Detections
Analytics

Fedora 27 : knot-resolver (2018-50d055a5af)

high Nessus Plugin ID 111047

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

Knot Resolver 2.4.0 (2018-07-03) ================================

Incompatible changes

--------------------

 - minimal libknot version is now 2.6.7 to pull in latest fixes (#366)

Security

--------

 - fix a rare case of zones incorrectly dowgraded to insecure status (!576)

New features

------------

 - TLS session resumption (RFC 5077), both server and client (!585, #105) (disabled when compiling with gnutls < 3.5)

 - TLS_FORWARD policy uses system CA certificate store by default (!568)

 - aggressive caching for NSEC3 zones (!600)

 - optional protection from DNS Rebinding attack (module rebinding, !608)

 - module bogus_log to log DNSSEC bogus queries without verbose logging (!613)

Bugfixes

--------

 - prefill: fix ability to read certificate bundle (!578)

 - avoid turning off qname minimization in some cases, e.g.
 co.uk. (#339)

 - fix validation of explicit wildcard queries (#274)

 - dns64 module: more properties from the RFC implemented (incl. bug #375)

Improvements

------------

 - systemd: multiple enabled kresd instances can now be started using kresd.target

 - ta_sentinel: switch to version 14 of the RFC draft (!596)

 - support for glibc systems with a non-Linux kernel (!588)

 - support per-request variables for Lua modules (!533)

 - support custom HTTP endpoints for Lua modules (!527)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected knot-resolver package.

See Also

https://bodhi.fedoraproject.org/updates/FEDORA-2018-50d055a5af

Plugin Details

Severity: High

ID: 111047

File Name: fedora_2018-50d055a5af.nasl

Version: 1.4

Type: local

Agent: unix

Published: 7/13/2018

Updated: 1/6/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:knot-resolver, cpe:/o:fedoraproject:fedora:27

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 7/12/2018

Vulnerability Publication Date: 7/12/2018

Reference Information