Project

General

Profile

Actions
Copy link

Todo #16503

closed

Update Unbound to 1.24.2 to address CVE-2025-11411

Added by Silmor Senedlen 3 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Christian McDonald
Category:
DNS Resolver
Target version:
2.9.0
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
25.11
Release Notes:
Default

Description

Good day
Since current(1.23.0 in pfSense CE 2.8.1) version, there are already 2 security and 1 major releases.

CVE-2025-11411 - Medium Severity:
https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt

Also fix(in 1.23.1) CVE-2025-5994, but as I can see, unbound compiled without ECS support (--enable-subnet), so not vulnerable.
CVE-2025-5994 - High Severity:
https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

Actions
Copy link

Also available in: Atom PDF