From: Remi Gacogne Date: Tue, 20 May 2025 10:24:03 +0000 (+0200) Subject: dnsdist: Apply Peter's suggestion to the advisory X-Git-Tag: dnsdist-2.0.0-alpha2~7^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2fb347d7e6e69662221480f5572e91b2e41774d6;p=thirdparty%2Fpdns.git dnsdist: Apply Peter's suggestion to the advisory Co-authored-by: Peter van Dijk --- diff --git a/pdns/dnsdistdist/docs/security-advisories/powerdns-advisory-for-dnsdist-2025-03.rst b/pdns/dnsdistdist/docs/security-advisories/powerdns-advisory-for-dnsdist-2025-03.rst index e1a644a994..03ed40f3d0 100644 --- a/pdns/dnsdistdist/docs/security-advisories/powerdns-advisory-for-dnsdist-2025-03.rst +++ b/pdns/dnsdistdist/docs/security-advisories/powerdns-advisory-for-dnsdist-2025-03.rst @@ -21,7 +21,7 @@ In some circumstances, when DNSdist is configured to allow an unlimited number o `CVSS Score: 7.5 `__ -The remedy is: upgrade to the patched 1.9.10 version +The remedy is: upgrade to the patched 1.9.10 version. A workaround is to restrict the maximum number of queries on incoming TCP connections to a safe value, like 50, via the :func:`setMaxTCPQueriesPerConnection` setting.