[El-errata] ELSA-2026-68291 Moderate: Oracle Linux 10 unbound security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-68291

http://linux.oracle.com/errata/ELSA-2026-68291.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-unbound-1.24.2-7.el10_2.5.x86_64.rpm
unbound-1.24.2-7.el10_2.5.x86_64.rpm
unbound-anchor-1.24.2-7.el10_2.5.x86_64.rpm
unbound-devel-1.24.2-7.el10_2.5.x86_64.rpm
unbound-dracut-1.24.2-7.el10_2.5.x86_64.rpm
unbound-libs-1.24.2-7.el10_2.5.x86_64.rpm
unbound-utils-1.24.2-7.el10_2.5.x86_64.rpm

aarch64:
python3-unbound-1.24.2-7.el10_2.5.aarch64.rpm
unbound-1.24.2-7.el10_2.5.aarch64.rpm
unbound-anchor-1.24.2-7.el10_2.5.aarch64.rpm
unbound-devel-1.24.2-7.el10_2.5.aarch64.rpm
unbound-dracut-1.24.2-7.el10_2.5.aarch64.rpm
unbound-libs-1.24.2-7.el10_2.5.aarch64.rpm
unbound-utils-1.24.2-7.el10_2.5.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/unbound-1.24.2-7.el10_2.5.src.rpm

Related CVEs:

CVE-2026-50252




Description of changes:

[1.24.2-20]
- Backport additional fix of locks during initialization

[1.24.2-19]
- Fix CVE-2026-50252: prevent cache poisoning via shared ports

[1.24.2-18]
- Add unit tests for CVE-2026-{44690,55973}

[1.24.2-17]
- Fix CVE-2026-55973: dns-error-reporting stack buffer overflow

[1.24.2-16]
- Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning

[1.24.2-15]
- Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance

[1.24.2-14]
- Fix CVE-2026-41292: DoS via excessive EDNS options

[1.24.2-13]
- Add upstream unit test for CVE-2026-40622

[1.24.2-12]
- Fix CVE-2026-44390: DoS with large RRsets

[1.24.2-11]
- Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack