diff --git a/unbound.conf b/unbound.conf
index 748a661d06f76e47a20b9b2f57561cec1e7383bc..42e35738d6690dc5df2e0771a5f052a60266e877 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -805,7 +805,7 @@ remote-control:
 	# Enable remote control with unbound-control(8) here.
 	# set up the keys and certificates with unbound-control-setup.
 	# Note: required for unbound-munin package
-	control-enable: yes
+	control-enable: no
 
 	# Set to no and use an absolute path as control-interface to use
 	# a unix local named pipe for unbound-control.
diff --git a/unbound.spec b/unbound.spec
index c0eaf0737b664f5e5dcbdd22e2be25b3c123d72e..bac5bec8d98a586e5859c7415ccc90b066f2e422 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -2,7 +2,7 @@
 
 Name:          unbound
 Version:       1.11.0
-Release:       9
+Release:       10
 Summary:       Unbound is a validating, recursive, caching DNS resolver
 License:       BSD
 Url:           https://nlnetlabs.nl/projects/unbound/about/
@@ -231,6 +231,12 @@ popd
 %{_mandir}/man*
 
 %changelog
+* Tue Feb 27 2024 gaihuiying <eaglegai@163.com> - 1.11.0-10
+- Type:cves
+- CVE:CVE-2024-1488
+- SUG:NA
+- DESC:fix CVE-2024-1488
+
 * Fri Feb 23 2024 gaihuiying <eaglegai@163.com> - 1.11.0-9
 - Type:bugfix
 - CVE:NA