This advisory from Red Hat Product Security concerns a medium severity vulnerability tracked as CVE-2025-11411 affecting the unbound DNS resolver packages distributed as part of Red Hat Hardened Images. The update includes new versions of multiple unbound RPMs (version 1.24.2-11.1.hum1) for aarch64 and x86_64 architectures. The vulnerability is categorized under CWE-349 (Exposure to Incorrect Control of Operations). The vendor advisory does not specify affected versions or detailed technical impact, nor does it provide a CVSS score. No exploits are currently known in the wild.

The vulnerability affects unbound RPM packages used in Red Hat Hardened Images, potentially exposing systems to risks related to incorrect control of operations (CWE-349). The medium severity rating indicates a moderate level of risk, but no active exploitation has been reported. The exact impact on confidentiality, integrity, or availability is not detailed in the advisory.

Red Hat has released updated RPM packages (unbound-1.24.2-11.1.hum1 and related packages) addressing this vulnerability. Users of affected Red Hat Hardened Images should apply these updates to remediate the issue. Patch status is confirmed by the vendor advisory indicating a fix is available. No additional mitigation steps are specified or required beyond applying the updated packages.