Fedora alert FEDORA-2018-e14840a7f5 (pdns-recursor)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 29 Update: pdns-recursor-4.1.8-1.fc29 | |
| Date: | Sun, 16 Dec 2018 04:22:46 +0000 (UTC) | |
| Message-ID: | <20181216042246.C10476045A13@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-e14840a7f5 2018-12-16 04:21:41.421217 -------------------------------------------------------------------------------- Name : pdns-recursor Product : Fedora 29 Version : 4.1.8 Release : 1.fc29 URL : https://powerdns.com Summary : Modern, advanced and high performance recursing/non authoritative name server Description : PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network. -------------------------------------------------------------------------------- Update Information: Fixes CVE-2018-16855 (Crafted query can cause a denial of service) ---- New upstream release with security fixes for CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 28 2018 Ruben Kerkhof <ruben@rubenkerkhof.com> - 4.1.8-1 - Update to new upstream - Fixes CVE-2018-16855 * Tue Nov 13 2018 Sander Hoentjen <sander@hoentjen.eu> - 4.1.7-1 - Update to new upstream - Fixes CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1649028 - CVE-2018-14626 pdns: Packet cache pollution via crafted query https://bugzilla.redhat.com/show_bug.cgi?id=1649028 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-e14840a7f5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann...