Dear Knot Resolver users,

Knot Resolver 1.5.2 is a security release!

Security
--------
- fix CVE-2018-1000002: insufficient DNSSEC validation, allowing
  attackers to deny existence of some data by forging packets.
  Some combinations pointed out in RFC 6840 sections 4.1 and 4.3
  were not taken into account.

Bugfixes
--------
- memcached: fix fallout from module rename in 1.5.1


Full changelog:
https://gitlab.labs.nic.cz/knot/knot-resolver/raw/v1.5.2/NEWS

Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-1.5.2.tar.xz

GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-1.5.2.tar.xz.asc

Documentation:
https://knot-resolver.readthedocs.io/en/v1.5.2/

--Vladimir


Attachment: signature.asc
Description: OpenPGP digital signature

-- 
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users

Reply via email to