Skip to content
OpenAdvisories
High ELSA-2026-55784 1 CVE

Important: unbound security update (Oracle Linux 8)

Published Aug 17, 2026 · Updated Aug 17, 2026

Ecosystem: Oracle Linux

Summary

[1.16.2-5.14]
- Add unit test for CVE-2026-44690 from upstream.

[1.16.2-5.13]
- Fix CVE-2026-44690 (RHEL-212801)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 python3-unbound 0:1.16.2-5.14.el8_10
Oracle Linux · 8 unbound 0:1.16.2-5.14.el8_10
Oracle Linux · 8 unbound-devel 0:1.16.2-5.14.el8_10
Oracle Linux · 8 unbound-libs 0:1.16.2-5.14.el8_10

Vulnerabilities 1

  • High 7.5
    CVE-2026-44690

    Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

    In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a sin…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine