Project

Unbound

Unbound is an open-source recursive, caching DNS resolver that supports DNSSEC validation, commonly deployed on servers and small devices like Raspberry Pis.

Known aliases

unbound-anchor
Unbound DNS
Unbound DNS resolver

Current stories

investConfirmed3 publishers

Britain's billionaire exodus bunched up in the weeks before non-dom status ended

Billionaires worth about $160 billion have left Britain or cut their ties in two years, by Bloomberg's count, more than those still in its index hold. The figure is net worth, not cash sent abroad, so the tax effect it can show is on who lives where and when they left.

Publishers:fortune.com gulfnews.com news.bloomberglaw.com

Perspective Coverage

3 publishers

Builder: Builder 15%
Operator: Operator 27%
Investor: Investor 58%

Reality

Evidence50
Adoption: Not scored
Hype gap+30
Incentives40
Confidence55

buildOne report1 publisher

Resolvers that still trust only KSK-2017 on October 11 will either SERVFAIL or stop validating

IANA switches DNS root zone signing to KSK-2024 on October 11, 2026, retiring KSK-2017 after eight years. Validators that never promoted the new key will SERVFAIL or silently stop validating, with too little time left for RFC 5011's 30-day hold-down to catch up.

Publishers:dev.to

Reality

Evidence50
Adoption: Not scored
Hype gap+15
Incentives: Not scored
Confidence45

buildOne report1 publisher

Unbound 1.26.1 fixes a DNSSEC heap overflow its vendor says could allow remote code execution

NLnet Labs' Unbound 1.26.1 fixes CVE-2026-81642, a DNSSEC heap overflow its vendor says could allow remote code execution. A related CoreDNS flaw in its newer transport listeners gives resolver operators a second check, this one in their configuration.

Publishers:dev.to

Reality

Evidence50
Adoption: Not scored
Hype gap+10
Incentives: Not scored
Confidence55

securityOne report1 publisher

A crafted DNSKEY overflows the heap in every Unbound release before 1.26.1

NLnet Labs shipped Unbound 1.26.1 on Wednesday with nine CVEs fixed, among them a DNSSEC validator overflow an attacker reaches with one query into a zone he controls. Debian's stable branches are still waiting.

Publishers:thehackernews.com

Reality

Evidence74
Adoption32
Hype gap+12
Incentives42
Confidence66

buildOne report1 publisher

A three-Pi HA control plane that ended up less reliable than the one node it replaced

A homelab k3s build put embedded etcd on microSD cards and USB Ethernet. The reported latency numbers point at I/O contention, not the consensus timeouts the write-up blames.

Publishers:dev.to

Reality

Evidence28
Adoption8
Hype gap+38
Incentives45
Confidence42