[El-errata] ELSA-2026-23231 Important: Oracle Linux 10 unbound security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-23231

http://linux.oracle.com/errata/ELSA-2026-23231.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-unbound-1.24.2-7.el10_2.2.x86_64.rpm
unbound-1.24.2-7.el10_2.2.x86_64.rpm
unbound-anchor-1.24.2-7.el10_2.2.x86_64.rpm
unbound-devel-1.24.2-7.el10_2.2.x86_64.rpm
unbound-dracut-1.24.2-7.el10_2.2.x86_64.rpm
unbound-libs-1.24.2-7.el10_2.2.x86_64.rpm
unbound-utils-1.24.2-7.el10_2.2.x86_64.rpm

aarch64:
python3-unbound-1.24.2-7.el10_2.2.aarch64.rpm
unbound-1.24.2-7.el10_2.2.aarch64.rpm
unbound-anchor-1.24.2-7.el10_2.2.aarch64.rpm
unbound-devel-1.24.2-7.el10_2.2.aarch64.rpm
unbound-dracut-1.24.2-7.el10_2.2.aarch64.rpm
unbound-libs-1.24.2-7.el10_2.2.aarch64.rpm
unbound-utils-1.24.2-7.el10_2.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/unbound-1.24.2-7.el10_2.2.src.rpm

Related CVEs:

CVE-2026-33278
CVE-2026-42944
CVE-2026-42959




Description of changes:

[1.24.2-15]
- Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance

[1.24.2-14]
- Fix CVE-2026-41292: DoS via excessive EDNS options

[1.24.2-13]
- Add upstream unit test for CVE-2026-40622

[1.24.2-12]
- Fix CVE-2026-44390: DoS with large RRsets

[1.24.2-11]
- Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack

[1.24.2-10]
- Fix CVE-2026-42959

[1.24.2-9]
- Fix CVE-2026-42944

[1.24.2-8]
- Fix CVE-2026-33278