Dear Knot Resolver users,
Knot Resolver 5.1.1 has been released!
This is a security release and all users are are advised to upgrade
immediately to get mitigation for CVE-2020-12667.
Release notes:
Security
--------
- fix CVE-2020-12667: mitigation for NXNSAttack DNS protocol
vulnerability
Bugfixes
--------
- control sockets: recognize newline as command boundary
More information about the vulnerability:
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-…
Full changelog:
https://gitlab.labs.nic.cz/knot/knot-resolver/raw/v5.1.1/NEWS
Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-5.1.1.tar.xz
GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-5.1.1.tar.xz.asc
Documentation:
https://knot-resolver.readthedocs.io/en/v5.1.1/
Early notification:
The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
--
Tomas Krizek
PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869