Dear Knot Resolver users,

Knot Resolver 6.5.1 has been released!

Security:
- fix crash when forwarding - DoS via NULL deref
  Reporters: Yuqi Qiu and Xiang Li, Nankai University (AOSP Lab).
- fix crash or loop - DoS
  Reporters: Joshua from AISLE
- exhaustion of ports for outgoing TCP - DoS
  The attack only worked if /network/out-interface-* was configured.
  Reporters: Jonathan Horovitz, Yehuda Afek, and Anat Bremler-Barr from Tel Aviv University.

Bugfixes:
- python: fix logging level mapping bug, regressed in 6.5.0 (!1918)
- fix build with musl libc, regressed in 6.5.0 (!1917)
- DoH: the unencrypted mode opened also a UDP socket (!1921)

Improvements:
- performance of reloads with large cache on tmpfs (!1924)

Full changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v6.5.1/NEWS

Sources:
https://knot-resolver.nic.cz/release/knot-resolver-6.5.1.tar.xz

GPG signature:
https://knot-resolver.nic.cz/release/knot-resolver-6.5.1.tar.xz.asc

Documentation:
https://www.knot-resolver.cz/documentation/v6.5.1/

-- 
Ales Mrazek
PGP: 3057 EE9A 448F 362D 7420 5A77 9AB1 20DA 0A76 F6DE