PowerDNS Recursor 4.1.1 Available!
Erik Winkels <[email protected]> Mon, 22 Jan 2018 16:04:21 +0100 (CET)
| Newsgroups | gmane.network.dns.powerdns.devel,gmane.network.dns.powerdns.user |
|---|---|
| Message-ID | <[email protected]> |
Hello everyone,
We're happy to release PowerDNS Recursor 4.1.1.
This is the second release in the 4.1 train with a fix for the following DNSSEC security advisory:
- PowerDNS Security Advisory 2018-01: Correctly handle ancestor delegation NSEC{,3} for children (CVE-2018-1000003)
Note that although this is a security vulnerability, the impact is limited to certain DNSSEC data wrongly being served as authentic. Specifically, attackers could cause PowerDNS to accept denials of existence for domain names that did in fact exist.
This is a release on the stable branch, containing a fix for the aforementioned security issue and several bug fixes from the development branch.
The full changelog is here[1].
The tarball is available on downloads.powerdns.com[2] (signature[3]) and packages for CentOS 6 and 7, Debian Jessie and Stretch, Ubuntu Artful, Trusty and Xenial are available from https://repo.powerdns.com.
Please send us all feedback and issues you might have via the mailinglist, or in case of a bug, via GitHub[4].
1 - https://doc.powerdns.com/recursor/changelog/4.1.html
2 - https://downloads.powerdns.com/releases/pdns-recursor-4.1.1.tar.bz2
3 - https://downloads.powerdns.com/releases/pdns-recursor-4.1.1.tar.bz2.sig
4 - https://github.com/PowerDNS/pdns/issues/new
--
Erik Winkels
PowerDNS.COM BV -- https://www.powerdns.com
_______________________________________________
Pdns-dev mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-dev
signature.asc
(application/pgp-signature, 475 B)
-----BEGIN PGP SIGNATURE----- Version: BCPG v1.56 iQEcBAABCgAGBQJaZf11AAoJEG/8M0ObDQTfxM4IALrZBqr3qOLigYisaICfqx6n hG0KXoG14uhKmK5tadr3+cQNOVynvMEu0rMVvdTZbvjCdVbfBB5HIGsFTjuE8taK iC5sQG5pq8B1gcD0PdZRjmhF/JzFtZJhNPyz0nCfZQ/46IgKdj922y1vONLtPD48 e4wbrFxr7Tw22r5nT90u0VHl5dWTnGfmIrnaFQjZlyXZqCBAv7JqxUTpFM+RAycV a8HZWLs6XDDGCxF2Zydw0ZeRShWZlgcGCb0tobTjayHW4rz7x8Obs89tfbmF7qai GOWsNEnuYoyxd6BUobFFRjJqzo2UqNbsE4ixCmSJxmpCRt6MXrB9Un1iS2ZpDC8= =sqhe -----END PGP SIGNATURE-----