<div class="container">
<h1>Security update for unbound</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:24128-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-10-09T15:10:18Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280403">bsc#1280403</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280404">bsc#1280404</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280405">bsc#1280405</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280406">bsc#1280406</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280409">bsc#1280409</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280411">bsc#1280411</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280412">bsc#1280412</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280413">bsc#1280413</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280414">bsc#1280414</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-77860.html">CVE-2026-77860</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-77955.html">CVE-2026-77955</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-78227.html">CVE-2026-78227</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-80225.html">CVE-2026-80225</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-81634.html">CVE-2026-81634</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-81642.html">CVE-2026-81642</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-82717.html">CVE-2026-82717</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-82720.html">CVE-2026-82720</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-85501.html">CVE-2026-85501</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77860</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77860</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77860</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77955</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77955</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77955</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-78227</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-78227</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-78227</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-80225</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-80225</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-80225</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-80225</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81634</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81634</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81634</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81642</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81642</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81642</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-81642</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82717</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82717</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82717</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.4</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82717</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82720</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82720</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-82720</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-85501</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-85501</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-85501</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-85501</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.2</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves nine vulnerabilities can now be installed.</p>
<h2>Description:</h2>
<p>This update for unbound fixes the following issues:</p>
<ul>
<li>CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403).</li>
<li>CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404).</li>
<li>CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission (bsc#1280405).</li>
<li>CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406).</li>
<li>CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409).</li>
<li>CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411).</li>
<li>CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412).</li>
<li>CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413).</li>
<li>CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414).</li>
</ul>
<p>Changes for unbound:</p>
<ul>
<li>Update to 1.26.1:</li>
<li>Update icannbundle.pem certificates in unbound-anchor, valid
for 2009-2029 and 2025-2045</li>
<li>Add max-transfer-size and max-transfer-time options to limit
auth-zone and rpz transfer size and time, default disabled</li>
<li>Overload local_data_remove in unbound-control to also remove
specific records</li>
<li>Add local-zone types block_aaaa, block_a_wdata and
block_aaaa_wdata; fix respip+dns64 to use original A records
instead of ones already modified by respip</li>
<li>ipsecmod hook script now needs to start with '#!/bin/sh', it
is executed with execv instead of system for security</li>
<li>Server now continues to start if a secondary zone fails to
load from its zonefile, or if a primary zonefile is missing;
$INCLUDE is no longer allowed in secondary zone zonefiles</li>
<li>Auth-zone and RPZ zones now drop out-of-zone content on load</li>
<li>Primary hostname for zone transfers can now use CNAME(s)</li>
