ELSA-2026-71487

ELSA-2026-71487 - unbound security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-09-24

Description

[1.24.2-3.8]
- Prevent heap corruption during CNAME synthesis (CVE-2026-82717)

[1.24.2-3.7]
- Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642)
- Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634)
- Add unit tests for vulnerabilities too

Related CVEs

CVE-2026-81634

CVE-2026-81642

CVE-2026-82717

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	unbound-1.24.2-3.el9_8.8.src.rpm	f96fb49b31bc0c76f32203cdbe79b697f4530a4e11db33c2c2facff0f15c1cc2	-	ol9_aarch64_appstream
	unbound-1.24.2-3.el9_8.8.src.rpm	f96fb49b31bc0c76f32203cdbe79b697f4530a4e11db33c2c2facff0f15c1cc2	-	ol9_aarch64_codeready_builder
	python3-unbound-1.24.2-3.el9_8.8.aarch64.rpm	548d1a9936dc4e7415375dacd33f105c18f394ac89b1c26b0ea161c5a7441478	-	ol9_aarch64_appstream
	unbound-1.24.2-3.el9_8.8.aarch64.rpm	a869143bca2d0e5cb60bcd1ee0c73c15e4d072900039735803d0fd18350d3472	-	ol9_aarch64_appstream
	unbound-devel-1.24.2-3.el9_8.8.aarch64.rpm	d5b2e1f327f9085a040954bb534efbe81eb8f71e77e3f25fe13f54ddfef725b0	-	ol9_aarch64_codeready_builder
	unbound-dracut-1.24.2-3.el9_8.8.aarch64.rpm	72986573e78c344360e21678eae536482ced70034653f5f61b69044b12b529cd	-	ol9_aarch64_appstream
	unbound-libs-1.24.2-3.el9_8.8.aarch64.rpm	850cbd2327835c647f6afd03d5e2ee07fa5b88606ec95ca4165d2ee29626ff84	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	unbound-1.24.2-3.el9_8.8.src.rpm	f96fb49b31bc0c76f32203cdbe79b697f4530a4e11db33c2c2facff0f15c1cc2	-	ol9_x86_64_appstream
	unbound-1.24.2-3.el9_8.8.src.rpm	f96fb49b31bc0c76f32203cdbe79b697f4530a4e11db33c2c2facff0f15c1cc2	-	ol9_x86_64_codeready_builder
	python3-unbound-1.24.2-3.el9_8.8.x86_64.rpm	bb828fd2d4996297a16213b01c643836c44566505827a4b9eb5f3d7738b1706f	-	ol9_x86_64_appstream
	unbound-1.24.2-3.el9_8.8.x86_64.rpm	2118b38fc7a00281662ebcf5c67002de6d5dce314649b618ec9914629aec98ef	-	ol9_x86_64_appstream
	unbound-devel-1.24.2-3.el9_8.8.i686.rpm	66a1e6884af318351cd019f287731adde3bdfa0e13a08faceecad77839a8b8b0	-	ol9_x86_64_codeready_builder
	unbound-devel-1.24.2-3.el9_8.8.x86_64.rpm	aa647da913df9bf4cb3cb80fd7da73b83cd21d98c6708abacae3a622c43a7d07	-	ol9_x86_64_codeready_builder
	unbound-dracut-1.24.2-3.el9_8.8.x86_64.rpm	83142aaaeed40963f68d1c40c5a5cc318230ce028630285303105f8c017c5cb3	-	ol9_x86_64_appstream
	unbound-libs-1.24.2-3.el9_8.8.i686.rpm	9114b84e282864ebe0eae4d33e1937c29e9f0aa34d000040738a05bfb8321fd3	-	ol9_x86_64_appstream
	unbound-libs-1.24.2-3.el9_8.8.x86_64.rpm	213f1b29f2096d63eccc094b8984647d61c60babcc0dfaa193f4bb1f95933709	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team