-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-2ff7cdbb7b 2018-11-16 02:57:27.749520 --------------------------------------------------------------------------------
Name : pdns Product : Fedora 28 Version : 4.1.5 Release : 1.fc28 URL : http://powerdns.com Summary : A modern, advanced and high performance authoritative-only nameserver Description : The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database.
-------------------------------------------------------------------------------- Update Information:
- Update to 4.1.5 Release notes: https://blog.powerdns.com/2018/11/06 /powerdns-authoritative-server-4-0-6-4-1-5-and-recursor-4-0-9-4-1-5-released/ PowerDNS Security Advisory 2018-03 (https://doc.powerdns.com/authoritative /security-advisories/powerdns-advisory-2018-03.html) (CVE-2018-10851) PowerDNS Security Advisory 2018-05 (https://doc.powerdns.com/authoritative/security- advisories/powerdns-advisory-2018-05.html) (CVE-2018-14626) -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 6 2018 Morten Stevens mstevens@fedoraproject.org - 4.1.5-1 - Update to 4.1.5 - PowerDNS Security Advisory 2018-03 (CVE-2018-10851) - PowerDNS Security Advisory 2018-05 (CVE-2018-14626) * Wed Sep 19 2018 Morten Stevens mstevens@fedoraproject.org - 4.1.4-1 - Update to 4.1.4 * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 4.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri May 25 2018 Morten Stevens mstevens@fedoraproject.org - 4.1.3-1 - Update to 4.1.3 * Wed May 16 2018 Morten Stevens mstevens@fedoraproject.org - 4.1.2-1 - Update to 4.1.2 * Mon Mar 19 2018 Iryna Shcherbina ishcherb@redhat.com - 4.1.1-3 - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1649028 - CVE-2018-14626 pdns: Packet cache pollution via crafted query https://bugzilla.redhat.com/show_bug.cgi?id=1649028 [ 2 ] Bug #1588185 - CVE-2018-10851 pdns: Memory leak while parsing malformed records https://bugzilla.redhat.com/show_bug.cgi?id=1588185 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-2ff7cdbb7b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org