Red Hat Product Errata RHSA-2026:55841 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55841 - Security Advisory Overview Updated Packages Synopsis Important: unbound security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for unbound is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690) unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2503063 - CVE-2026-44690 unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes BZ - 2503075 - CVE-2026-55973 unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option CVEs CVE-2026-44690 CVE-2026-55973 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM x86_64 python3-unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: 0f9636986e3d1790e129d4efada38f1b5bda1fa45900cf28dd64fa43ac21d9d5 unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: d91e6959b91f691a172d62e7befcec2aad2cbd4458fe56a7d024f0ee0d3962c1 unbound-debugsource-1.24.2-3.el9_8.4.i686.rpm SHA-256: a5c0d786e6261276b81918995c314916e0ba52a20aaeaec3ca74d5668b1967bb unbound-debugsource-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: a3e4413683e8a28d0531459c1fac0d158340ed5df054bceaeae0cace05c5f302 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM x86_64 python3-unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: 0f9636986e3d1790e129d4efada38f1b5bda1fa45900cf28dd64fa43ac21d9d5 unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: d91e6959b91f691a172d62e7befcec2aad2cbd4458fe56a7d024f0ee0d3962c1 unbound-debugsource-1.24.2-3.el9_8.4.i686.rpm SHA-256: a5c0d786e6261276b81918995c314916e0ba52a20aaeaec3ca74d5668b1967bb unbound-debugsource-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: a3e4413683e8a28d0531459c1fac0d158340ed5df054bceaeae0cace05c5f302 Red Hat Enterprise Linux for IBM z Systems 9 SRPM s390x unbound-debugsource-1.24.2-3.el9_8.4.s390x.rpm SHA-256: 18e4fcfce5f4835e2e66cb04dbf560e1d4ca79b2649ce03f22298bde7b8a2560 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM s390x unbound-debugsource-1.24.2-3.el9_8.4.s390x.rpm SHA-256: 18e4fcfce5f4835e2e66cb04dbf560e1d4ca79b2649ce03f22298bde7b8a2560 Red Hat Enterprise Linux for Power, little endian 9 SRPM ppc64le unbound-debugsource-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: 2fbff86cf2254b81d35be760fde400105d91688a580bcfabf548b944598540dd Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM ppc64le unbound-debugsource-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: 2fbff86cf2254b81d35be760fde400105d91688a580bcfabf548b944598540dd Red Hat Enterprise Linux for ARM 64 9 SRPM aarch64 unbound-debugsource-1.24.2-3.el9_8.4.aarch64.rpm SHA-256: 64a9c220fdce2bd2fd5e36b7cf684e1dec7a8fc00ae9c836692cb81c1976bb28 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM aarch64 unbound-debugsource-1.24.2-3.el9_8.4.aarch64.rpm SHA-256: 64a9c220fdce2bd2fd5e36b7cf684e1dec7a8fc00ae9c836692cb81c1976bb28 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM ppc64le unbound-debugsource-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: 2fbff86cf2254b81d35be760fde400105d91688a580bcfabf548b944598540dd Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM x86_64 python3-unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: 0f9636986e3d1790e129d4efada38f1b5bda1fa45900cf28dd64fa43ac21d9d5 unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: d91e6959b91f691a172d62e7befcec2aad2cbd4458fe56a7d024f0ee0d3962c1 unbound-debugsource-1.24.2-3.el9_8.4.i686.rpm SHA-256: a5c0d786e6261276b81918995c314916e0ba52a20aaeaec3ca74d5668b1967bb unbound-debugsource-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: a3e4413683e8a28d0531459c1fac0d158340ed5df054bceaeae0cace05c5f302 