ELSA-2026-36320

ELSA-2026-36320 - unbound security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[1.24.2-15]
- Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance

[1.24.2-14]
- Fix CVE-2026-41292: DoS via excessive EDNS options

[1.24.2-13]
- Add upstream unit test for CVE-2026-40622

[1.24.2-12]
- Fix CVE-2026-44390: DoS with large RRsets

[1.24.2-11]
- Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack

[1.24.2-10]
- Fix CVE-2026-42959

[1.24.2-9]
- Fix CVE-2026-42944

[1.24.2-8]
- Fix CVE-2026-33278

Related CVEs

CVE-2026-40622

CVE-2026-41292

CVE-2026-42534

CVE-2026-44390

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	unbound-1.24.2-7.el10_2.2.src.rpm	9e1554747fb2b576deb4ec01f916d64d594728ffe2384f8414d764be2d599b1d	-	ol10_aarch64_appstream
	unbound-1.24.2-7.el10_2.2.src.rpm	9e1554747fb2b576deb4ec01f916d64d594728ffe2384f8414d764be2d599b1d	-	ol10_aarch64_codeready_builder
	python3-unbound-1.24.2-7.el10_2.2.aarch64.rpm	c836cb900edf624c403b75515414b294d18cecae430d6358a7fe1b77fc0b6730	-	ol10_aarch64_appstream
	unbound-1.24.2-7.el10_2.2.aarch64.rpm	b5a8cf7573c9aee4ae8fcad804ace1851e4449dacc02a2b6bd57abdf9dbc27eb	-	ol10_aarch64_appstream
	unbound-anchor-1.24.2-7.el10_2.2.aarch64.rpm	bde8dd64103249b593058c5e67b14611eb687d87aee08a6dd1340e14056d3ef6	-	ol10_aarch64_appstream
	unbound-devel-1.24.2-7.el10_2.2.aarch64.rpm	d3a4bbcd62ad89aa960bc2ee2e107898d6c899e32ecb39792e5714030f40a1ff	-	ol10_aarch64_codeready_builder
	unbound-dracut-1.24.2-7.el10_2.2.aarch64.rpm	687bb8a42de4edc1a516a96566f59063faf3b57aeae6da02a9512f8d77f52743	-	ol10_aarch64_appstream
	unbound-libs-1.24.2-7.el10_2.2.aarch64.rpm	fafd3a85fa96fde7d66ef2af336380147d93b408eb45793a231ba231f2bf0bda	-	ol10_aarch64_appstream
	unbound-utils-1.24.2-7.el10_2.2.aarch64.rpm	a1f3cb84c83b126e8c0f7c8e70771e786dc32e781cf7c87f29199cee94d97e9d	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	unbound-1.24.2-7.el10_2.2.src.rpm	9e1554747fb2b576deb4ec01f916d64d594728ffe2384f8414d764be2d599b1d	-	ol10_x86_64_appstream
	unbound-1.24.2-7.el10_2.2.src.rpm	9e1554747fb2b576deb4ec01f916d64d594728ffe2384f8414d764be2d599b1d	-	ol10_x86_64_codeready_builder
	python3-unbound-1.24.2-7.el10_2.2.x86_64.rpm	0feb25136074caedcd1a49b7c675f89c54fc75dcb3cdd38cb402a782989bfb73	-	ol10_x86_64_appstream
	unbound-1.24.2-7.el10_2.2.x86_64.rpm	dd60ef3c02b415c420085822a541eb50093016e308076f4f4e3d3e823ae22c19	-	ol10_x86_64_appstream
	unbound-anchor-1.24.2-7.el10_2.2.x86_64.rpm	b00d45dd74602648e8c5de8352198c867855bdf7012c260b30572b5994ad0974	-	ol10_x86_64_appstream
	unbound-devel-1.24.2-7.el10_2.2.x86_64.rpm	5e5e1e61f2540a3ff2991d79d3c9f431b818f371e76a920362388d9731ff8477	-	ol10_x86_64_codeready_builder
	unbound-dracut-1.24.2-7.el10_2.2.x86_64.rpm	7a77449fe7b229629c9c2a868922ec91c63505b6f757b07dda94cccfbb1d7458	-	ol10_x86_64_appstream
	unbound-libs-1.24.2-7.el10_2.2.x86_64.rpm	13bb42bcff05b8b625b9a38411e58d662c7a9c0feaa67f8466469386c26986ed	-	ol10_x86_64_appstream
	unbound-utils-1.24.2-7.el10_2.2.x86_64.rpm	be9116165a5f20e144ddb37a10e5ffc8fd34c1aeb954310047a0fa4377b9e087	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team