Kyle Harding 5546844076 Update Unbound to release 1.23.1 ...

This security release fixes the Rebirthday Attack CVE-2025-5994.

This re-opens up resolvers to a birthday paradox, for EDNS client subnet
servers that respond with non-ECS answers. It only affects Unbound when
compiled with --enable-subnet, and subnetmod is enabled with config
options that send ECS information to upstream servers.

The CVE is described here
https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.1

Signed-off-by: Kyle Harding <kyle@balena.io>

2025-07-16 13:17:35 -04:00

..

unbound

Update Unbound to release 1.23.1

2025-07-16 13:17:35 -04:00