Lucene search

K
suseSuseOPENSUSE-SU-2018:4062-1
HistoryDec 10, 2018 - 6:16 p.m.

Security update for pdns-recursor (moderate)

2018-12-1018:16:51
lists.opensuse.org
74

0.605 Medium

EPSS

Percentile

97.5%

This update for pdns-recursor to version 4.1.8 fixes the following issues:

Security issues fixed:

  • CVE-2018-10851: Fixed denial of service via crafted zone record or
    crafted answer (bsc#1114157).
  • CVE-2018-14644: Fixed denial of service via crafted query for meta-types
    (bsc#1114170).
  • CVE-2018-14626: Fixed packet cache pollution via crafted query
    (bsc#1114169).
  • CVE-2018-16855: Fixed case where a crafted query could cause a denial of
    service (bsc#1116592)

Non-security issues fixed:

  • Fixed build failure with Boost 1.67.0 (bsc#1089814).
  • Revert รขย€ย˜Keep the EDNS status of a server on FormErr with EDNSรขย€ย™
  • Refuse queries for all meta-types

For more details about this update, refer to:
<a href=โ€œhttps://blog.powerdns.com/2018/11/26/powerdns-recursor-4-1-8-released/โ€>https://blog.powerdns.com/2018/11/26/powerdns-recursor-4-1-8-released/</a>