overview Updated Packages Synopsis Moderate: unbound security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for unbound is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): unbound: DNSBomb vulnerability (CVE-2024-33655) unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Fixes BZ - 2279942 - CVE-2024-33655 unbound: DNSBomb vulnerability BZ - 2405706 - CVE-2025-11411 unbound: Unbound domain hijacking via promiscuous records RHEL-77716 - unbound: New root trust anchor key for DNSSEC CVEs CVE-2024-33655 CVE-2025-11411 References https://access.redhat.com/security/updates/classification/#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM unbound-1.24.2-2.el9.src.rpm SHA-256: fc2582732565e0e37c832251aee904214789aa8693eb017ea79e7f02651521d1 x86_64 python3-unbound-1.24.2-2.el9.x86_64.rpm SHA-256: 56db21ee599561e3156e195d83bd119f87c873d0405df0285bfade1617413228 python3-unbound-debuginfo-1.24.2-2.el9.i686.rpm SHA-256: f21e6055fbdbcb95dd1974e93c7daa4f68c28e4d799364b7e89256a136a3ba78 python3-unbound-debuginfo-1.24.2-2.el9.x86_64.rpm SHA-256: 89d5aeea91f903850431b0343a32bd06187de7e6ea40301c9fd7a959ff131728 unbound-1.24.2-2.el9.x86_64.rpm SHA-256: 03043414e4298e2ba43cc3f8c0e6a6bc75da4d58a76209a819293e9af3b4778d unbound-debuginfo-1.24.2-2.el9.i686.rpm SHA-256: a743493e8e7990c40820dd9716b9b3351d37f266ddef3a3c6a8dc266aedc9e09 unbound-debuginfo-1.24.2-2.el9.x86_64.rpm SHA-256: a5bea9e6deb10dfea442fa62aad31aca003549109fe5c41c12ecdf44a96796a6 unbound-debugsource-1.24.2-2.el9.i686.rpm SHA-256: 416406aefaaa644876a165437812ccb0fe7e6ca974003226430d912938a26da0 unbound-debugsource-1.24.2-2.el9.x86_64.rpm SHA-256: 063e3da20842dcff807aaad2ce0e190619c4fdbbfc6320d7d06d8f806ddf6be4 unbound-dracut-1.24.2-2.el9.x86_64.rpm SHA-256: 1f08c837d6c638e8afec2bdaec4c4ea5ec5a7d692753d5f254ac56e8a3d94d25 unbound-libs-1.24.2-2.el9.i686.rpm SHA-256: 63a7146b8196fd83f3f348148777397aa69e68ee1e7105fb584201d7b2d03bdf unbound-libs-1.24.2-2.el9.x86_64.rpm SHA-256: 754936e683e0b66bd51a3e1fc8bf304bba242cf7d372dd3f46445107b4c9659b unbound-libs-debuginfo-1.24.2-2.el9.i686.rpm SHA-256: b41649531931999dcd84fda35bda7e3d09d5eb762540208b54de928e66a93924 unbound-libs-debuginfo-1.24.2-2.el9.x86_64.rpm SHA-256: f2e290ee20a70785d1d7d7f8e579f14c00f493a965ee5b29f6db6d0ba53e7766 Red Hat Enterprise Linux for IBM z Systems 9 SRPM unbound-1.24.2-2.el9.src.rpm SHA-256: fc2582732565e0e37c832251aee904214789aa8693eb017ea79e7f02651521d1 s390x python3-unbound-1.24.2-2.el9.s390x.rpm SHA-256: 395ec32d8c19695e629b2eadcf2e4dfedb918cbb8f02f32e0043e4e94bbb4424 python3-unbound-debuginfo-1.24.2-2.el9.s390x.rpm SHA-256: 5a1941609178902ef0a364e5827c114917c1720cee9b7f348651ea119a0e3111 unbound-1.24.2-2.el9.s390x.rpm SHA-256: 