Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS

Summary

Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-400. Affected package(s): unbound-main. Resolved in Red Hat advisory RHSA-2026:20357 — update the affected packages (`sudo dnf update`).