<li>Fix windows 64bit build for libssp dependency</li>
<li>Update IANA portlist</li>
<li>Fix heap out-of-bounds write via size_t-to-int truncation in
setup_if()/outside_network_create() for large num_ports values</li>
<li>Fix to clean up log ids after a failure to start a worker
thread</li>
<li>Relax assertions after the TTL 0 handling change in cachedb
and packet_rrset_copy_region</li>
<li>Fix val_find_DS to check the result of packet_rrset_copy_region
before using it</li>
<li>Fix that dns64 answers check the AAAA query is DNSSEC
validated, improving RFC6147 conformance</li>
<li>Fix allocation-failure hardening of rrset cache wildcard
storage and canonical NSEC owner replacement</li>
<li>Fix DNSSEC validation and DNSKEY size calculation for
noncanonical RSA DNSKEYs with leading zeroes</li>
<li>Fix mixed class referrals to use the query class</li>
<li>Fix serve-expired responses from cachedb to not store bogus
data</li>
<li>Fix lame server detection for selfpointed glue records</li>
<li>Fix cleanup of DoH sessions when the same query is on multiple
streams</li>
<li>Fix for signed same-owner CNAME and ordinary RRset responses</li>
<li>Fix mesh new client/callback to roll back added address, tcp
mesh state and callback on initialization failure</li>
<li>Fix autotrust state-file line overflow that could give a
hold-down bypass</li>
<li>Fix to limit the DSNS per-label walk in the iterator</li>
<li>Fix that the ratelimit is decremented on successful referrals</li>
<li>Fix msgencode insert_query assertion for a local_alias</li>
<li>Fix to reset the tcp-timeout before applying a load based
reduction</li>
<li>Fix to correctly decrement per-netblock tcp connection limits</li>
<li>Fix, in depth, for respip rewrite of dns64 responses</li>
<li>Fix that dns64 with subnetcache does not write ECS scoped
answers to the global cache</li>
<li>Fix ipset module name-too-long checks and race conditions on
the local name buffer and socket close</li>
<li>Fix validator to cap the number of ANY RRsets it validates and
shorten the wait timer</li>
<li>Fix race condition causing segfault when starting threads</li>
<li>Fix header_seen detection for trust anchor files to detect the
id line</li>
<li>Fix heap use-after-free in class response processing when at
least two distinct classes are configured</li>
<li>Fix negative cache to work with NSEC3 records without salt</li>
<li>Fix parse of svcbparam ech, it had an incorrect length</li>
<li>Fix that quotation and escaping works the same in auth-zone
url content as in zonefile reads</li>
<li>Fix ipset module to use larger domain name buffers and check
buffer lengths</li>
<li>Fix PROXYv2 header read and consume to check the header size</li>
<li>Fix negative cache NSEC3 nodata proof to use the correct
message size</li>
<li>Fix fast_reload for when a ZONEMD lookup is in progress</li>
<li>Fix that validation canonicalization of domain names in rdata
checks buffer bounds</li>
<li>Fix dump_cache to use a larger record buffer and check that an
owner name does not collide with BADRR</li>
<li>Fix that dns64 cleans up the allocated message if the adjust
routines fail, and checks for malformed A/AAAA in auth-zones</li>
<li>Fix pythonmod script read for numeric overflow</li>
<li>Fix configure to detect the correct QUIC early-data function
and to check for the ngtcp2_crypto_ossl header</li>
<li>Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and
earlier in server cleanup</li>
<li>Fix that auth-zone/rpz allow-notify addresses and netblocks
are available from start, and fix the probe step skip</li>
<li>Fix to perform a full transfer periodically to stop increasing
memory usage for rpz zones</li>
<li>Fix assertion failure for a long HTTP header that fills the
buffer, and buffer overflow with lower than default size and
http transfer</li>
<li>Fix that misconfigured iter-scrub-ns: 0 causes request failures</li>
<li>Fix fast_reload handling of in-progress ZONEMD lookups and of
removing an auth zone while its lookups are in progress</li>
<li>Fix integer overflow in infra-cache-max-rtt calculation and for
very high values of sock-queue-timeout</li>
<li>Fix erroneous DNS error report values after a bogus AAAA query</li>
<li>Fix fast_reload to not terminate the server on config errors
for key files</li>
<li>Fix log of an aliased qname to not use freed region memory</li>
<li>Fix DNAME synthesis from cache to keep using 0TTL entries
within a sliding window without surpassing RRSIG expiry</li>
<li>Fix that dns64 bypasses the rpz-passthru rule during synthesis</li>
<li>Fix to disallow $INCLUDE for secondary zones; failed loads now
clear the zone data so there is no partial zone</li>
<li>Fix zone read to allow SVCB records in unknown format that
cannot be written out</li>
<li>Fix that a half-written trust anchor file does not crash the
server at runtime</li>
<li>Fix that auth-zone and RPZ zones drop out-of-zone records</li>
<li>Fix that dns64 honors the forward-no-cache and stub-no-cache
options</li>
<li>Fix that a signed wildcard NSEC is checked before use, so it
does not allow insecure DS proofs inappropriately</li>
<li>Fix several crashes after malloc failure: half-built
local_alias, RPZ list, delegation point cleanup,
dns64_inform_super, new_local_rrset for RPZ qname trigger, doq
connection setup, ngtcp2_conn_server_new, TCP accept handling,
rpz_strip_nsdname, edns subnet addrtree insert, and rpz
response create</li>
