stable

knot-resolver-2.3.0-1.el7

FEDORA-EPEL-2018-cae67a6aed created by tkrizek 6 years ago for Fedora EPEL 7

Knot Resolver 2.3.0 (2018-04-23)

Security

  • fix CVE-2018-1110: denial of service triggered by malformed DNS messages (!550, !558, security!2, security!4)
  • increase resilience against slow lorris attack (security!5)

Bugfixes

  • validation: fix SERVFAIL in case of CNAME to NXDOMAIN in a single zone (!538)
  • validation: fix SERVFAIL for DS . query (!544)
  • lib/resolve: don't send unecessary queries to parent zone (!513)
  • iterate: fix validation for zones where parent and child share NS (!543)
  • TLS: improve error handling and documentation (!536, !555, !559)

Improvements

  • prefill: new module to periodically import root zone into cache (replacement for RFC 7706, !511)
  • network_listen_fd: always create end point for supervisor supplied file descriptor
  • use CPPFLAGS build environment variable if set (!547)

This update has been submitted for testing by tkrizek.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by tkrizek.

6 years ago

This update has been submitted for stable by tkrizek.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
1
Stable by Time
disabled
Dates
submitted
6 years ago
in testing
6 years ago
in stable
6 years ago

Automated Test Results