9bbec224df43e207ee8c8778e763208e5a12f9eb5ba8c472f48a14c8c4b5ad16 unbound-debuginfo-1.24.2-2.el9.s390x.rpm SHA-256: 9e529bb05c9c766c8ca602b9cafabee7dfe41059eacae78be7c223ef78db3251 unbound-debugsource-1.24.2-2.el9.s390x.rpm SHA-256: 7fbae267515a9361f218ad04369a67f735790592a21b6a46fd6fb6ba1bb8bf28 unbound-dracut-1.24.2-2.el9.s390x.rpm SHA-256: dfde09f2a300a060f3da20ddecd31173be6cb451a78d13017590b5d16744248a unbound-libs-1.24.2-2.el9.s390x.rpm SHA-256: 357afcaced41062fa625dcd2cdbbf1e3901033de6f62825a65bf12bd04d37714 unbound-libs-debuginfo-1.24.2-2.el9.s390x.rpm SHA-256: 240718a2aaaefbb965630b26a69ebb2ffbeb553bc4eb5df82fca900d1000e6bb Red Hat Enterprise Linux for Power, little endian 9 SRPM unbound-1.24.2-2.el9.src.rpm SHA-256: fc2582732565e0e37c832251aee904214789aa8693eb017ea79e7f02651521d1 ppc64le python3-unbound-1.24.2-2.el9.ppc64le.rpm SHA-256: f9c9b4c00dbb8656ac154ad9057314f6e7dd67fd94763020365c079d73523135 python3-unbound-debuginfo-1.24.2-2.el9.ppc64le.rpm SHA-256: 36c47d653999224d91c4a45602a1fa2e5092667080d057a8c6c17e47a2aef24d unbound-1.24.2-2.el9.ppc64le.rpm SHA-256: 236deb26ae0d69e77d55f1a039a6f76344a08022aaabd0a3f4c927beb0eb85cf unbound-debuginfo-1.24.2-2.el9.ppc64le.rpm SHA-256: 9b296dce63a371b01d8f28958b45c3b0f2cdb9be31f815bb4dec947609a338b2 unbound-debugsource-1.24.2-2.el9.ppc64le.rpm SHA-256: dd0105aa48570c8ba64f3bd6370c646b2af769fcfaa8edb2147e17b5cf76cf23 unbound-dracut-1.24.2-2.el9.ppc64le.rpm SHA-256: 014ef9745c8e55257bf2a1b6ed22c4796ebc642a206e5e9dbfc570063a7885db unbound-libs-1.24.2-2.el9.ppc64le.rpm SHA-256: f126ea11685110ea50a2e75302ab49c87c05ad7e0c34789600bdf66a4f659079 unbound-libs-debuginfo-1.24.2-2.el9.ppc64le.rpm SHA-256: 1a53ac3b13f45333f2fda86359ead836c3870245dc75703c31796527e18c705a Red Hat Enterprise Linux for ARM 64 9 SRPM unbound-1.24.2-2.el9.src.rpm SHA-256: fc2582732565e0e37c832251aee904214789aa8693eb017ea79e7f02651521d1 aarch64 python3-unbound-1.24.2-2.el9.aarch64.rpm SHA-256: c2af9f54b26fc9c298e677c2306f4fc03a5ad8b30314b2027723d6ede9c4fb71 python3-unbound-debuginfo-1.24.2-2.el9.aarch64.rpm SHA-256: 684ee85e4ed3a69d235df7de61904851e447aa3d19a26f7f90c4f619f66098b8 unbound-1.24.2-2.el9.aarch64.rpm SHA-256: 3b70ff5ab2f19cf8b70b62049b6c60091350d4104baa4d2d3a6645baa72fefe4 unbound-debuginfo-1.24.2-2.el9.aarch64.rpm SHA-256: 42118d8481ec6bbee96d06aa8df3044ba700b5b7adb48973788f456b3ec68819 unbound-debugsource-1.24.2-2.el9.aarch64.rpm SHA-256: 9d6559c106bfb19cf9beb7a5795708b28a077230bf21a6d8b8ed2fa5da51d517 unbound-dracut-1.24.2-2.el9.aarch64.rpm SHA-256: 07c0dc8a3539f3a663883feac41b28585865d18ae219def1591806637a4ee08a unbound-libs-1.24.2-2.el9.aarch64.rpm SHA-256: dffd6182bca6cfad79777aa2c00a003d25c74d6fbc60b83feed5a7eba0e690e0 unbound-libs-debuginfo-1.24.2-2.el9.aarch64.rpm