Fedora 25: knot Security Update 2017-038e821698
Summary
Knot DNS is a high-performance authoritative DNS server implementation.
Update Information:
Knot Resolver 1.2.3 (2017-02-23) ================================ Bugfixes
-------- - Disable storing GLUE records into the cache even in the (non-
default) QUERY_PERMISSIVE mode - iterate: skip answer RRs that don't match the
query - layer/iterate: some additional processing for referrals - lib/resolve:
zonecut fetching error was fixed Knot Resolver 1.2.2 (2017-02-10)
================================ Bugfixes: --------- - Fix -k argument
processing to avoid out-of-bounds memory accesses - lib/resolve: fix zonecut
fetching for explicit DS queries - hints: more NULL checks - Fix TA
bootstrapping for multiple TAs in the IANA XML file Testing: -------- - Update
tests to run tests with and without QNAME minimization Knot Resolver 1.2.1
(2017-02-01) ==================================== Security: --------- - Under
certain conditions, a cached negative answer from a CD query would be reused
to construct response for non-CD queries, resulting in Insecure status instead
of Bogus. Only 1.2.0 release was affected. Documentation ------------- -
Update the typo in the documentation: The query trace policy is named
policy.QTRACE (and not policy.TRACE) Bugfixes: --------- - lua: make the map
command check its arguments Knot DNS 2.4.1 (2017-02-10)
=========================== Bugfixes: -------- - Transfer of a huge rrset goes
into an infinite loop - Huge response over TCP contains useless TC bit instead
of SERVFAIL - Failed to build utilities with disabled daemon - Memory leaks
during keys removal - Rough TSIG packet reservation causes early truncation -
Minor out-of-bounds string termination write in rrset dump - Server crash
during stop if failed to open timers DB - Poor minimum UDP-max-size
configuration check - Failed to receive one-record-per-message IXFR-style AXFR
- Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message
Improvements: ------------- - Speed-up of rdata addition into a huge rrset -
Introduce check of minumum timeout for next refresh - Dnsproxy module can
forward all queries without local resolving ---- Latest upstream release.
Includes bugfixes for DNSSEC key management. ---- Latest upstream versions
with bunch of impotant bugfixes.
Change Log
References
Fedora Update Notification FEDORA-2017-038e821698 2017-03-09 08:01:59.598458 Name : knot Product : Fedora 25 Version : 2.4.1 Release : 1.fc25 URL : https://www.knot-dns.cz/ Summary : High-performance authoritative DNS server Description : Knot DNS is a high-performance authoritative DNS server implementation.
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade knot' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
