{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/vex/2026/cve-2026-55991-els_os-tuxcare9_8esu.json" } ], "tracking": { "current_release_date": "2026-10-15T17:05:23Z", "generator": { "date": "2026-10-15T17:05:23Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-55991-ELS_OS-TUXCARE9.8ESU", "initial_release_date": "2026-07-22T14:17:00Z", "revision_history": [ { "date": "2026-07-22T14:17:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-05T07:22:09Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-10-15T17:05:23Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2026-55991" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_id": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_id": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-dracut@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-devel@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound-libs@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_id": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/unbound@1.24.2-3.el9_8.8.tuxcare.els1?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686" }, "product_reference": "unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-55991", "cwe": { "id": "CWE-195", "name": "Signed to Unsigned Conversion Error" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate the entire Unbound process using a single DNS-over-QUIC (DoQ) connection and one normal DNS query. This is caused by an erroneous error value passed to libngtcp2. When 'ngtcp2_conn_writev_stream()' returns 'NGTCP2_ERR_STREAM_DATA_BLOCKED', Unbound continues to call 'ngtcp2_ccerr_set_application_error()' with a '-1' error value. The 'int' literal '-1' is implicitly converted to the function's 'uint64_t error_code' parameter as '0xFFFFFFFFFFFFFFFF'. The follow-on 'ngtcp2_conn_write_connection_close()' serialises that value as a QUIC variable-length integer; because '2^64-1' exceeds the 62-bit varint ceiling, 'ngtcp2_put_uvarintlen()' fails 'assert(n < 4611686018427387904ULL)' and the whole resolver process aborts. A remote, unauthenticated DoQ client can trigger this deterministically with a single QUIC connection by advertising 'initial_max_stream_data_bidi_local = 1' in its transport parameters and sending one DoQ query without ever reading the stream.", "title": "Vulnerability description" }, { "category": "other", "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.", "title": "Statement" } ], "product_status": { "known_not_affected": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-55991" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55991.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55991.txt" } ], "release_date": "2026-07-22T14:17:00Z", "threats": [ { "category": "impact", "details": "Moderate" }, { "category": "impact", "date": "2026-10-15T15:24:51.520359Z", "details": "The unbound package for TuxCare 9.8 ESU is not affected by CVE-2026-55991. The DNS-over-QUIC code path involved in this CVE is not compiled in, because the package is built without libngtcp2 support (--with-libngtcp2 is not enabled).", "product_ids": [ "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "AlmaLinux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:python3-unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-devel-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-dracut-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.aarch64", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.i686", "Rocky Linux-9.8:unbound-libs-0:1.24.2-3.el9_8.8.tuxcare.els1.x86_64" ] } ] } ] }