Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:12428
HistoryApr 26, 2006 - 12:00 a.m.

Recursor version 3.0.1

2006-04-2600:00:00
vulners.com
18

Released 25th of April 2006, download.

This release consists of nothing but tiny fixes to 3.0, including one with security implications. An upgrade is highly recommended.

*

  Compilation used both cc and gcc, leading to the possibility of compiling with different compiler versions (commit 766).
*

  rec_control would leave files named lsockXXXXXX around in the configured socket-dir. Operators may wish to remove these files from their socket-dir (often /var/run), quite a few might have accumulated already (commit 767).
*

  Certain malformed packets could crash the recursor. As far as we can determine these packets could only lead to a crash, but as always, there are no guarantees. A quick upgrade is highly recommended (commits 760, 761). Reported by David Gavarret.
*

  Recursor would not distinguish between NXDOMAIN and NXRRSET (commit 756). Reported and debugged by Jorn Ekkelenkamp.
*

  Some error messages and trace logging statements were improved (commits 756, 758, 759).
*

  stderr was closed during daemonizing, but not dupped to /dev/null, leading to slight chance of odd behaviour on reporting errors (commit 757) 

Operating system specific fixes:

*

  The stock Debian sarge Linux kernel, 2.6.8, claims to support epoll but fails at runtime. The epoll self-testing code has been improved, and PowerDNS will fall back to a select based multiplexer if needed (commit 758) Reported by Michiel van Es.
*

  Solaris 8 compilation and runtime issues were addressed. See the README for details (commit 765). Reported by Juergen Georgi and Kenneth Marshall.
*

  Solaris 10 x86_64 compilation issues were addressed (commit 755). Reported and debugged by Eric Sproul.