Release date:
2026-10-28 18:21:41 UTC
Description:
- Rebase onto the Oracle unbound-1.6.6-5.0.3.el7_8 source RPM
- The TuxCare duplicate of the ds_create_dnskey_digest() buffer-length check in
validator/val_sigcrypt.c is dropped; the vendor's 1001-orabug40081199 patch
carries the same fix and is applied together with its 1002-orabug40081199
regression test
- The vendor's two Orabug 37387426 DNSSEC backports (the validation-complexity
cap in validator/val_sigcrypt.c and the NSEC3 closest-encloser iteration cap
in validator/val_nsec3.c) ship in the source RPM but are not declared or
applied; the existing TuxCare backports of the same two upstream commits are
kept instead, because the later TuxCare validator work is written against
their dnskeyset_verify_rrset_sig() and nsec3_prove_nods() signatures and does
not apply on top of the Oracle variants
Updated packages:
-
unbound-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:1f396c87e6f489a6e7965c7e2ed85708245d67c9c6af6b3bda53d05f88da5cc7
-
unbound-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:15c34c19290c5fab9151658b91debb90cfe134529ab9bd9dd8ac3a9fce11d756
-
unbound-devel-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:0a9d32aba073f9146233183717d806e7921844d73797b23c033f127178eb7422
-
unbound-devel-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:9ccf689a58d46947a9077debbc48cc0492113c770b8d4f72e1d9976bedeffeea
-
unbound-libs-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:97fc118dec20a81bb923d778947bff9708876bfa1020e835be46d0df0bf36330
-
unbound-libs-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:4a2badd0bca41d16052d0546d087bbd16843a2290db3e4bf265df2c17b062580
-
unbound-python-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:3b5175d7f93c057a489f42aa45bc29e412e362daa35610a1669cb2b337fa5947
-
unbound-python-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:6746a3ebec98c461d798ada8af008ebda5ca1a9fd27ae1ae2520c601199eb3e8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
