security advisories for Authoritative 4.3.1, 4.2.3, 4.1.14

--===============5114140917843246631==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-LQuE6Zt83lRRu64QXQLM"


--=-LQuE6Zt83lRRu64QXQLM
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello,

Today we have released PowerDNS Authoritative Server versions 4.3.1, 4.2.3 =
and 4.1.14, containing a fix for PowerDNS Security Advisory 2020-05 [1].

Additionally, we are publishing PowerDNS Security Advisory 2020-06 [2] toda=
y (=E2=80=98Various issues have been found in our GSS-TSIG support, where a=
n unauthorized attacker could cause crashes, possibly leak uninitialised me=
mory, and possibly execute arbitrary code.=E2=80=99). Our GSS-TSIG support =
was never shipped in any packages by us or, to our knowledge, any other dis=
tributions. The GSS-TSIG code will be gone in version 4.4.0. We=E2=80=99ve =
chosen to leave the code intact for older versions, so that users that do r=
ely on it today can keep doing so, keeping in mind the risks detailed in Ad=
visory 2020-06.

Regarding 2020-05: An issue has been found in PowerDNS Authoritative Server=
 where an authorized user with the ability to insert crafted records into a=
 zone might be able to leak the content of uninitialized memory. Such a use=
r could be a customer inserting data via a control panel, or somebody with =
access to the REST API. Crafted records cannot be inserted via AXFR. This i=
ssue is resolved in the versions mentioned above. (4.1.14 changelog [3], 4.=
2.3 changelog [4])

Version 4.3.2 also contains various other bug fixes and improvements, pleas=
e see the changelog [5] for all details.

Tarballs and signatures are available at https://downloads.powerdns.com/rel=
eases/

Packages for various Linux distributions are available from our repository =
at https://repo.powerdns.com/

4.0 and older releases are EOL, refer to the documentation for details abou=
t our release cycles.

Please send us all feedback and issues you might have via the mailing list =
or our IRC channel, or in case of a bug, via GitHub.

1: https://docs.powerdns.com/authoritative/security-advisories/powerdns-adv=
isory-2020-05.html
2: https://docs.powerdns.com/authoritative/security-advisories/powerdns-adv=
isory-2020-06.html
3: https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.14
4: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.3
5: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1

Kind regards,
--=20
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/

--=-LQuE6Zt83lRRu64QXQLM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=i5HN
-----END PGP SIGNATURE-----

--=-LQuE6Zt83lRRu64QXQLM--


--===============5114140917843246631==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Pdns-dev mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-dev

--===============5114140917843246631==--