Bug 719457

Summary:	pdns-recursor < 3.3 dangerously broken packetcache
Product:	[Fedora] Fedora EPEL	Reporter:	Warren Togami <wtogami>
Component:	pdns-recursor	Assignee:	Morten Stevens <ms>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	el5	CC:	ms, ruben
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-07 01:26:51 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Warren Togami 2011-07-06 22:54:44 UTC

pdns-recursor versions prior to 3.3 has a broken packetcache which causes dangerously misleading results for certain types of lookups like spamassassin DNSBL or URIBL.  This can cause degraded performance with spam filtering.  The breakage is very sublte and difficult to realize it is happening, so most sysadmins have no idea they are being effected.

pdns-recursor must be upgraded to 3.3.  Please simply match the EPEL6 version.  It will work just fine.

Comment 1 Warren Togami 2011-07-06 22:58:05 UTC

Would you like me to do the build on your behalf?

Comment 2 Warren Togami 2011-07-07 00:56:22 UTC

Crap.  It appears we cannot upgrade Boost which is required to build the newer version of pdns-recursor.  We may be better off withdrawing pdns-recursor entirely from EPEL5 because of this subtle hidden breakage.

Any opinions?

Comment 3 Ruben Kerkhof 2011-07-07 08:17:26 UTC

Hey Warren,

If it's a simple fix maybe we can backport it?
Do you have an upstream bug nr?

Thanks,

Ruben

Comment 4 Warren Togami 2011-07-14 23:19:19 UTC

I am not aware of a simple fix.

Comment 5 Ruben Kerkhof 2011-07-15 08:50:54 UTC

If this only breaks certain types of lookups isn't it a bit drastic to pull it from EPEL5? It's been in there for years and this is the first bug report I get about it. If we pull it, we don't give users any other choice but to upgrade to EPEL6.

On the other hand, if we leave it in how do we communicate that this can break your spamassassin setup?

Comment 6 Fedora Update System 2013-03-22 22:42:52 UTC

pdns-recursor-3.3-1.el5 has been submitted as an update for Fedora EPEL 5.
https://admin.fedoraproject.org/updates/pdns-recursor-3.3-1.el5

Comment 7 Fedora Update System 2013-03-23 18:17:49 UTC

Package pdns-recursor-3.3-1.el5:
* should fix your issue,
* was pushed to the Fedora EPEL 5 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing pdns-recursor-3.3-1.el5'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0769/pdns-recursor-3.3-1.el5
then log in and leave karma (feedback).

Comment 8 Fedora Update System 2013-04-07 01:26:52 UTC

pdns-recursor-3.3-1.el5 has been pushed to the Fedora EPEL 5 stable repository.  If problems still persist, please make note of it in this bug report.