stable

knot-resolver-2.3.0-1.fc27

FEDORA-2018-a120d509ab created by tkrizek 6 years ago for Fedora 27

Knot Resolver 2.3.0 (2018-04-23)

Security

  • fix CVE-2018-1110: denial of service triggered by malformed DNS messages (!550, !558, security!2, security!4)
  • increase resilience against slow lorris attack (security!5)

Bugfixes

  • validation: fix SERVFAIL in case of CNAME to NXDOMAIN in a single zone (!538)
  • validation: fix SERVFAIL for DS . query (!544)
  • lib/resolve: don't send unecessary queries to parent zone (!513)
  • iterate: fix validation for zones where parent and child share NS (!543)
  • TLS: improve error handling and documentation (!536, !555, !559)

Improvements

  • prefill: new module to periodically import root zone into cache (replacement for RFC 7706, !511)
  • network_listen_fd: always create end point for supervisor supplied file descriptor
  • use CPPFLAGS build environment variable if set (!547)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-a120d509ab

This update has been submitted for testing by tkrizek.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by tkrizek.

6 years ago

This update has been submitted for stable by tkrizek.

6 years ago

knot-resolver-2.3.0-1.fc27 ejected from the push because u"Cannot find relevant tag for knot-resolver-2.3.0-1.fc27. None of ['f27-updates', 'f27-updates-pending'] are in [u'f22-updates-testing', u'dist-6E-epel-testing', u'f21-updates-testing', u'f25-updates-testing', u'f24-updates-testing', u'epel7-testing', u'f27-modular-updates-testing', u'dist-5E-epel-testing', u'f23-updates-testing', u'f26-updates-testing', u'f28-updates-testing', u'f27-updates-testing', u'f28-modular-updates-testing']."

6 years ago

This update has been marked stable administratively. See https://pagure.io/fedora-infrastructure/issue/6925

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
1
Stable by Time
disabled
Dates
submitted
6 years ago
in testing
6 years ago
in stable
6 years ago

Automated Test Results