Changelog
This release contains security fixes for the following advisory. It's strongly advise updating as soon as possible.
Special thanks to @anyasabo for finding these issues, providing the fixes, and writing extensive fuzz tests.
- Fragmented packets can lead to memory leak, hang, and panic GHSA-2f5m-rjv5-wr28 (High, 8.7)
What's Changed
🔧 Bugfixes
- fix(dnsmessage): preserve batching when forwarding filtered messages by @dmachard in #1415
- fix(deps): bump go-netutils to v1.9.4 for IP defragmenter security fixes by @dmachard in #1416
📈 Dependency updates
- build(deps): bump golang from 1.27.1-alpine to 1.27.3-alpine in the docker-dependencies group by @dependabot[bot] in #1409
- build(deps): bump the opentelemetry group with 5 updates by @dependabot[bot] in #1410
- build(deps): bump the monitoring group across 1 directory with 4 updates by @dependabot[bot] in #1411
- build(deps): bump the dmachard group with 2 updates by @dependabot[bot] in #1412
- build(deps): bump the other-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #1414
Bug reporters
Full Changelog: v3.3.4...v3.3.5