PowerDNS Authoritative Server 4.0.7 and 4.1.7 Released

Mar 18, 2019

These two releases fix an issue with security implications that has been recently reported in the HTTP remote backend of the PowerDNS Authoritative Server. Setups that are not using this backend are not impacted by this issue. More information can be found in the corresponding security advisory:

It affects PowerDNS Authoritative Server up to and including 4.1.6. Please note that at the time of writing, PowerDNS Authoritative Server 3.4 and below are no longer supported, as described in https://doc.powerdns.com/authoritative/appendices/EOL.html.

Minimal patches are available at https://downloads.powerdns.com/patches/2019-03/.

The 4.0.7 changelog:

  • #7582: Insufficient validation in the HTTP remote backend

The 4.1.7 changelog:

  • #7577: Insufficient validation in the HTTP remote backend

The 4.0.7 tarball (signature) and 4.1.7 tarball (signature) are available at downloads.powerdns.com and packages for CentOS 6 and 7, Debian Jessie and Stretch, Ubuntu Bionic, Trusty and Xenial are available from repo.powerdns.com.

Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.

About the author

Peter van Dijk

Peter van Dijk

Senior Developer at PowerDNS

Related Articles

PowerDNS Recursor Security Advisory 2024-04

Today we have released PowerDNS Recursor 4.9.9, 5.0.9 and 5.1.2. These releases fix PowerDNS Security Advisory 2024-04:...

Otto Moerbeek Oct 3, 2024

PowerDNS Authoritative Server 4.9.2

This is release 4.9.2 of the Authoritative Server. It contains a collection of small fixes. A detailed list of changes can...

Peter van Dijk Oct 1, 2024

Cloud-native DNS filtering with Cloud Control 3.0

From very early on, PowerDNS recognized the benefits that a cloud-native DNS deployment provides to our customers. Just to...

Neil Cook Sep 3, 2024

PowerDNS Recursor 4.9.8, 5.0.8 and 5.1.1 Released

Today we have released PowerDNS Recursor 4.9.8, 5.0.8 and 5.1.1. These releases are maintenance releases that fix a few bugs...

Otto Moerbeek Jul 23, 2024