Path to this page:
Subject: CVS commit: pkgsrc/net/py-dns
From: Adam Ciarcinski
Date: 2024-02-17 11:20:45
Message id: 20240217102045.5062AF9F2@cvs.NetBSD.org
Log Message:
py-dns: updated to 2.6.0
2.6.0
Dnspython 2.6.0 is now available on PyPI. See What’s New for details. This \
release addresses the potential DoS issue discussed in the “TuDoor” paper \
(CVE-2023-29483). The dnspython stub resolver is vulnerable to a potential DoS \
if a bad-in-some-way response from the right address and port forged by an \
attacker arrives before a legitimate one on the UDP port dnspython is using for \
that query. In this situation, dnspython might switch to querying another \
resolver or give up entirely, possibly denying service for that resolution.
Files: