Dear Knot Resolver users,
Knot Resolver 5.7.9 has been released!
Security:
- fix crash when forwarding - DoS via NULL deref
Reporters: Yuqi Qiu and Xiang Li, Nankai University (AOSP Lab).
- exhaustion of ports for outgoing TCP - DoS
The attack only worked if /network/out-interface-* was configured.
Reporters: Jonathan Horovitz, Yehuda Afek, and Anat Bremler-Barr from
Tel Aviv University.
Packaging:
- Debian 11 is no longer supported
- Debian,Ubuntu: i386 and armhf architectures no longer supported
Improvements:
- rpm: fix source build against libknot >= 3.6 (!1916)
- performance of reloads with large cache on tmpfs (!1932)
Incompatible changes:
- docker: remove cross-platform build for linux/arm/v7 (!1928)
Full changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.9/NEWS
Sources:
https://knot-resolver.nic.cz/release/knot-resolver-5.7.9.tar.xz
<https://knot-resolver.nic.cz/release/knot-resolver-5.7.9.tar.xz>
GPG signature:
https://knot-resolver.nic.cz/release/knot-resolver-5.7.9.tar.xz.asc
Documentation:
https://www.knot-resolver.cz/documentation/v5.7.9/
--
Ales Mrazek
PGP: 3057 EE9A 448F 362D 7420 5A77 9AB1 20DA 0A76 F6DE