Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 27: 2017-d7c0748c1b Critical API Issue in PowerDNS 4.1.0

fedora
Calendar Grey February 2, 2018
Dist Fedora Esm H88
The release of PowerDNS 4.1.0 for Fedora 27 fixes an API validation flaw that may lead to potential denial-of-service vulnerabilities.
- Update to 4.1.0 Release notes: https://doc.powerdns.com/authoritative/changelog/4.1.html Blog Announcement: https://blog.powerdns.com/2017/11/30/powerdns-authoritative-server-4-1

Summary

The PowerDNS Nameserver is a modern, advanced and high performance

authoritative-only nameserver. It is written from scratch and conforms

to all relevant DNS standards documents.

Furthermore, PowerDNS interfaces with almost any database.

- Update to 4.1.0 Release notes:

https://doc.powerdns.com/authoritative/changelog/4.1.html Blog Announcement:

https://blog.powerdns.com/2017/11/30/powerdns-authoritative-server-4-1

[ 1 ] Bug #1523486 - CVE-2017-15091 pdns: Missing read-only check for API operations in ws-auth.cc can lead to denial of service [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1523486

su -c 'dnf upgrade pdns' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 27
Version: 4.1.0
Release: 1.fc27
Summary: A modern, advanced and high performance authoritative-only nameserver

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here