openSUSE-SU-2018:4073-1

Details

This update for pdns fixes the following issues:

Security issues fixed:

CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157).
CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169).

Affected Packages

pdns

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-godbc

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-ldap

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-lua

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-mydns

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-mysql

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-postgresql

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-remote

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

pdns-backend-sqlite3

SUSE Package Hub 12 SP1

Fixed in:

4.1.5-14.1

References

REPORT

https://bugzilla.suse.com/1114157

REPORT

https://bugzilla.suse.com/1114169

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U7JCGUVPUT2TOXOKR2SCHC43MFMZC52C/#U7JCGUVPUT2TOXOKR2SCHC43MFMZC52C

WEB

https://www.suse.com/security/cve/CVE-2018-10851

WEB

https://www.suse.com/security/cve/CVE-2018-14626