Skip to content
OpenAdvisories
Critical ELSA-2026-72199 1 CVE

Critical: unbound security update (Oracle Linux 7)

Published Oct 23, 2026 · Updated Oct 23, 2026

Ecosystem: Oracle Linux

Summary

[1.6.6-5.0.3]
- Fix CVE-2026-81642 DNSKEY digest buffer overflow and add regression test [Orabug: 40081199]

[1.6.6-5.0.1]
- Fix CVE-2023-50387 and CVE-2023-50868 [Orabug: 37387426]

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 unbound 0:1.6.6-5.0.3.el7_8
Oracle Linux · 7 unbound-devel 0:1.6.6-5.0.3.el7_8
Oracle Linux · 7 unbound-libs 0:1.6.6-5.0.3.el7_8
Oracle Linux · 7 unbound-python 0:1.6.6-5.0.3.el7_8

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-81642 Public exploit

    Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

    In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine