PSA 2022-02 tweaks and add PR#'s

diff --git a/pdns/recursordist/docs/changelog/4.5.rst b/pdns/recursordist/docs/changelog/4.5.rst
index 424bb3e31e49b83adcb63ca8188f3e5562cd8d4c..6beac348cf4aa0689a0db16326a2b47e2c1c794d 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.5.rst
+++ b/pdns/recursordist/docs/changelog/4.5.rst
@@ -7,7 +7,7 @@ Changelogs for 4.5.X
 
   .. change::
     :tags: Bug Fixes
-    :pullreq: TBD
+    :pullreq: 11875,11874
 
     PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation.
 

diff --git a/pdns/recursordist/docs/changelog/4.6.rst b/pdns/recursordist/docs/changelog/4.6.rst
index 36a04a19e4126137e46ef184af62d0ad32031e6b..aab18814ad2dd711e670ee7d3c49bbc614c229c2 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.6.rst
+++ b/pdns/recursordist/docs/changelog/4.6.rst
@@ -7,7 +7,7 @@ Changelogs for 4.6.X
 
   .. change::
     :tags: Bug Fixes
-    :pullreq: TBD
+    :pullreq: 11876,11874
 
     PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation.
 

diff --git a/pdns/recursordist/docs/changelog/4.7.rst b/pdns/recursordist/docs/changelog/4.7.rst
index 7b0f19b6742af5f57c3c2ab95f1dd39db446b6a5..f7553d78ddba15fac8f3bed59f1246d2f794138f 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.7.rst
+++ b/pdns/recursordist/docs/changelog/4.7.rst
@@ -6,7 +6,7 @@ Changelogs for 4.7.X
 
   .. change::
     :tags: Bug Fixes
-    :pullreq: TBD
+    :pullreq: 11877,11874
 
     PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation.
 

diff --git a/pdns/recursordist/docs/security-advisories/powerdns-advisory-2022-02.rst b/pdns/recursordist/docs/security-advisories/powerdns-advisory-2022-02.rst
index 55f03aa46da72a268996364104cc622f6b4bc128..0564d1dfe7e7d462c911af89c7106aff556b1fbd 100644 (file)
--- a/pdns/recursordist/docs/security-advisories/powerdns-advisory-2022-02.rst
+++ b/pdns/recursordist/docs/security-advisories/powerdns-advisory-2022-02.rst
@@ -13,10 +13,9 @@ PowerDNS Security Advisory 2022-02: incomplete exception handling related to pro
 
 This issue only affects recursors which have protobuf logging enabled using the
 
-  protobufServer function with logResponses=true or
-  
-  outgoingProtobufServer function with logResponses=true
+- ``protobufServer`` function with ``logResponses=true`` or
+- ``outgoingProtobufServer`` function with ``logResponses=true``
 
-If either of these functions is used without specifying logResponses, its value is true.
+If either of these functions is used without specifying ``logResponses``, its value is ``true``.
 An attacker needs to have access to the recursor, i.e. the remote IP must be in the access control list.
 If an attacker queries a name that leads to an answer with specific properties, a protobuf message might be generated that causes an exception. The code does not handle this exception correctly, causing a denial of service.