ELSA-2026-70754

ELSA-2026-70754 - unbound security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-09-24

Description

[1.16.2-5.14.4]
- Prevent heap corruption during CNAME synthesis (CVE-2026-82717)

[1.16.2-5.14.3]
- Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642)
- Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634)
- Add unit tests for vulnerabilities too

Related CVEs

CVE-2026-81634

CVE-2026-81642

CVE-2026-82717

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	unbound-1.16.2-5.14.el8_10.4.src.rpm	ecc5ab7ed9f3db929a6d7d8f7f16c9629b09552552e5421bce15f682d6656796	-	ol8_aarch64_appstream
	python3-unbound-1.16.2-5.14.el8_10.4.aarch64.rpm	44b86199359a8f7b67319721d8f0e1d48b04adbc6b312dfa55c3260084f51db8	-	ol8_aarch64_appstream
	unbound-1.16.2-5.14.el8_10.4.aarch64.rpm	130e7045fa17ffe039e0d7cd06bf9e569b1d52301b07dfca88d087e50c6ef9d4	-	ol8_aarch64_appstream
	unbound-devel-1.16.2-5.14.el8_10.4.aarch64.rpm	3e727773440f344d73836d3d37fcb326fc65bdc083a63a809d830108b8781471	-	ol8_aarch64_appstream
	unbound-libs-1.16.2-5.14.el8_10.4.aarch64.rpm	5ecb5fef7ac4b8d572f4e7d2f8b31e37f875fea77734735b0b76c8cd3968dfc1	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	unbound-1.16.2-5.14.el8_10.4.src.rpm	ecc5ab7ed9f3db929a6d7d8f7f16c9629b09552552e5421bce15f682d6656796	-	ol8_x86_64_appstream
	python3-unbound-1.16.2-5.14.el8_10.4.x86_64.rpm	8aa57fd3ed029b97911094a46ef20b5a0f2402e8c889e5365200cfde20395d7c	-	ol8_x86_64_appstream
	unbound-1.16.2-5.14.el8_10.4.x86_64.rpm	3e0935d7e547da07e01d68af64b2aaf354a9befeb24d2428daaa4620a6c4d27d	-	ol8_x86_64_appstream
	unbound-devel-1.16.2-5.14.el8_10.4.i686.rpm	ed75418e411566db05a43af44b34a02ca4147343a2d1409525a23fd0228f5396	-	ol8_x86_64_appstream
	unbound-devel-1.16.2-5.14.el8_10.4.x86_64.rpm	4f09bde759661b76a80a9df82f96076e71e43f2989309ca4e22edf825cdd2595	-	ol8_x86_64_appstream
	unbound-libs-1.16.2-5.14.el8_10.4.i686.rpm	a494ea412f1846225da7dc8fd9e046cc3af509043452ba5a93a44199bb35f8c4	-	ol8_x86_64_appstream
	unbound-libs-1.16.2-5.14.el8_10.4.x86_64.rpm	28c5c08b6858e87b2ebd6d5e52dc40e20d6b0da5e82f89c07fd84517714e36dc	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team