---
- branch: MAIN
  date: Mon Feb 19 06:02:37 UTC 2024
  files:
  - new: '1.43'
    old: '1.42'
    path: pkgsrc/net/py-dns/Makefile
    pathrev: pkgsrc/net/py-dns/Makefile@1.43
    type: modified
  - new: '1.27'
    old: '1.26'
    path: pkgsrc/net/py-dns/distinfo
    pathrev: pkgsrc/net/py-dns/distinfo@1.27
    type: modified
  id: 20240219T060237Z.85e8f23aacdf79d1387cfe6d4b2528cb3a50370a
  log: "py-dns: updated to 2.6.1\n\n2.6.1\n\nDnspython 2.6.1 is now available on PyPI.
    See What窶å\x86± New for details. This is a\nbug fix release for 2.6.0 where
    the 窶å¼\x8BuDoor窶� fix erroneously suppressed\nlegitimate Truncated exceptions.
    This caused the stub resolver to timeout\ninstead of failing over to TCP when
    a legitimate truncated response was\nreceived over UDP. This release addresses
    the potential DoS issue discussed in\nthe 窶å¼\x8BuDoor窶� paper (CVE-2023-29483).
    The dnspython stub resolver is vulnerable\nto a potential DoS if a bad-in-some-way
    response from the right address and\nport forged by an attacker arrives before
    a legitimate one on the UDP port\ndnspython is using for that query.\n"
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/net/py-dns'
  unixtime: '1708322557'
  user: adam