Fedora 25: 2017-038e821698 Moderate: Knot Resolver DNS Cache Fix

The Knot DNS Resolver is a caching full resolver implementation written in C

and LuaJIT, including both a resolver library and a daemon. Modular

architecture of the library keeps the core tiny and efficient, and provides

a state-machine like API for extensions.

The package is pre-configured as local caching resolver.

To start using it, just start the local DNS socket:

BEWARE:

Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968

you need to switch your system to SELinux permissive mode.

Knot Resolver 1.2.3 (2017-02-23) ================================ Bugfixes -------- - Disable storing GLUE records into the cache even in the (non- default) QUERY_PERMISSIVE mode - iterate: skip answer RRs that don't match the query - layer/iterate: some additional processing for referrals - lib/resolve: zonecut fetching error was fixed Knot Resolver 1.2.2 (2017-02-10) ================================ Bugfixes: --------- - Fix -k argument processing to avoid out-of-bounds memory accesses - lib/resolve: fix zonecut fetching for explicit DS queries - hints: more NULL checks - Fix TA bootstrapping for multiple TAs in the IANA XML file Testing: -------- - Update tests to run tests with and without QNAME minimization Knot Resolver 1.2.1 (2017-02-01) ==================================== Security: --------- - Under certain conditions, a cached negative answer from a CD query would be reused to construct response for non-CD queries, resulting in Insecure status instead of Bogus....