Skip to content

PowerDNS CVE-2022-27227 #331

Description

@jfqd

PowerDNS Authoritative Serve from trunk with Version 4.4.1 has a known CVE reported by the security-advisory.

Not affected PowerDNS versions are:

  • Authoritative Server: 4.4.3, 4.5.4, 4.6.1
  • Recursor: 4.4.8, 4.5.8 and 4.6.1

Would it be possible to get a newer version of PowerDNS Authoritative Server and Recursor in trunk?

And there is also a newer version of dnsdist (1.7.1), pkgsrc trunk has currently 1.5.1. Would it be possible to get an update too?

Activity

  1. jfqd commented on May 14, 2022

    @jfqd
    Author

    Would it be possible to get newer versions with the next build-process?

  2. jfqd commented on Jun 7, 2022

    @jfqd
    Author

    @jperkin The 4.4 branch of PowerDNS is EOL since this week. Would it be possible to get newer versions (4.5 or 4.6) with the next build-process?

  3. jfqd commented on Jul 12, 2022

    @jfqd
    Author

    @jperkin Would it be possible to get a newer version cause of the mentioned CVEs? Otherwise this would be another switch to linux.

  4. added a commit that references this issue on Jul 31, 2022
  5. jfqd commented on Sep 12, 2022

    @jfqd
    Author

    @jperkin Would it be possible to get a newer version cause of the mentioned CVEs from April?

  6. jfqd commented on Sep 29, 2022

    @jfqd
    Author

    @jperkin Would it be possible to get the current PowerDNS version 4.6.0 for trunk? Or should we move to LX?

  7. self-assigned this
    on Sep 29, 2022
  8. jperkin commented on Sep 29, 2022

    @jperkin
    Collaborator

    I've updated both the authoritative server and the recursor to their latest versions, and will kick off a new trunk build once the repository has been updated.

    We could always do with more maintainers to help keep packages up-to-date, especially from people who use them in production. Would you be interested in taking these on?

  9. jperkin commented on Sep 29, 2022

    @jperkin
    Collaborator

    For reference, here are the commits:

    A lot of the changes are simple pkglint cleanups, the actual packaging changes are minimal, with the only difficult part being a compile issue introduced recently in powerdns-recursor that I've fixed and reported upstream.

  10. jfqd commented on Oct 5, 2022

    @jfqd
    Author

    @jperkin Thx a lot! Will try the new package on saturday. Send you an email on the maintainer topic.

  11. jfqd commented on Oct 8, 2022

    @jfqd
    Author

    @jperkin powerdns-mysql is missing. Update failed for me. Would it be possible to get this package back?

  12. jfqd commented on Oct 15, 2022

    @jfqd
    Author

    @jperkin Would it be possible to get the powerdns-mysql package back?

  13. jperkin commented on Oct 24, 2022

    @jperkin
    Collaborator

    I've fixed mariadb106 which was blocking this, hopefully it will return in the next build. I'll keep the ticket open until then.

  14. jperkin commented on Nov 4, 2022

    @jperkin
    Collaborator

    This is now available again.

  15. 55 remaining items

  16. added a commit that references this issue on Jun 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions