Stay Secure with the Latest Linux Advisories

security advisoryFedoraDoS

Fedora 40 pDns-recursor: 2024-af0bf62ac6 critical: DoS cache inefficiency

Update to latest upstream. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-af0bf62ac6 2024-10-16 01:06:42.809486 -------------------------------------------------------------------------------- Name : pdns-recursor Product : Fedora 40 Version : 5.0.9 Release : 1.fc40 URL : https://www.powerdns.com/ Summary : Modern, advanced and high performance recursing/non authoritative name server Description : PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network. -------------------------------------------------------------------------------- Update Information: Update to latest upstream -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 4 2024 Sander Hoentjen - 5.0.9-1 - Update to 5.0.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2295543 - pdns-recursor-5.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2295543 [ 2 ] Bug #2299449 - pdns-recursor-5.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2299449 [ 3 ] Bug #2316319 - CVE-2024-25590 pdns-recursor: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2316319 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-af0bf62ac6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Essential patch for Fedora 40's pdns-recursor tackles denial of service vulnerabilities arising from caching shortcomings.. Fedora, pdns-recursor, security advisory, DNS server, DoS risk. . Severity: Critical. LinuxSecurity.com Team

Oct 16, 2024 •Critical Fedora