{"affected":[{"ecosystem_specific":{"binaries":[{"pdns":"4.1.8-bp151.3.3.1","pdns-backend-geoip":"4.1.8-bp151.3.3.1","pdns-backend-godbc":"4.1.8-bp151.3.3.1","pdns-backend-ldap":"4.1.8-bp151.3.3.1","pdns-backend-lua":"4.1.8-bp151.3.3.1","pdns-backend-mydns":"4.1.8-bp151.3.3.1","pdns-backend-mysql":"4.1.8-bp151.3.3.1","pdns-backend-postgresql":"4.1.8-bp151.3.3.1","pdns-backend-remote":"4.1.8-bp151.3.3.1","pdns-backend-sqlite3":"4.1.8-bp151.3.3.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15 SP1","name":"pdns","purl":"purl:rpm/suse/pdns&distro=SUSE%20Package%20Hub%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.1.8-bp151.3.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for pdns fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (boo#1142810)\n- CVE-2019-10162: Fixed a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (boo#1138582)\n- CVE-2019-10163: Fixed a denial of service of slave server when an authorized master server sends large number of NOTIFY messages. (boo#1138582)\n\t  \nNon-security issues fixed:\n\n- Enabled the option to disable superslave support.\n- Fixed `pdnsutil b2b-migrate` to not lose NSEC3 settings.\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","id":"openSUSE-SU-2019:1921-1","modified":"2019-08-15T15:08:59Z","published":"2019-08-15T15:08:59Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NTP5DP4CIWU5TQWIYIGBPMMRNJ32V4QZ/#NTP5DP4CIWU5TQWIYIGBPMMRNJ32V4QZ"},{"type":"REPORT","url":"https://bugzilla.suse.com/1138582"},{"type":"REPORT","url":"https://bugzilla.suse.com/1142810"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-10162"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-10163"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-10203"}],"related":["CVE-2019-10162","CVE-2019-10163","CVE-2019-10203"],"summary":"Security update for pdns"}