]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Warn that GnuTLS 3.7.x leaks memory when validating certs 11001/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 18 Nov 2021 10:56:33 +0000 (11:56 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 18 Nov 2021 10:56:33 +0000 (11:56 +0100)
commit8099e686909ac129a87b8bcb6248b00f8ffd1220
treee45b40fdd303beb926ce7d07912cb5a6e3cb07ce
parentd606317b3ab6e0eff8537373d83d609c1745ef11
dnsdist: Warn that GnuTLS 3.7.x leaks memory when validating certs

In some configurations that we can't detect (PKCS11 support enabled,
with a default PKCS11 trust store), GnuTLS from 3.7.0 to at least
3.7.2 leaks memory when validating a server certificate. The issue
has been reported to GnuTLS and acknowledged, but there is no
available fix yet.
pdns/tcpiohandler.cc