SHA-256: e7e7ed1080f39c41a1f4614c8a526ae05c6f0487bb02cbaf6c480b84a24ce17e Red Hat CodeReady Linux Builder for x86_64 9 SRPM x86_64 python3-unbound-debuginfo-1.24.2-2.el9.i686.rpm SHA-256: f21e6055fbdbcb95dd1974e93c7daa4f68c28e4d799364b7e89256a136a3ba78 python3-unbound-debuginfo-1.24.2-2.el9.x86_64.rpm SHA-256: 89d5aeea91f903850431b0343a32bd06187de7e6ea40301c9fd7a959ff131728 unbound-debuginfo-1.24.2-2.el9.i686.rpm SHA-256: a743493e8e7990c40820dd9716b9b3351d37f266ddef3a3c6a8dc266aedc9e09 unbound-debuginfo-1.24.2-2.el9.x86_64.rpm SHA-256: a5bea9e6deb10dfea442fa62aad31aca003549109fe5c41c12ecdf44a96796a6 unbound-debugsource-1.24.2-2.el9.i686.rpm SHA-256: 416406aefaaa644876a165437812ccb0fe7e6ca974003226430d912938a26da0 unbound-debugsource-1.24.2-2.el9.x86_64.rpm SHA-256: 063e3da20842dcff807aaad2ce0e190619c4fdbbfc6320d7d06d8f806ddf6be4 unbound-devel-1.24.2-2.el9.i686.rpm SHA-256: 4344b37c740b9b8328b3b5beb9858ce8397e04627124144717c1588859b2ec82 unbound-devel-1.24.2-2.el9.x86_64.rpm SHA-256: 768f5292b5b243947142b17bb488ebf3bbf6128b245828ccf07dc8b5d966bb5d unbound-libs-debuginfo-1.24.2-2.el9.i686.rpm SHA-256: b41649531931999dcd84fda35bda7e3d09d5eb762540208b54de928e66a93924 unbound-libs-debuginfo-1.24.2-2.el9.x86_64.rpm SHA-256: f2e290ee20a70785d1d7d7f8e579f14c00f493a965ee5b29f6db6d0ba53e7766 Red Hat CodeReady Linux Builder for Power, little endian 9 SRPM ppc64le python3-unbound-debuginfo-1.24.2-2.el9.ppc64le.rpm SHA-256: 36c47d653999224d91c4a45602a1fa2e5092667080d057a8c6c17e47a2aef24d unbound-debuginfo-1.24.2-2.el9.ppc64le.rpm SHA-256: 9b296dce63a371b01d8f28958b45c3b0f2cdb9be31f815bb4dec947609a338b2 unbound-debugsource-1.24.2-2.el9.ppc64le.rpm SHA-256: dd0105aa48570c8ba64f3bd6370c646b2af769fcfaa8edb2147e17b5cf76cf23 unbound-devel-1.24.2-2.el9.ppc64le.rpm SHA-256: ba05ff4283d080115527e98d4366fe228809f62c322875e3b61468fdea9aa9ed unbound-libs-debuginfo-1.24.2-2.el9.ppc64le.rpm SHA-256: 1a53ac3b13f45333f2fda86359ead836c3870245dc75703c31796527e18c705a Red Hat CodeReady Linux Builder for ARM 64 9 SRPM aarch64 python3-unbound-debuginfo-1.24.2-2.el9.aarch64.rpm SHA-256: 684ee85e4ed3a69d235df7de61904851e447aa3d19a26f7f90c4f619f66098b8 unbound-debuginfo-1.24.2-2.el9.aarch64.rpm SHA-256: 42118d8481ec6bbee96d06aa8df3044ba700b5b7adb48973788f456b3ec68819 unbound-debugsource-1.24.2-2.el9.aarch64.rpm SHA-256: 9d6559c106bfb19cf9beb7a5795708b28a077230bf21a6d8b8ed2fa5da51d517 unbound-devel-1.24.2-2.el9.aarch64.rpm SHA-256: 8de89f2ca456d4c1453ceafcde984575f538aa8d7be930628367716b7c9a8f02 unbound-libs-debuginfo-1.24.2-2.el9.aarch64.rpm SHA-256: e7e7ed1080f39c41a1f4614c8a526ae05c6f0487bb02cbaf6c480b84a24ce17e Red Hat CodeReady Linux Builder for IBM z Systems 9 SRPM s390x python3-unbound-debuginfo-1.24.2-2.el9.s390x