Advisories » MGAA-2026-0034

Updated unbound packages fix security vulnerabilities

Publication date: 09 Jun 2026
Modification date: 09 Jun 2026
Type: bugfix
Affected Mageia releases : 9
CVE: CVE-2026-32792 , CVE-2026-33278 , CVE-2026-40622 , CVE-2026-41292 , CVE-2026-42534 , CVE-2026-42923 , CVE-2026-42944 , CVE-2026-42959 , CVE-2026-42960 , CVE-2026-44390 , CVE-2026-44608

Description

Updated unbound packages fix various security vulnerabilities, one big
critical (CVE-2026-33278) and concerning a possible remote code
execution during DNSSEC validation.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35561
• https://nlnetlabs.nl/projects/unbound/security-advisories/
• https://www.openwall.com/lists/oss-security/2026/05/20/5
• https://www.cve.org/CVERecord?id=CVE-2026-32792
• https://www.cve.org/CVERecord?id=CVE-2026-33278
• https://www.cve.org/CVERecord?id=CVE-2026-40622
• https://www.cve.org/CVERecord?id=CVE-2026-41292
• https://www.cve.org/CVERecord?id=CVE-2026-42534
• https://www.cve.org/CVERecord?id=CVE-2026-42923
• https://www.cve.org/CVERecord?id=CVE-2026-42944
• https://www.cve.org/CVERecord?id=CVE-2026-42959
• https://www.cve.org/CVERecord?id=CVE-2026-42960
• https://www.cve.org/CVERecord?id=CVE-2026-44390
• https://www.cve.org/CVERecord?id=CVE-2026-44608

SRPMS

9/core

• unbound-1.25.1-1.mga9