Dear Knot Resolver users,
Knot Resolver 1.5.2 is a security release!
Security
--------
- fix CVE-2018-1000002: insufficient DNSSEC validation, allowing
attackers to deny existence of some data by forging packets.
Some combinations pointed out in RFC 6840 sections 4.1 and 4.3
were not taken into account.
Bugfixes
--------
- memcached: fix fallout from module rename in 1.5.1
Full changelog:
https://gitlab.labs.nic.cz/knot/knot-resolver/raw/v1.5.2/NEWS
Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-1.5.2.tar.xz
GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-1.5.2.tar.xz.asc
Documentation:
https://knot-resolver.readthedocs.io/en/v1.5.2/
--Vladimir