ELSA-2026-71419

ELSA-2026-71419 - unbound security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-09-24

Description

[1.24.2-23]
- Prevent heap corruption during CNAME synthesis (CVE-2026-82717)

[1.24.2-22]
- Prevent heap buffer overflow during DNSSEC canonicalization
(CVE-2026-81634)

[1.24.2-21]
- Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642)
- Add unit test for the vulnerability too

Related CVEs

CVE-2026-81634

CVE-2026-81642

CVE-2026-82717

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	unbound-1.24.2-7.el10_2.6.src.rpm	ae0c9bbcffbe190e7fffa258ddb0bcc4f9a7d3d6a5310f5d1b7b8062d2b40345	-	ol10_aarch64_appstream
	unbound-1.24.2-7.el10_2.6.src.rpm	ae0c9bbcffbe190e7fffa258ddb0bcc4f9a7d3d6a5310f5d1b7b8062d2b40345	-	ol10_aarch64_codeready_builder
	python3-unbound-1.24.2-7.el10_2.6.aarch64.rpm	535be9f0e5a8a32915417d39fef5739868a1fa29fe731002fb02c5ceacbce0d6	-	ol10_aarch64_appstream
	unbound-1.24.2-7.el10_2.6.aarch64.rpm	66234e4d72f202d1a6395ee742bbe2b81d735e136ffbbae2b52900c10f51547a	-	ol10_aarch64_appstream
	unbound-anchor-1.24.2-7.el10_2.6.aarch64.rpm	857db80177a2192a9338ef4243b4324382e30a16f900d5f7962a552382591dca	-	ol10_aarch64_appstream
	unbound-devel-1.24.2-7.el10_2.6.aarch64.rpm	e27e63b5029cd0f40e6aa6cdc9ca2f7c2b30842b1a9d1c4e132ac5b9a7fc364c	-	ol10_aarch64_codeready_builder
	unbound-dracut-1.24.2-7.el10_2.6.aarch64.rpm	eb111be5c74ebf0c69236ecf2dd98455219c6592d4de86bb5d94e46624139083	-	ol10_aarch64_appstream
	unbound-libs-1.24.2-7.el10_2.6.aarch64.rpm	535ada97c29c369ec8e5e935541460ba77979c9ac51611b6ae0862e8ade12a66	-	ol10_aarch64_appstream
	unbound-utils-1.24.2-7.el10_2.6.aarch64.rpm	8e2428ff5df1723a6cc03476b155f7477d3ebf51ec251fb3ac1994fb5a62fe0e	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	unbound-1.24.2-7.el10_2.6.src.rpm	ae0c9bbcffbe190e7fffa258ddb0bcc4f9a7d3d6a5310f5d1b7b8062d2b40345	-	ol10_x86_64_appstream
	unbound-1.24.2-7.el10_2.6.src.rpm	ae0c9bbcffbe190e7fffa258ddb0bcc4f9a7d3d6a5310f5d1b7b8062d2b40345	-	ol10_x86_64_codeready_builder
	python3-unbound-1.24.2-7.el10_2.6.x86_64.rpm	343c4960836530bbd183ad0325e7b70c5181982d266746a240cb1a59389696ea	-	ol10_x86_64_appstream
	unbound-1.24.2-7.el10_2.6.x86_64.rpm	d3a5e6c0856565d7afa94d4754c4e5bb9efff29e70e6283bc600d183cf5c1239	-	ol10_x86_64_appstream
	unbound-anchor-1.24.2-7.el10_2.6.x86_64.rpm	af5fa1717de2a79fdc9ade7535c987ea2a0efe16ea062c2aeced98ea32abac3d	-	ol10_x86_64_appstream
	unbound-devel-1.24.2-7.el10_2.6.x86_64.rpm	7ca341630e6d0875c0ed4f5bfb0b70b287e06d3eebd5256a69c0942f6c4894b2	-	ol10_x86_64_codeready_builder
	unbound-dracut-1.24.2-7.el10_2.6.x86_64.rpm	96373b608a60ca11fdf0af9e8c43c37b4980f7793f08cb875f287a83cd298202	-	ol10_x86_64_appstream
	unbound-libs-1.24.2-7.el10_2.6.x86_64.rpm	a367174e3e930daa36df55cb290af8eb95b0073bbf3f4ae5a8a6e3a110d7c2ee	-	ol10_x86_64_appstream
	unbound-utils-1.24.2-7.el10_2.6.x86_64.rpm	5b2fd19962ec46900a1f8d17a5eedca2a7c55e5c1d46fb151b0a5716644f98f8	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team