Debian: Unbound Critical Cache Poisoning Fix DSA-6071-1 CVE-2025-11411
Dec04

It was discovered that incorrect handling of promiscuous NS RRSets in Unbound, a validating, recursive, caching DNS resolver, could result in cache poisoning. For the stable distribution (trixie), this problem has been fixed in version 1.22.0-2+deb13u1.