Date: Thu, 12 Jul 2018 19:21:55 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 229742] dns/dnsdist: update to 1.3.2 Message-ID: <bug-229742-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D229742 Bug ID: 229742 Summary: dns/dnsdist: update to 1.3.2 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: cpm@freebsd.org Reporter: tremere@cainites.net Flags: maintainer-feedback?(cpm@freebsd.org) Assignee: cpm@freebsd.org Created attachment 195093 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D195093&action= =3Dedit Update dnsdist to 1.3.2 This release introduces some new features, but is mostly fixing bugs. Changelog: https://dnsdist.org/changelog.html#change-1.3.2 IMPORTANT!!! From https://blog.powerdns.com/2018/07/10/dnsdist-1-3-2-releas= ed/ Breaking changes After discussing with several users, we noticed that quite a lot of them we= re not aware that enabling the dnsdist=E2=80=99s console without a key, even r= estricted to the local host, could be a security issue and allow privilege escalation by allowing an unprivileged user to connect to the console and execute Lua cod= e as the dnsdist user. We therefore decided to refuse any connection to the cons= ole until a key has been set, so please check that you do set a key before upgrading if you use the console.=20 Removed file(s): files/patch-boost-1.67 --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-229742-7788>