Dear Knot Resolver users,
Knot Resolver 6.5.1 has been released!
Security:
- fix crash when forwarding - DoS via NULL deref
Reporters: Yuqi Qiu and Xiang Li, Nankai University (AOSP Lab).
- fix crash or loop - DoS
Reporters: Joshua from AISLE
- exhaustion of ports for outgoing TCP - DoS
The attack only worked if /network/out-interface-* was configured.
Reporters: Jonathan Horovitz, Yehuda Afek, and Anat Bremler-Barr from
Tel Aviv University.
Bugfixes:
- python: fix logging level mapping bug, regressed in 6.5.0 (!1918)
- fix build with musl libc, regressed in 6.5.0 (!1917)
- DoH: the unencrypted mode opened also a UDP socket (!1921)
Improvements:
- performance of reloads with large cache on tmpfs (!1924)
Full changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v6.5.1/NEWS
Sources:
https://knot-resolver.nic.cz/release/knot-resolver-6.5.1.tar.xz
<https://knot-resolver.nic.cz/release/knot-resolver-6.5.1.tar.xz>
GPG signature:
https://knot-resolver.nic.cz/release/knot-resolver-6.5.1.tar.xz.asc
Documentation:
https://www.knot-resolver.cz/documentation/v6.5.1/
--
Ales Mrazek
PGP: 3057 EE9A 448F 362D 7420 5A77 9AB1 20DA 0A76 F6DE