Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 01 Sep 2025 07:12:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 289225] Outdated version of unbound (1.23.0 instead of 1.23.1)
Message-ID:  <bug-289225-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289225

            Bug ID: 289225
           Summary: Outdated version of unbound (1.23.0 instead of 1.23.1)
           Product: Base System
           Version: 15.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: gbe@FreeBSD.org

We currently have unbound 1.23.0 imported on 15-CURRENT and 14-STABLE. On 16th
July, 2025 version 1.23.1 was released which includes a fix for CVE-2025-5994
(Cache poisoning via the ECS-enabled Rebirthday Attack).

I can tell, if we build unbound with ECS support, but we should update to the
latest version either way.

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-289225-227>