Knot Resolver 2.4.1 (2018-08-02)

Security

fix CVE-2018-10920: Improper input validation bug in DNS resolver component (security!7, security!9)

cache: fix TTL overflow in packet due to min_ttl (#388, security!8)
TLS session resumption: avoid bad scheduling of rotation (#385)
HTTP module: fix a regression in 2.4.0 which broke custom certs (!632)
cache: NSEC3 negative cache even without NS record (#384) This fixes lower hit rate in NSEC3 zones (since 2.4.0).
minor TCP and TLS fixes (!623, !624, !626)

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-eb9ca8b218

This update has been submitted for testing by tkrizek.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for batched by tkrizek.

This update has been submitted for stable by tkrizek.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

BZ#1610951 CVE-2018-10920 knot-resolver: Improper input validation bug in DNS resolver component

knot-resolver-2.4.1-1.fc27

ignored