openSUSE-SU-2019:1904-1

Dashboard / Vulnerabilities / openSUSE-SU-2019:1904-1

openSUSE-SU-2019:1904-1

Summary: Security update for pdns

Details: This update for pdns fixes the following issues: Security issues fixed: - CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (boo#1142810) - CVE-2019-10162: Fixed a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (boo#1138582) - CVE-2019-10163: Fixed a denial of service of slave server when an authorized master server sends large number of NOTIFY messages. (boo#1138582) Non-security issues fixed: - Enabled the option to disable superslave support. - Fixed `pdnsutil b2b-migrate` to not lose NSEC3 settings.

References: https://lists.opensuse.org/archives/list/[email protected]/thread/EYLJ2BERQKZJZX4JVL4OARQ6323JOCJW/#EYLJ2BERQKZJZX4JVL4OARQ6323JOCJW, https://bugzilla.suse.com/1138582, https://bugzilla.suse.com/1142810, https://www.suse.com/security/cve/CVE-2019-10162, https://www.suse.com/security/cve/CVE-2019-10163, https://www.suse.com/security/cve/CVE-2019-10203