[CLSA-2026:1786008652] unbound: Fix of CVE-2026-50252
Type:
security
Severity:
Critical
Release date:
2026-08-06 09:31:08 UTC
Description:
- CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning
CVEs fixed:
Updated packages:
  • python3-unbound-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm
    sha:e774d624e360bc16c9bd678aac38fc84ec72301b27c90d7fcfb9d306e1805f0a
  • unbound-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm
    sha:2c0bc9509b154873aebb71279cfa6b542e8f7c30dcfed24a1d9e94ca4212c894
  • unbound-devel-1.16.2-3.el9_2.tuxcare.els11.i686.rpm
    sha:a0b2ad41508529f9dc7baaadfaa87434a9b6829c5754f8c03ffdc0a4e631e7bb
  • unbound-devel-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm
    sha:a4b5871a40cec66d31c1048b86454f0b289c6ba2626ea8501b9685df19959bd8
  • unbound-libs-1.16.2-3.el9_2.tuxcare.els11.i686.rpm
    sha:0a312a90fe95fb8d9d1486083c8697e6a4a576d260815bfc60a8f4bc66afdc85
  • unbound-libs-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm
    sha:09d1a19eb78dff3744e520740e54fc2a7e4b4bb30d58d046070e4de344e08eb3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.