<li>Fix that a zonefile-only zone continues server startup with a
warning if the file is missing on start</li>
<li>Fix that dnscrypt configuration does not crash on a
secret/public key mismatch, and duplicate files are skipped</li>
<li>Fix locking in libunbound ub_ctx_set_event</li>
<li>Fix that libunbound pipe functions fail with an error after an
event base is set</li>
<li>Fix incorrect cleanup after an allocation failure for a
delegation point</li>
<li>Fix that the server does not crash if shared memory cannot be
created for shm-enable</li>
<li>Fix auth primary host name lookup to allow CNAMEs</li>
<li>Fix memory leak on DNAME 0TTL records</li>
<li>Fix that fast_reload disown of the auth zone transfer task
cleans up the chunk list</li>
<li>Fix unbound-checkconf to check for auth-zone download filename
collisions</li>
<li>Fix malloc failure in auth-zone insert rr to avoid an empty
node and infinite loop</li>
<li>Fix that unbound-control auth_zone_reload stops answering from
the zone after a read failure</li>
<li>Fix stats pipe draining after a malloc failure so internal
messaging stays correct, and the server no longer exits on
stats pipe communication failure</li>
<li>Fix that fast_reload does not terminate the server if random
init for DNS cookies fails</li>
<li>Fix thread setname for dnstap and fast_reload thread start</li>
<li>Add libunbound/remote.h, a shared header with prototypes for
remote control connections</li>
<li>Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation
fails with an out of memory error</li>
<li>Fix DoH POST requests missing content-length causing :status
400 from strict resolvers like Cloudflare and Mullvad</li>
<li>Fix randomness generation on macOS/iOS under chroot</li>
<li>Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and
possible deref on null after reply_find_answer_rrset()</li>
<li>Fix that DoQ responses were never padded; pad-responses now
applies to comm_doq per RFC 9250 section 5.4</li>
<li>Fix log printout error in the fix for CVE-2026-50248 when the
primary name is bogus</li>
<li>Fix NSEC3 proofs to check the b32 name matches the signer name;
RRSIGs are no longer valid when this does not match</li>
<li>Fix aggressive negative cache to not insert NSEC records with
an overreaching next owner name outside the trust anchor's
bailiwick</li>
<li>Fix mesh cycle detection for respip CNAME loop with tagged
clients</li>
<li>Fix unbound-anchor to check the return value of
X509_NAME_get_text_by_NID for the emailaddress</li>
<li>Fix locking of the shared_ports structure during
initialisation, and of the anchor structure when a file is set
during header parsing</li>
<li>Fix memory leak in xfer_set_masters() error path in authzone</li>
<li>Fix to use tls-port after a referral when tls-upstream is set</li>
<li>Fix pthread detection on Solaris 11.4</li>
<li>Fix to call OPENSSL_cleanup on exit when it is defined</li>
<li>pythonmod: check the return value after ftell()</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro 6.2
<br/>
<code>zypper in -t patch SUSE-SL-Micro-6.2-1895</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libunbound8-debuginfo-1.26.1-160000.1.1</li>
<li>unbound-debugsource-1.26.1-160000.1.1</li>
<li>libunbound8-1.26.1-160000.1.1</li>
<li>unbound-anchor-1.26.1-160000.1.1</li>
<li>unbound-anchor-debuginfo-1.26.1-160000.1.1</li>
<li>unbound-debuginfo-1.26.1-160000.1.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-77860.html">https://www.suse.com/security/cve/CVE-2026-77860.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-77955.html">https://www.suse.com/security/cve/CVE-2026-77955.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-78227.html">https://www.suse.com/security/cve/CVE-2026-78227.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-80225.html">https://www.suse.com/security/cve/CVE-2026-80225.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-81634.html">https://www.suse.com/security/cve/CVE-2026-81634.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-81642.html">https://www.suse.com/security/cve/CVE-2026-81642.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-82717.html">https://www.suse.com/security/cve/CVE-2026-82717.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-82720.html">https://www.suse.com/security/cve/CVE-2026-82720.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-85501.html">https://www.suse.com/security/cve/CVE-2026-85501.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280403">https://bugzilla.suse.com/show_bug.cgi?id=1280403</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280404">https://bugzilla.suse.com/show_bug.cgi?id=1280404</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280405">https://bugzilla.suse.com/show_bug.cgi?id=1280405</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280406">https://bugzilla.suse.com/show_bug.cgi?id=1280406</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280409">https://bugzilla.suse.com/show_bug.cgi?id=1280409</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280411">https://bugzilla.suse.com/show_bug.cgi?id=1280411</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280412">https://bugzilla.suse.com/show_bug.cgi?id=1280412</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280413">https://bugzilla.suse.com/show_bug.cgi?id=1280413</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1280414">https://bugzilla.suse.com/show_bug.cgi?id=1280414</a>
</li>
</ul>
</div>