Fedora 27 : knot-resolver (2018-50d055a5af)

High Nessus Plugin ID 111047


The remote Fedora host is missing a security update.


Knot Resolver 2.4.0 (2018-07-03) ================================

Incompatible changes


- minimal libknot version is now 2.6.7 to pull in latest fixes (#366)



- fix a rare case of zones incorrectly dowgraded to insecure status (!576)

New features


- TLS session resumption (RFC 5077), both server and client (!585, #105) (disabled when compiling with gnutls < 3.5)

- TLS_FORWARD policy uses system CA certificate store by default (!568)

- aggressive caching for NSEC3 zones (!600)

- optional protection from DNS Rebinding attack (module rebinding, !608)

- module bogus_log to log DNSSEC bogus queries without verbose logging (!613)



- prefill: fix ability to read certificate bundle (!578)

- avoid turning off qname minimization in some cases, e.g.
co.uk. (#339)

- fix validation of explicit wildcard queries (#274)

- dns64 module: more properties from the RFC implemented (incl. bug #375)



- systemd: multiple enabled kresd instances can now be started using kresd.target

- ta_sentinel: switch to version 14 of the RFC draft (!596)

- support for glibc systems with a non-Linux kernel (!588)

- support per-request variables for Lua modules (!533)

- support custom HTTP endpoints for Lua modules (!527)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.


Update the affected knot-resolver package.

See Also


Plugin Details

Severity: High

ID: 111047

File Name: fedora_2018-50d055a5af.nasl

Version: 1.1

Type: local

Agent: unix

Published: 2018/07/13

Modified: 2018/07/13

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:knot-resolver, cpe:/o:fedoraproject:fedora:27

Patch Publication Date: 2018/07/12

Reference Information