Bug 2396486

Summary: CVE-2025-30187 dnsdist: Denial of service via crafted DoH exchange in PowerDNS DNSdist [epel-all]
Product: [Fedora] Fedora EPEL Reporter: Guilherme de Almeida Suckevicz <gsuckevi>
Component: dnsdistAssignee: Sander Hoentjen <sander>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: epel10CC: sander
Target Milestone: ---Keywords: Security, SecurityTracking
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: {"flaws": ["b9af6d21-b40f-4762-b2bc-5492313878ce"]}
Fixed In Version: dnsdist-2.0.1-1.fc43 dnsdist-2.0.1-1.el10_2 dnsdist-1.9.11-2.el8 dnsdist-1.9.11-1.el9 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-10-01 00:18:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2396342    

Description Guilherme de Almeida Suckevicz 2025-09-18 16:25:58 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams

Comment 1 Fedora Update System 2025-09-22 14:05:42 UTC
FEDORA-2025-5cef5ecca3 (dnsdist-2.0.1-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-5cef5ecca3

Comment 2 Fedora Update System 2025-09-22 14:05:45 UTC
FEDORA-EPEL-2025-7209d59fc3 (dnsdist-2.0.1-1.el10_2) has been submitted as an update to Fedora EPEL 10.2.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-7209d59fc3

Comment 3 Fedora Update System 2025-09-23 01:44:55 UTC
FEDORA-2025-5cef5ecca3 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-5cef5ecca3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-5cef5ecca3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2025-09-23 02:04:41 UTC
FEDORA-EPEL-2025-7209d59fc3 has been pushed to the Fedora EPEL 10.2 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-7209d59fc3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2025-09-23 15:45:42 UTC
FEDORA-EPEL-2025-9a865f57f7 (dnsdist-1.9.11-1.el9) has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a865f57f7

Comment 6 Fedora Update System 2025-09-24 00:20:07 UTC
FEDORA-EPEL-2025-e760d7b053 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-e760d7b053

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-09-24 00:29:58 UTC
FEDORA-EPEL-2025-9a865f57f7 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a865f57f7

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2025-10-01 00:18:40 UTC
FEDORA-2025-5cef5ecca3 (dnsdist-2.0.1-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Fedora Update System 2025-10-01 00:27:41 UTC
FEDORA-EPEL-2025-7209d59fc3 (dnsdist-2.0.1-1.el10_2) has been pushed to the Fedora EPEL 10.2 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Fedora Update System 2025-10-02 00:26:15 UTC
FEDORA-EPEL-2025-e760d7b053 (dnsdist-1.9.11-2.el8) has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2025-10-02 00:26:21 UTC
FEDORA-EPEL-2025-9a865f57f7 (dnsdist-1.9.11-1.el9) has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.