Red Hat CodeReady Linux Builder for x86_64 9 SRPM x86_64 python3-unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: 0f9636986e3d1790e129d4efada38f1b5bda1fa45900cf28dd64fa43ac21d9d5 unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: d91e6959b91f691a172d62e7befcec2aad2cbd4458fe56a7d024f0ee0d3962c1 unbound-debugsource-1.24.2-3.el9_8.4.i686.rpm SHA-256: a5c0d786e6261276b81918995c314916e0ba52a20aaeaec3ca74d5668b1967bb unbound-debugsource-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: a3e4413683e8a28d0531459c1fac0d158340ed5df054bceaeae0cace05c5f302 unbound-devel-1.24.2-3.el9_8.4.i686.rpm SHA-256: cc3a713382ffc0467cb6b6d43e3e26bcb3b93e965e4306fd128b4741e734bd57 unbound-devel-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: 4f772df11460e8e58008b80cbfda86d2606902410fa7e89c3c5ca0ce17ba90dd Red Hat CodeReady Linux Builder for Power, little endian 9 SRPM ppc64le unbound-debugsource-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: 2fbff86cf2254b81d35be760fde400105d91688a580bcfabf548b944598540dd unbound-devel-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: b5fef1770a7dd25edfeff27fc24b1c049388264077b63ebe2d8292f6b849efaf Red Hat CodeReady Linux Builder for ARM 64 9 SRPM aarch64 unbound-debugsource-1.24.2-3.el9_8.4.aarch64.rpm SHA-256: 64a9c220fdce2bd2fd5e36b7cf684e1dec7a8fc00ae9c836692cb81c1976bb28 unbound-devel-1.24.2-3.el9_8.4.aarch64.rpm SHA-256: cff775805f52d224b6f351389e364bcbf3cd3fabe011f8f4d94e7f369704dbc3 Red Hat CodeReady Linux Builder for IBM z Systems 9 SRPM s390x unbound-debugsource-1.24.2-3.el9_8.4.s390x.rpm SHA-256: 18e4fcfce5f4835e2e66cb04dbf560e1d4ca79b2649ce03f22298bde7b8a2560 unbound-devel-1.24.2-3.el9_8.4.s390x.rpm SHA-256: 7652db4b3b8c9fbcac910bc1c750d55a4f6f9a04d7f8681581171791da62bbe7 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 SRPM x86_64 python3-unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: 0f9636986e3d1790e129d4efada38f1b5bda1fa45900cf28dd64fa43ac21d9d5 unbound-debuginfo-1.24.2-3.el9_8.4.i686.rpm SHA-256: d91e6959b91f691a172d62e7befcec2aad2cbd4458fe56a7d024f0ee0d3962c1 unbound-debugsource-1.24.2-3.el9_8.4.i686.rpm SHA-256: a5c0d786e6261276b81918995c314916e0ba52a20aaeaec3ca74d5668b1967bb unbound-debugsource-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: a3e4413683e8a28d0531459c1fac0d158340ed5df054bceaeae0cace05c5f302 unbound-devel-1.24.2-3.el9_8.4.i686.rpm SHA-256: cc3a713382ffc0467cb6b6d43e3e26bcb3b93e965e4306fd128b4741e734bd57 unbound-devel-1.24.2-3.el9_8.4.x86_64.rpm SHA-256: 4f772df11460e8e58008b80cbfda86d2606902410fa7e89c3c5ca0ce17ba90dd Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 SRPM ppc64le unbound-debugsource-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: 2fbff86cf2254b81d35be760fde400105d91688a580bcfabf548b944598540dd unbound-devel-1.24.2-3.el9_8.4.ppc64le.rpm SHA-256: b5fef1770a7dd25edfeff27fc24b1c049388264077b63ebe2d8292f6b849efaf Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 SRPM s390x unbound-debugsource-1.24.2-3.el9_8.4.s390x.rpm SHA-256: 18e4fcfce5f4835e2e66cb04dbf560e1d4ca79b2649ce03f22298bde7b8a2560 unbound-devel-1.24.2-3.el9_8.4.s390x.rpm SHA-256: 7652db4b3b8c9fbcac910bc1c750d55a4f6f9a04d7f8681581171791da62bbe7 Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 SRPM aarch64 unbound-debugsource-1.24.2-3.el9_8.4.aarch64.rpm SHA-256: 64a9c220fdce2bd2fd5e36b7cf684e1dec7a8fc00ae9c836692cb81c1976bb28 unbound-devel-1.24.2-3.el9_8.4.aarch64.rpm SHA-256: cff775805f52d224b6f351389e364bcbf3cd3fabe011f8f4d94e7f369704dbc3 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM aarch64 unbound-debugso