Skip to content
OpenAdvisories
Medium RHSA-2026:7645 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python3-unbound 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-anchor 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-devel 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-dracut 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-libs 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-munin 0:1.24.2-11.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-utils 0:1.24.2-11.1.hum1

Vulnerabilities 1

  • Medium 5.7
    CVE-2025-11411

    Possible domain hijacking via promiscuous records in the authority section

    NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information fo…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2025-11411
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7645.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2405706
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11411
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11411
  • article
    https://www.nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt