Security update for pdns-recursor (moderate)

An update that fixes three vulnerabilities is now available.

Description:

This update for pdns-recursor fixes the following issues:

• update to 4.1.16
  • fixes an issue where records in the answer section of a NXDOMAIN
    response lacking an SOA were not properly validated (CVE-2020-12244,
    boo#1171553)
  • fixes an issue where invalid hostname on the server can result in
    disclosure of invalid memory (CVE-2020-10030, boo#1171553)
  • fixes an issue in the DNS protocol has been found that allows
    malicious parties to use recursive DNS services to attack third party
    authoritative name servers (CVE-2020-10995, boo#1171553)

For details see
https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-698=1

• openSUSE Backports SLE-15-SP1:

  zypper in -t patch openSUSE-2020-698=1

• SUSE Package Hub for SUSE Linux Enterprise 12:

  zypper in -t patch openSUSE-2020-698=1