Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (37m)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (56d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (168d) 

2024-05-27 14:12:42 UTC Now

2024-02-19 06:02:37 UTC MAIN commitmail json YAML

py-dns: updated to 2.6.1

2.6.1

Dnspython 2.6.1 is now available on PyPI. See What窶冱 New for details. This is a
bug fix release for 2.6.0 where the 窶弋uDoor窶� fix erroneously suppressed
legitimate Truncated exceptions. This caused the stub resolver to timeout
instead of failing over to TCP when a legitimate truncated response was
received over UDP. This release addresses the potential DoS issue discussed in
the 窶弋uDoor窶� paper (CVE-2023-29483). The dnspython stub resolver is vulnerable
to a potential DoS if a bad-in-some-way response from the right address and
port forged by an attacker arrives before a legitimate one on the UDP port
dnspython is using for that query.

(adam)