unbound is vulnerable to remote code execution. Malicious users is able to trigger continued resolvability of malicious domain names, even after their revocation from the parent zone, via a novel type of the ghost domain names
attack that targets child-centric DNS resolvers.
lists.debian.org/debian-lts-announce/2023/03/msg00024.html
lists.fedoraproject.org/archives/list/[email protected]/message/5L3ZFWZZFPBIL654BG75RWXUMPFQJ5EC/
lists.fedoraproject.org/archives/list/[email protected]/message/D35CX4SCZVNKZTWJXPDFTHWZHINMGEZD/
secdb.alpinelinux.org/edge/main.yaml
security.gentoo.org/glsa/202212-02
www.nlnetlabs.nl/downloads/unbound/CVE-2022-30698_CVE-2022-30699.txt