Dear Knot Resolver users,
Knot Resolver 2.4.1 has been released.
Security
--------
- fix CVE-2018-10920: Improper input validation bug in DNS resolver
component
(security!7, security!9)
Bugfixes
--------
- cache: fix TTL overflow in packet due to min_ttl (#388, security!8)
- TLS session resumption: avoid bad scheduling of rotation (#385)
- HTTP module: fix a regression in 2.4.0 which broke custom certs (!632)
- cache: NSEC3 negative cache even without NS record (#384)
This fixes lower hit rate in NSEC3 zones (since 2.4.0).
- minor TCP and TLS fixes (!623, !624, !626)
Full changelog:
https://gitlab.labs.nic.cz/knot/knot-resolver/raw/v2.4.1/NEWS
Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-2.4.1.tar.xz
GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-2.4.1.tar.xz.asc
Documentation:
https://knot-resolver.readthedocs.io/en/v2.4.1/
--
Tomas Krizek
PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869