Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora 30 Update: Fix for Moderate pdns Data Validation Concern

fedora
Calendar Grey March 29, 2019
Scroller Fedora
Latest PowerDNS release for Fedora tackles data integrity problems and boosts efficiency in DNS authority functions.
- Update to 4.1.7 Release notes: https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.7 Security Advisory: https://doc.powerdns.com/authoritative/security-advisorie...

Summary

The PowerDNS Nameserver is a modern, advanced and high performance

authoritative-only nameserver. It is written from scratch and conforms

to all relevant DNS standards documents.

Furthermore, PowerDNS interfaces with almost any database.

- Update to 4.1.7 Release notes:

https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.7 Security

Advisory: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html

[ 1 ] Bug #1689013 - CVE-2019-3871 pdns: insufficient validation of data when building a HTTP request from a DNS query

https://bugzilla.redhat.com/show_bug.cgi?id=1689013

su -c 'dnf upgrade --advisory FEDORA-2019-2fca900a42' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Product: Fedora 30
Version: 4.1.7
Release: 1.fc30
Summary: A modern, advanced and high performance authoritative-only nameserver

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.