[Git][security-tracker-team/security-tracker][master] Add new unbound issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3d65989c by Salvatore Bonaccorso at 2026-10-21T19:38:51+02:00
Add new unbound issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,18 @@
+CVE-2026-97206 [DoQ path-migration can lead to use-after-free on multi-threaded deployments]
+	- unbound <unfixed>
+	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
+CVE-2026-50106 [Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent]
+	- unbound <unfixed>
+	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
+CVE-2026-96405 [Aggregate DNS name chained pointer decompression work leads to degradation of service]
+	- unbound <unfixed>
+	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
+CVE-2026-109125 [Possible cache poisoning vulnerability via a cache side-channel exposed y 'unwanted-reply-threshold']
+	- unbound <unfixed>
+	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
+CVE-2026-35501 [Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.]
+	- unbound <unfixed>
+	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
 CVE-2026-19630 [Amplified resource exhaustion in inbound message processing]
 	- bind9 <unfixed>
 	NOTE: https://kb.isc.org/docs/cve-2026-19630



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d65989cdaf4fd6c89fb051f32b79313dfb379cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d65989cdaf4fd6c89fb051f32b79313dfb379cd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/4d59b1cf/attachment.htm>