[Git][security-tracker-team/security-tracker][master] Track fixed version for unbound issues fixed via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91f13aa8 by Salvatore Bonaccorso at 2026-10-21T22:52:33+02:00
Track fixed version for unbound issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -66,19 +66,19 @@ CVE-2026-85559 [Out-of-bounds read in Recursor findScopeZero]
 	- pdns-recursor 5.4.8-1
 	NOTE: https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-12.html#cve-2026-85559-out-of-bounds-read-in-recursor-findscopezero
 CVE-2026-97206 [DoQ path-migration can lead to use-after-free on multi-threaded deployments]
-	- unbound <unfixed>
+	- unbound 1.26.2-1
 	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
 CVE-2026-50106 [Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent]
-	- unbound <unfixed>
+	- unbound 1.26.2-1
 	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
 CVE-2026-96405 [Aggregate DNS name chained pointer decompression work leads to degradation of service]
-	- unbound <unfixed>
+	- unbound 1.26.2-1
 	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
 CVE-2026-109125 [Possible cache poisoning vulnerability via a cache side-channel exposed y 'unwanted-reply-threshold']
-	- unbound <unfixed>
+	- unbound 1.26.2-1
 	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
 CVE-2026-35501 [Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.]
-	- unbound <unfixed>
+	- unbound 1.26.2-1
 	NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
 CVE-2026-19630 [Amplified resource exhaustion in inbound message processing]
 	- bind9 <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91f13aa814d433f4824b942340a854901efbe1d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91f13aa814d433f4824b942340a854901efbe1d9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/c4a62468/attachment.htm>