Release date:
2026-10-28 08:54:57 UTC
Description:
- Rebase onto the Oracle unbound-1.6.6-5.0.3.el7_8 source RPM
- The TuxCare duplicate of the ds_create_dnskey_digest() buffer-length check in
validator/val_sigcrypt.c is dropped; the vendor's 1001-orabug40081199 patch
carries the same fix and is applied together with its 1002-orabug40081199
regression test
- The vendor's two Orabug 37387426 DNSSEC backports (the validation-complexity
cap in validator/val_sigcrypt.c and the NSEC3 closest-encloser iteration cap
in validator/val_nsec3.c) ship in the source RPM but are not declared or
applied; the existing TuxCare backports of the same two upstream commits are
kept instead, because the later TuxCare validator work is written against
their dnskeyset_verify_rrset_sig() and nsec3_prove_nods() signatures and does
not apply on top of the Oracle variants
Updated packages:
-
unbound-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:0221a438ae0dfbf9af3e3ac079565915cdca8052e812caa596b13609e237756a
-
unbound-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:52c65e4d189b0c184f834159cdf97395ba693bfedc772f3a3eee98c1fded6124
-
unbound-devel-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:d96edad8408bf0569ad7cc9fff2c23188a737a58a5da49abe92b5a049e2f60e0
-
unbound-devel-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:059853e25d8cf1f9b87e533aba42bdb00eaa5bfe090a3f138f24116395846853
-
unbound-libs-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:956f0600e2355bb3ef4907c583f22a82b53efe5b119cbf16925e36717f08e10a
-
unbound-libs-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:b691bb5f4aa7be95653ba348a300f335ceef0c0da47f924c22f62a6a67ee74ba
-
unbound-python-1.6.6-5.0.3.el7_8.tuxcare.els1.i686.rpm
sha:71813500aed1fa4b97c3ef2d35f518147ace5e28bc58fe5d464d98c3060a1924
-
unbound-python-1.6.6-5.0.3.el7_8.tuxcare.els1.x86_64.rpm
sha:0928544106ab63e550298b79f7003af8312a02722fc2ddef8aa78fe765e9e30f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
