Hello community, here is the log from the commit of package pdns-recursor for openSUSE:Factory checked in at 2020-05-19 14:50:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pdns-recursor (Old) and /work/SRC/openSUSE:Factory/.pdns-recursor.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pdns-recursor" Tue May 19 14:50:50 2020 rev:33 rq:807216 version:4.3.1 Changes: -------- --- /work/SRC/openSUSE:Factory/pdns-recursor/pdns-recursor.changes 2020-03-07 21:42:06.876429180 +0100 +++ /work/SRC/openSUSE:Factory/.pdns-recursor.new.2738/pdns-recursor.changes 2020-05-19 14:51:07.620421728 +0200 @@ -1,0 +2,13 @@ +Tue May 19 09:45:18 UTC 2020 - Adam Majer <adam.ma...@suse.de> + +- update to 4.3.1 + * fixes an issue where records in the answer section of + a NXDOMAIN response lacking an SOA were not properly validated + (CVE-2020-12244, bsc#1171553) + * fixes an issue where invalid hostname on the server can result in + disclosure of invalid memory (CVE-2020-10030, bsc#1171553) + * fixes an issue in the DNS protocol has been found that allows + malicious parties to use recursive DNS services to attack third + party authoritative name servers (CVE-2020-10995, bsc#1171553) + +------------------------------------------------------------------- Old: ---- pdns-recursor-4.3.0.tar.bz2 pdns-recursor-4.3.0.tar.bz2.sig New: ---- pdns-recursor-4.3.1.tar.bz2 pdns-recursor-4.3.1.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pdns-recursor.spec ++++++ --- /var/tmp/diff_new_pack.GbkmQ9/_old 2020-05-19 14:51:08.856424469 +0200 +++ /var/tmp/diff_new_pack.GbkmQ9/_new 2020-05-19 14:51:08.860424478 +0200 @@ -35,7 +35,7 @@ %endif Name: pdns-recursor -Version: 4.3.0 +Version: 4.3.1 Release: 0 BuildRequires: autoconf BuildRequires: automake ++++++ pdns-recursor-4.3.0.tar.bz2 -> pdns-recursor-4.3.1.tar.bz2 ++++++ ++++ 2475 lines of diff (skipped)