Bug 931107

Summary:	<dev-perl/Net-DNS-1.450.0: DoS vulnerability in TCP handling
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	normal	CC:	perl
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [cleanup glsa?]
Package list:		Runtime testing required:	---

Description Sam James archtester

2024-05-03 04:14:10 UTC

"""
+**** 1.43 Jan 26, 2024
+
+       Update b.root-servers.net addresses in resolver hints.
+       Improve accuracy and completeness of dependency metadata.
+       Nameserver: hangs on persistent TCP connection (Windows).
+       IPSECKEY: leave gateway undefined for gatetype 0.
+       Remove remaining support for GOST.
+
+Fix rt.cpan.org #151240
+       Nameserver.pm: DoS vulnerability in TCP handling
"""

Comment 1 Larry the Git Cow gentoo-dev

2024-05-03 04:15:02 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a5efab4dc231cbf9967d7be087fbd1c7dc7147e4

commit a5efab4dc231cbf9967d7be087fbd1c7dc7147e4
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-05-03 04:13:08 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-05-03 04:14:17 +0000

    dev-perl/Net-DNS: add 1.450.0
    
    Bug: https://bugs.gentoo.org/931107
    Signed-off-by: Sam James <sam@gentoo.org>

 dev-perl/Net-DNS/Manifest               |  1 +
 dev-perl/Net-DNS/Net-DNS-1.450.0.ebuild | 69 +++++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+)