Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Fedora 40: dnsdist 2024-4ffc26d8cb Security Advisory Updates

fedora
Calendar Grey October 17, 2024
Scroller Fedora
Fedora security advisory for dnsdist includes DoS mitigation updates and guidance for affected users.
Update to latest upstream

Summary

dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life

is to route traffic to the best server, delivering top performance to

legitimate users while shunting or blocking abusive traffic.

Update Information:

Update to latest upstream

Topics%20covered

Topics Covered

No topics assigned

Change Log

* Fri Oct 4 2024 Sander Hoentjen - 1.9.7-1 - Update to 1.9.7 * Thu Jul 25 2024 Sander Hoentjen - 1.9.6-1 - update to 1.9.6 - Closes #2293523 * Mon May 13 2024 Sander Hoentjen - 1.9.4-1 - Update to 1.9.4 - Fixes CVE-2024-25581

References


[ 1 ] Bug #2280229 - CVE-2024-25581 dnsdist: Transfer requests received over DoH can lead to a denial of service in DNSdist [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2280229 [ 2 ] Bug #2293523 - dnsdist-1.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2293523

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4ffc26d8cb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dnsdist
Product: Fedora 40
Version: 1.9.7
Release: 1.fc40
URL: https://www.dnsdist.org/index.html
Summary: Highly DNS-, DoS- and abuse-aware loadbalancer

Topics%20covered

Topics Covered

No topics assigned

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.