starred/unbound-docker
1
0
Fork 0
mirror of https://github.com/klutchell/unbound-docker.git synced 2026-10-14 16:02:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update Unbound to release 1.23.1

Browse Source 
This security release fixes the Rebirthday Attack CVE-2025-5994.

This re-opens up resolvers to a birthday paradox, for EDNS client subnet
servers that respond with non-ECS answers. It only affects Unbound when
compiled with --enable-subnet, and subnetmod is enabled with config
options that send ECS information to upstream servers.

The CVE is described here
https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.1

Signed-off-by: Kyle Harding <kyle@balena.io>
This commit is contained in:
Kyle Harding
2025-07-16 13:17:35 -04:00
parent 3955725b02
commit 5546844076
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+3 -3
View File
@@ -64,9 +64,9 @@ FROM build-base AS unbound
WORKDIR /src
ARG UNBOUND_VERSION=1.23.0
# https://nlnetlabs.nl/downloads/unbound/unbound-1.23.0.tar.gz.sha256
ARG UNBOUND_SHA256="959bd5f3875316d7b3f67ee237a56de5565f5b35fc9b5fc3cea6cfe735a03bb8"
ARG UNBOUND_VERSION=1.23.1
# https://nlnetlabs.nl/downloads/unbound/unbound-1.23.1.tar.gz.sha256
ARG UNBOUND_SHA256="6a6b117c799d8de3868643397e0fd71591f6d42f4473f598bdb22609ff362590"
ADD https://nlnetlabs.nl/downloads/unbound/unbound-${UNBOUND_VERSION}.tar.gz unbound.tar.gz
rootfs_overlay/etc/unbound/unbound.conf.example
+1 -1
View File
@@ -1,7 +1,7 @@
#
# Example configuration file.
#
# See unbound.conf(5) man page, version 1.23.0.
# See unbound.conf(5) man page, version 1.23.1.
#
# this is a comment.