Red Hat Product Errata RHSA-2025:13576 - Security Advisory
Issued:
2025-08-11
Updated:
2025-09-22

RHSA-2025:13576 - Security Advisory

Synopsis

Important: unbound security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for unbound is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

  • unbound: Unbound Cache poisoning (CVE-2025-5994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Fixes

  • BZ - 2380949 - CVE-2025-5994 unbound: Unbound Cache poisoning

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
unbound-1.7.3-12.el8_2.2.src.rpm SHA-256: 5ddde1d01d269f53cd4aedaf699c3e7d05841cab76721ccdb739ff37469ad308
x86_64
python3-unbound-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 162849b254b708a4bb49f78c84926cc44abf088d5d7b209fa2b3698b2a64aa04
python3-unbound-debuginfo-1.7.3-12.el8_2.2.i686.rpm SHA-256: f99cf8bd09ae6721f61295b3978a16e7b8cd97890aca574d166af98afbf9e297
python3-unbound-debuginfo-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 8e262ba935690d68e40d0f31677cc9fc08881d22148292aa6c30396d3f807cb7
unbound-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: f3ba0117ba69fc1a61ad8a3aca5a21d45819a8462f6d4dd4b213a2d6ef3b0b09
unbound-debuginfo-1.7.3-12.el8_2.2.i686.rpm SHA-256: b9a5fe26d035ce743a8e0641c309e836099857cc6ad7e24f9dbf827053f64ce1
unbound-debuginfo-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 74337f9e9c2454f6c99e77cc12d23baa6d410afd5fde97fb3232d6aadb4cc821
unbound-debugsource-1.7.3-12.el8_2.2.i686.rpm SHA-256: 9ae89df3540fa2ce06eba200b85eeb99bef2274de521c40faa9f35f2249aa629
unbound-debugsource-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 913cdfe9bb298574588a08845d61846aef2392e8f86e3e0916315973ac65cb06
unbound-devel-1.7.3-12.el8_2.2.i686.rpm SHA-256: 40272b3120fe7e49ee681f2b49b7e75599721abf39f36a0b1d852bf02478bfa9
unbound-devel-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 1d2f4f80327325a8698deda4402fa670cecb88462ab7d38208b11995684d8a34
unbound-libs-1.7.3-12.el8_2.2.i686.rpm SHA-256: 41be29f15da5be18d774113c5dd3873c8dac9c92f0669e2e85d1e84bfc687859
unbound-libs-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 5d4e620f312a67afb1926c261619107daa6d2fd4ce2afdec75df801e4c22ffef
unbound-libs-debuginfo-1.7.3-12.el8_2.2.i686.rpm SHA-256: 01c4210647292859642e90728457ca4ae2e2cc9b57534a6c774657242f42d443
unbound-libs-debuginfo-1.7.3-12.el8_2.2.x86_64.rpm SHA-256: 278422eedff764e839597cf2de3e5d787338a1b4244c30bfe0d88c2122f2ffbb

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.