Hello community, here is the log from the commit of package pdns-recursor for openSUSE:Leap:15.2 checked in at 2020-05-21 12:59:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/pdns-recursor (Old) and /work/SRC/openSUSE:Leap:15.2/.pdns-recursor.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pdns-recursor" Thu May 21 12:59:40 2020 rev:40 rq:807318 version:4.3.1 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/pdns-recursor/pdns-recursor.changes 2020-03-09 18:15:17.397438219 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.pdns-recursor.new.2738/pdns-recursor.changes 2020-05-21 12:59:55.210870938 +0200 @@ -1,0 +2,13 @@ +Tue May 19 09:45:18 UTC 2020 - Adam Majer <adam.ma...@suse.de> + +- update to 4.3.1 + * fixes an issue where records in the answer section of + a NXDOMAIN response lacking an SOA were not properly validated + (CVE-2020-12244, bsc#1171553) + * fixes an issue where invalid hostname on the server can result in + disclosure of invalid memory (CVE-2020-10030, bsc#1171553) + * fixes an issue in the DNS protocol has been found that allows + malicious parties to use recursive DNS services to attack third + party authoritative name servers (CVE-2020-10995, bsc#1171553) + +------------------------------------------------------------------- Old: ---- pdns-recursor-4.3.0.tar.bz2 pdns-recursor-4.3.0.tar.bz2.sig New: ---- pdns-recursor-4.3.1.tar.bz2 pdns-recursor-4.3.1.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pdns-recursor.spec ++++++ --- /var/tmp/diff_new_pack.SjvVmS/_old 2020-05-21 12:59:55.534871643 +0200 +++ /var/tmp/diff_new_pack.SjvVmS/_new 2020-05-21 12:59:55.538871652 +0200 @@ -35,7 +35,7 @@ %endif Name: pdns-recursor -Version: 4.3.0 +Version: 4.3.1 Release: 0 BuildRequires: autoconf BuildRequires: automake ++++++ pdns-recursor-4.3.0.tar.bz2 -> pdns-recursor-4.3.1.tar.bz2 ++++++ ++++ 2475 lines of diff (skipped)
