Unbound CVE-2025-11411 domain hijacking security vulnerability affecting up to v1.24.0

[Gen10]

Just found this on /r/dnscrypt

Are there any plans to update unbound manager to install the patched version of unbound? @Martineau

Official vulnerability page:

NVD - CVE-2025-11411

nvd.nist.gov

Apparently it's already patched but as I understand unbound manager deploys v1.23 as per screenshot attached.

https://nlnetlabs.nl/projects/unbound/download/#unbound-1-24-1

 

[PeterR]

The unbound package is provided by the entware repository, we have to wait for entware to push the update.