931107 – <dev-perl/Net-DNS-1.450.0: DoS vulnerability in TCP handling

Bug 931107 - <dev-perl/Net-DNS-1.450.0: DoS vulnerability in TCP handling

Summary: <dev-perl/Net-DNS-1.450.0: DoS vulnerability in TCP handling

Status:	IN_PROGRESS

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [stable?]
Keywords:

Depends on:
Blocks:

Reported:	2024-05-03 04:14 UTC by Sam James
Modified:	2024-05-03 04:15 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sam James archtester

2024-05-03 04:14:10 UTC

"""
+**** 1.43 Jan 26, 2024
+
+       Update b.root-servers.net addresses in resolver hints.
+       Improve accuracy and completeness of dependency metadata.
+       Nameserver: hangs on persistent TCP connection (Windows).
+       IPSECKEY: leave gateway undefined for gatetype 0.
+       Remove remaining support for GOST.
+
+Fix rt.cpan.org #151240
+       Nameserver.pm: DoS vulnerability in TCP handling
"""

Comment 1 Larry the Git Cow gentoo-dev

2024-05-03 04:15:02 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a5efab4dc231cbf9967d7be087fbd1c7dc7147e4

commit a5efab4dc231cbf9967d7be087fbd1c7dc7147e4
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-05-03 04:13:08 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-05-03 04:14:17 +0000

    dev-perl/Net-DNS: add 1.450.0
    
    Bug: https://bugs.gentoo.org/931107
    Signed-off-by: Sam James <sam@gentoo.org>

 dev-perl/Net-DNS/Manifest               |  1 +
 dev-perl/Net-DNS/Net-DNS-1.450.0.ebuild | 69 +++++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+)