Opened 11 months ago

Closed 11 months ago

Last modified 8 months ago

#22308 closed enhancement (fixed)

unbound-1.24.1 (Security fix)

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (5)

comment:1 by Bruce Dubbs, 11 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by Bruce Dubbs, 11 months ago

Priority: normal → elevated
Summary: unbound-1.24.1 → unbound-1.24.1 (Security fix)

Unbound 1.24.1

This security release fixes CVE-2025-11411.

Promiscuous NS RRSets that complement DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone.

The CVE is described here ​https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt

====

The vulnerability is rated at 5.7 Medium,

comment:3 by Bruce Dubbs, 11 months ago

Fixed at commit 69312b7222. Leaving open for security advisory.

comment:4 by Douglas R. Reno, 11 months ago

Resolution: → fixed
Status: assigned → closed

SA-12.4-026 issued

comment:5 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.