You are here
Home > Preporuke > Ranjivost programskog paketa pdns-recursor

Ranjivost programskog paketa pdns-recursor

  • Detalji os-a: FED
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2014-10628
2014-09-11 00:05:29
——————————————————————————–

Name : pdns-recursor
Product : Fedora 19
Version : 3.6.1
Release : 1.fc19
URL : http://powerdns.com
Summary : Modern, advanced and high performance recursing/non authoritative name server
Description :
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this
package if you need a dns cache for your network.

——————————————————————————–
Update Information:

– PowerDNS Recursor Security Release 3.6.1
– CVE-2014-3614

Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely (CVE-2014-3614)
Affected: All deployments of PowerDNS Recursor 3.6.0
——————————————————————————–
ChangeLog:

* Wed Sep 10 2014 Morten Stevens <mstevens@imt-systems.com> – 3.6.1-1
– Update to 3.6.1
– CVE-2014-3614 (#1139251
* Fri Jun 20 2014 Morten Stevens <mstevens@imt-systems.com> – 3.6.0-1
– Update to 3.6.0
* Fri May 30 2014 Morten Stevens <mstevens@imt-systems.com> – 3.6.0-0.1.rc1
– Update to 3.6.0-rc1
* Fri May 23 2014 Petr Machata <pmachata@redhat.com> – 3.5.3-3
– Rebuild for boost 1.55.0
* Mon Feb 10 2014 Morten Stevens <mstevens@imt-systems.com> – 3.5.3-2
– Add upstream patch to fix rhbz#1063305
* Tue Sep 17 2013 Morten Stevens <mstevens@imt-systems.com> – 3.5.3-1
– Update to 3.5.3
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 3.5.2-4
– Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Jul 30 2013 Petr Machata <pmachata@redhat.com> – 3.5.2-3
– Rebuild for boost 1.54.0
* Mon Jun 17 2013 Morten Stevens <mstevens@imt-systems.com> – 3.5.2-2
– Added support for lua 5.2
* Mon Jun 10 2013 Morten Stevens <mstevens@imt-systems.com> – 3.5.2-1
– Update to 3.5.2
——————————————————————————–
References:

[ 1 ] Bug #1139251 – CVE-2014-3614 A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely
https://bugzilla.redhat.com/show_bug.cgi?id=1139251
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update pdns-recursor’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2014-10632
2014-09-11 00:05:40
——————————————————————————–

Name : pdns-recursor
Product : Fedora 20
Version : 3.6.1
Release : 1.fc20
URL : http://powerdns.com
Summary : Modern, advanced and high performance recursing/non authoritative name server
Description :
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this
package if you need a dns cache for your network.

——————————————————————————–
Update Information:

– PowerDNS Recursor Security Release 3.6.1
– CVE-2014-3614

Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely (CVE-2014-3614)
Affected: All deployments of PowerDNS Recursor 3.6.0
——————————————————————————–
ChangeLog:

* Wed Sep 10 2014 Morten Stevens <mstevens@imt-systems.com> – 3.6.1-1
– Update to 3.6.1
– CVE-2014-3614 (#1139251)
* Fri Jun 20 2014 Morten Stevens <mstevens@imt-systems.com> – 3.6.0-1
– Update to 3.6.0
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 3.6.0-0.2.rc1
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri May 30 2014 Morten Stevens <mstevens@imt-systems.com> – 3.6.0-0.1.rc1
– Update to 3.6.0-rc1
* Fri May 23 2014 Petr Machata <pmachata@redhat.com> – 3.5.3-3
– Rebuild for boost 1.55.0
* Mon Feb 10 2014 Morten Stevens <mstevens@imt-systems.com> – 3.5.3-2
– Add upstream patch to fix rhbz#1063305
——————————————————————————–
References:

[ 1 ] Bug #1139251 – CVE-2014-3614 A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely
https://bugzilla.redhat.com/show_bug.cgi?id=1139251
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update pdns-recursor’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorTomislav Protega
Cert idNCERT-REF-2014-09-0001-ADV
CveCVE-2014-3614
ID izvornikaFEDORA-2014-10628 FEDORA-2014-10632
Proizvodpdns-recursor
Izvorhttp://www.redhat.com
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa libav

Otkriven je sigurnosni nedostatak u programskom paketu libav. Otkriveni nedostatak potencijalnim napadačima omogućuje izvođenje napada uskraćivanjem usluge. Svim korisnicima savjetuje...

Close