Release date:
2026-10-28 08:53:39 UTC
Description:
- Rebase onto the Oracle unbound-1.6.6-5.0.3.el7_8 source RPM
- The TuxCare duplicate of the ds_create_dnskey_digest() buffer-length check in
validator/val_sigcrypt.c is dropped; the vendor's 1001-orabug40081199 patch
carries the same fix and is applied together with its 1002-orabug40081199
regression test
- The vendor's two Orabug 37387426 DNSSEC backports (the validation-complexity
cap in validator/val_sigcrypt.c and the NSEC3 closest-encloser iteration cap
in validator/val_nsec3.c) ship in the source RPM but are not declared or
applied; the existing TuxCare backports of the same two upstream commits are
kept instead, because the later TuxCare validator work is written against
their dnskeyset_verify_rrset_sig() and nsec3_prove_nods() signatures and does
not apply on top of the Oracle variants
Updated packages:
-
unbound-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:eb117b8f043272dea59059cd9f9877b894c695c6d0ebeda881b77c62f61a23fd
-
unbound-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:4a69f45c65e10d7cf73c8722d15a36f94462f476b6e7de8368a3ebdcfbedec83
-
unbound-devel-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:5541e809b9acc370686fca9d796586f5fe5f49f33b7a42954a881548342ca84c
-
unbound-devel-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:15dcc491caab8940a930ad89c19e05074beef78efbd75c6993fdfc6a6c7835ee
-
unbound-libs-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:1ae3e36ac61738b8b6ac081eec6704dc972e199a6d96a307121e3eabc574e2a9
-
unbound-libs-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:995658605fd0dd5818a150d4d27d9e8aafe6ac171fb0daa7a97649755aab36e7
-
unbound-python-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:3d6e9d4be83fc5d7bde0530c275f22d24b420e634aaf9e29b11b61140775ac73
-
unbound-python-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:ea39754782e65141d3a3b517af1f2c4a813ecd435b0b5b6f54c6ba6244dede56
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
