{"schema_version":"1.7.3","id":"openSUSE-SU-2019:1904-1","published":"2019-08-15T09:41:29Z","modified":"2026-02-04T02:57:47.085939Z","related":["CVE-2019-10162","CVE-2019-10163","CVE-2019-10203"],"upstream":["CVE-2019-10162","CVE-2019-10163","CVE-2019-10203"],"summary":"Security update for pdns","details":"This update for pdns fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (boo#1142810)\n- CVE-2019-10162: Fixed a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (boo#1138582)\n- CVE-2019-10163: Fixed a denial of service of slave server when an authorized master server sends large number of NOTIFY messages. (boo#1138582)\n\t  \nNon-security issues fixed:\n\n- Enabled the option to disable superslave support.\n- Fixed `pdnsutil b2b-migrate` to not lose NSEC3 settings.\n","affected":[{"package":{"name":"pdns","ecosystem":"SUSE:Package Hub 12 SP1","purl":"pkg:rpm/suse/pdns&distro=SUSE%20Package%20Hub%2012%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp150.2.9.1"}]}],"ecosystem_specific":{"binaries":[{"pdns":"4.1.2-bp150.2.9.1","pdns-backend-geoip":"4.1.2-bp150.2.9.1","pdns-backend-godbc":"4.1.2-bp150.2.9.1","pdns-backend-ldap":"4.1.2-bp150.2.9.1","pdns-backend-lua":"4.1.2-bp150.2.9.1","pdns-backend-mydns":"4.1.2-bp150.2.9.1","pdns-backend-mysql":"4.1.2-bp150.2.9.1","pdns-backend-postgresql":"4.1.2-bp150.2.9.1","pdns-backend-remote":"4.1.2-bp150.2.9.1","pdns-backend-sqlite3":"4.1.2-bp150.2.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1904-1.json"}},{"package":{"name":"pdns","ecosystem":"SUSE:Package Hub 15","purl":"pkg:rpm/suse/pdns&distro=SUSE%20Package%20Hub%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp150.2.9.1"}]}],"ecosystem_specific":{"binaries":[{"pdns":"4.1.2-bp150.2.9.1","pdns-backend-geoip":"4.1.2-bp150.2.9.1","pdns-backend-godbc":"4.1.2-bp150.2.9.1","pdns-backend-ldap":"4.1.2-bp150.2.9.1","pdns-backend-lua":"4.1.2-bp150.2.9.1","pdns-backend-mydns":"4.1.2-bp150.2.9.1","pdns-backend-mysql":"4.1.2-bp150.2.9.1","pdns-backend-postgresql":"4.1.2-bp150.2.9.1","pdns-backend-remote":"4.1.2-bp150.2.9.1","pdns-backend-sqlite3":"4.1.2-bp150.2.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1904-1.json"}},{"package":{"name":"pdns","ecosystem":"openSUSE:Leap 15.0","purl":"pkg:rpm/opensuse/pdns&distro=openSUSE%20Leap%2015.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp150.2.9.1"}]}],"ecosystem_specific":{"binaries":[{"pdns":"4.1.2-bp150.2.9.1","pdns-backend-geoip":"4.1.2-bp150.2.9.1","pdns-backend-godbc":"4.1.2-bp150.2.9.1","pdns-backend-ldap":"4.1.2-bp150.2.9.1","pdns-backend-lua":"4.1.2-bp150.2.9.1","pdns-backend-mydns":"4.1.2-bp150.2.9.1","pdns-backend-mysql":"4.1.2-bp150.2.9.1","pdns-backend-postgresql":"4.1.2-bp150.2.9.1","pdns-backend-remote":"4.1.2-bp150.2.9.1","pdns-backend-sqlite3":"4.1.2-bp150.2.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1904-1.json"}},{"package":{"name":"pdns","ecosystem":"openSUSE:Leap 15.1","purl":"pkg:rpm/opensuse/pdns&distro=openSUSE%20Leap%2015.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp150.2.9.1"}]}],"ecosystem_specific":{"binaries":[{"pdns":"4.1.2-bp150.2.9.1","pdns-backend-geoip":"4.1.2-bp150.2.9.1","pdns-backend-godbc":"4.1.2-bp150.2.9.1","pdns-backend-ldap":"4.1.2-bp150.2.9.1","pdns-backend-lua":"4.1.2-bp150.2.9.1","pdns-backend-mydns":"4.1.2-bp150.2.9.1","pdns-backend-mysql":"4.1.2-bp150.2.9.1","pdns-backend-postgresql":"4.1.2-bp150.2.9.1","pdns-backend-remote":"4.1.2-bp150.2.9.1","pdns-backend-sqlite3":"4.1.2-bp150.2.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1904-1.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EYLJ2BERQKZJZX4JVL4OARQ6323JOCJW/#EYLJ2BERQKZJZX4JVL4OARQ6323JOCJW"},{"type":"REPORT","url":"https://bugzilla.suse.com/1138582"},{"type":"REPORT","url":"https://bugzilla.suse.com/1142810"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-10162"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-10163"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-10203"}]}