Summary
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
* unbound: DNSBomb vulnerability (CVE-2024-33655)
* unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | python3-unbound | 1.24.2-7.el10 |
| AlmaLinux · 10 | unbound | 1.24.2-7.el10 |
| AlmaLinux · 10 | unbound-anchor | 1.24.2-7.el10 |
| AlmaLinux · 10 | unbound-devel | 1.24.2-7.el10 |
| AlmaLinux · 10 | unbound-dracut | 1.24.2-7.el10 |
| AlmaLinux · 10 | unbound-libs | 1.24.2-7.el10 |
| AlmaLinux · 10 | unbound-utils | 1.24.2-7.el10 |
Vulnerabilities 2
-
High 7.5
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by…
-
Medium 5.7
Possible domain hijacking via promiscuous records in the authority section
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information fo…