Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9: Unbound Important Domain Hijacking Advisory MGASA-2025-0318

mageia
Calendar Grey December 5, 2025
Dist Mageia Esm H88
Updated unbound packages in Mageia 9 resolve important security issues, preventing domain hijacking vulnerabilities.
MGASA-2025-0318 - Updated unbound packages fix security vulnerabilities

Summary

Description: Possible domain hijacking via promiscuous records in the authority section. (CVE-2025-11411). Previous fixes for CVE-2025-11411 released with Unbound 1.24.1 were not complete.

References

- https://bugs.mageia.org/show_bug.cgi?id=34785

- https://advisories.mageia.org/MGASA-2025-0273.html

- https://www.openwall.com/lists/oss-security/2025/11/26/4

- https://www.cve.org/CVERecord?id=CVE-2025-11411

Topics%20covered

Topics Covered

security advisory security issue important domain hijacking unbound Mageia

Resolution

SRPMS

- 9/core/unbound-1.24.2-1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 04 Dec 2025
URL: https://advisories.mageia.org/MGASA-2025-0318.html
Type: security
CVE: CVE-2025-11411

Topics%20covered

Topics Covered

security advisory security issue important domain hijacking unbound Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here