Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

openSUSE: 2018:1462-2 Minor Severity: pdns DNS Replay Vulnerability

opensuse
Calendar Grey May 29, 2018
Scroller Opensuse
An openSUSE patch resolves a minor dns replay vulnerability found in pdns. For comprehensive information, see openSUSE-SU-2018:1462-1.
An update that fixes one vulnerability is now available.

Description

pdns was updated to 4.1.2.

Security fixes:

* Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046

bsc#1092540)

Improvements:

* API: increase serial after dnssec related updates

* Auth: lower ‘packet too short’ loglevel

* Make check-zone error on rows that have content but shouldn’t

* Auth: avoid an isane amount of new backend connections during an axfr

* Report unparseable data in stoul invalid_argument exception

* Backport: recheck serial when axfr is done

* Backport: add tcp support for alias

Bug Fixes:

* Auth: allocate new statements after reconnecting to postgresql

* Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)

* Rather than crash, sheepishly report no file/linenum

* Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate

Misc fixes:

* Move includes around to avoid boost L conflict

* Backport: update edns option code...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory low severity openSUSE pdns dns replay

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- SUSE Package Hub for SUSE Linux Enterprise 12:

zypper in -t patch openSUSE-2018-538=1

Package List

- SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64):

pdns-4.1.2-8.1

pdns-backend-godbc-4.1.2-8.1

pdns-backend-ldap-4.1.2-8.1

pdns-backend-lua-4.1.2-8.1

pdns-backend-mydns-4.1.2-8.1

pdns-backend-mysql-4.1.2-8.1

pdns-backend-postgresql-4.1.2-8.1

pdns-backend-remote-4.1.2-8.1

pdns-backend-sqlite3-4.1.2-8.1

References

https://www.suse.com/security/cve/CVE-2018-1046.html

https://bugzilla.suse.com/1092540

--

Severity
low
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2018:1462-1
Rating: low
Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12

Topics%20covered

Topics Covered

security advisory low severity openSUSE pdns dns replay

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.