Created attachment 195093 [details]
Update dnsdist to 1.3.2
This release introduces some new features, but is mostly fixing bugs.
IMPORTANT!!! From https://blog.powerdns.com/2018/07/10/dnsdist-1-3-2-released/
After discussing with several users, we noticed that quite a lot of them were not aware that enabling the dnsdist’s console without a key, even restricted to the local host, could be a security issue and allow privilege escalation by allowing an unprivileged user to connect to the console and execute Lua code as the dnsdist user. We therefore decided to refuse any connection to the console until a key has been set, so please check that you do set a key before upgrading if you use the console.
(In reply to Ralf van der Enden from comment #0)
LGTM. Thanks for the patch!
A commit references this bug:
Date: Sat Jul 14 09:17:52 UTC 2018
New revision: 474629
dns/dnsdist: Update to 1.3.2
- Add a note to UPDATING about breaking changes
Submitted by: Ralf van der Enden <email@example.com>
Approved by: cpm