[ubuntu/plucky-security] unbound 1.22.0-1ubuntu1.3 (Accepted)

Hlib Korzhynskyy hlib.korzhynskyy at canonical.com
Tue Dec 2 13:05:26 UTC 2025


unbound (1.22.0-1ubuntu1.3) plucky-security; urgency=medium

  * SECURITY REGRESSION: Incomplete fix for CVE-2025-11411.
    - debian/patches/CVE-2025-11411-fix1.patch: Add mitigations for YXDOMAIN in
      iterator/iter_scrub.c. Add tests in testdata/iter_scrub_promiscuous.rpl
      and testdata/ratelimit.tdir/ratelimit.testns.
    - CVE-2025-11411

Date: 2025-12-01 16:38:47.556228+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the plucky-changes mailing list