Hello Knot DNS users,
CZ.NIC has released Knot DNS 3.1.8 and 3.0.11!
Both versions fix quite a serious bug in the TSIG processing when the server can crash
if the TSIG is malformed. If you don't use TSIG, you are not affected.
Special thanks go to 0x34d for finding this bug!
In addition to some other fixes, the 3.1.8 version introduces a new automatic ACL mode
that can help simplify complex configurations. This mode is disabled by default!
Changelogs:
https://gitlab.labs.nic.cz/knot/knot-dns/raw/v3.1.8/NEWS
https://gitlab.labs.nic.cz/knot/knot-dns/raw/v3.0.11/NEWS
Download:
https://www.knot-dns.cz/download/
Documentation:
https://www.knot-dns.cz/documentation/
Support:
https://www.knot-dns.cz/support/
Donation:
https://donations.nic.cz/donate/?project=knot-dns
Regards,
Daniel