PowerDNS Recursor 4.1.1 Available!

Erik Winkels <[email protected]> Mon, 22 Jan 2018 16:04:21 +0100 (CET)
Newsgroups gmane.network.dns.powerdns.devel,gmane.network.dns.powerdns.user
Message-ID <[email protected]>
Hello everyone,

We're happy to release PowerDNS Recursor 4.1.1.

This is the second release in the 4.1 train with a fix for the following DNSSEC security advisory:

- PowerDNS Security Advisory 2018-01: Correctly handle ancestor delegation NSEC{,3} for children (CVE-2018-1000003)

Note that although this is a security vulnerability, the impact is limited to certain DNSSEC data wrongly being served as authentic. Specifically, attackers could cause PowerDNS to accept denials of existence for domain names that did in fact exist.

This is a release on the stable branch, containing a fix for the aforementioned security issue and several bug fixes from the development branch.

The full changelog is here[1].

The tarball is available on downloads.powerdns.com[2] (signature[3]) and packages for CentOS 6 and 7, Debian Jessie and Stretch, Ubuntu Artful, Trusty and Xenial are available from https://repo.powerdns.com.

Please send us all feedback and issues you might have via the mailinglist, or in case of a bug, via GitHub[4].

1 - https://doc.powerdns.com/recursor/changelog/4.1.html
2 - https://downloads.powerdns.com/releases/pdns-recursor-4.1.1.tar.bz2
3 - https://downloads.powerdns.com/releases/pdns-recursor-4.1.1.tar.bz2.sig
4 - https://github.com/PowerDNS/pdns/issues/new

--
Erik Winkels
PowerDNS.COM BV -- https://www.powerdns.com

_______________________________________________
Pdns-dev mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-dev
signature.asc (application/pgp-signature, 475 B)
-----BEGIN PGP SIGNATURE-----
Version: BCPG v1.56

iQEcBAABCgAGBQJaZf11AAoJEG/8M0ObDQTfxM4IALrZBqr3qOLigYisaICfqx6n
hG0KXoG14uhKmK5tadr3+cQNOVynvMEu0rMVvdTZbvjCdVbfBB5HIGsFTjuE8taK
iC5sQG5pq8B1gcD0PdZRjmhF/JzFtZJhNPyz0nCfZQ/46IgKdj922y1vONLtPD48
e4wbrFxr7Tw22r5nT90u0VHl5dWTnGfmIrnaFQjZlyXZqCBAv7JqxUTpFM+RAycV
a8HZWLs6XDDGCxF2Zydw0ZeRShWZlgcGCb0tobTjayHW4rz7x8Obs89tfbmF7qai
GOWsNEnuYoyxd6BUobFFRjJqzo2UqNbsE4ixCmSJxmpCRt6MXrB9Un1iS2ZpDC8=
=sqhe
-----END PGP SIGNATURE-----