10:20 joneum 

Update to 4.3.2

This update contains a security fix for CVE-2020-14196.

The issue is:

CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL
applied to the internal web server via webserver-allow-from is not properly
enforced, allowing a remote attacker to send HTTP queries to the internal web
server, bypassing the restriction.

In the default configuration the API webserver is not enabled. Only
installations using a non-default value for webserver and webserver-address are
affected.

As usual, there were also other smaller enhancements and bugfixes. In
particular, the 4.3.2 release contains fixes that allow long CNAME chains to
resolve properly, where previously they could fail if qname minimization is
enabled.

PR:		247707
Submitted by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
MFH:		2020Q3
Security:	641cd669-bc37-11ea-babf-6805ca2fa271
Sponsored by:	Netzkommune GmbH

 

12:11 tagattie 

- Update to 4.3.1
- Mark broken on i386
- Updated hostnamemax patch

PR:		246655
Submitted by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
Approved by:	ehaupt (mentor)
MFH:		2020Q2 (blanket, security fixes)
Security:	f9c5a410-9b4e-11ea-ac3f-6805ca2fa271
Changelog:	https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1