Created attachment 264802 [details] Proposed patch to 1.24.1 It builds and It's running here. I'm not familiar with this port, use with caution.
That is the patch I arrived at as well, we also need to update the vuxml bits. I'm working on that now
(In reply to R. Christian McDonald from comment #2). The maintainer (me) is traveling and doesn;t has a lot of net access. The patch is OK. I also started to work on a vuxml thingy. If you are quicker than me, just send a new patch with the vuxml stuff included and I will give it an OK.
Created attachment 264814 [details] diff to update New patch with vuxml bits.
Created attachment 264815 [details] vuxml patch Stipd me, forgot this
(In reply to Jaap Akkerhuis from comment #4) Yeah, I realized I forgot this. Rcn and Raul, thanls for working on this
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=f4ead079c7092b07e051a32b9a830919dc52f07d commit f4ead079c7092b07e051a32b9a830919dc52f07d Author: Jaap Akkerhuis <jaap@NLnetLabs.nl> AuthorDate: 2025-10-23 16:50:47 +0000 Commit: R. Christian McDonald <rcm@FreeBSD.org> CommitDate: 2025-10-23 17:01:07 +0000 security/vuxml: document unbound non-DNSSEC cache poisoning vulns * CVE-2025-11411 PR: 290429 Reviewed by: brd Sponsored by: Rubicon Communications, LLC ("Netgate") security/vuxml/vuln/2025.xml | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+)
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=b8274415ecc9b67094dba3b4dc7ec64fccb359e7 commit b8274415ecc9b67094dba3b4dc7ec64fccb359e7 Author: Raúl <raul.munoz@custos.es> AuthorDate: 2025-10-23 17:08:45 +0000 Commit: R. Christian McDonald <rcm@FreeBSD.org> CommitDate: 2025-10-23 17:13:45 +0000 dns/unbound: Update 1.24.0 => 1.24.1 News: https://www.nlnetlabs.nl/news/2025/Oct/22/unbound-1.24.1-released/ PR: 290429 Reviewed by: brd MFH: 2025Q3 Security: CVE-2025-11411 Sponsored by: Rubicon Communications, LLC ("Netgate") dns/unbound/Makefile | 2 +- dns/unbound/distinfo | 6 +++--- dns/unbound/pkg-plist | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-)
A commit in branch 2025Q4 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=ec6e263fd5b14902701a2c8bf712bfedfc049811 commit ec6e263fd5b14902701a2c8bf712bfedfc049811 Author: Raúl <raul.munoz@custos.es> AuthorDate: 2025-10-23 17:08:45 +0000 Commit: R. Christian McDonald <rcm@FreeBSD.org> CommitDate: 2025-10-23 17:59:28 +0000 dns/unbound: Update 1.24.0 => 1.24.1 News: https://www.nlnetlabs.nl/news/2025/Oct/22/unbound-1.24.1-released/ PR: 290429 Reviewed by: brd MFH: 2025Q3 Security: CVE-2025-11411 Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit b8274415ecc9b67094dba3b4dc7ec64fccb359e7) dns/unbound/Makefile | 2 +- dns/unbound/distinfo | 6 +++--- dns/unbound/pkg-plist | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-)