[Pdns-dev] Porting to old version

[bert hubert]

On Sun, Dec 02, 2018 at 12:00:11AM +0530, Abhijith PA wrote:
> The fix for CVE-2018-14644 in 4.0.9 can't backport to 3.x older versions
> due to the list initialization
> 

Hi Abhijith,

We really can't recommend continuing to run 3.x in production, please see
https://doc.powerdns.com/authoritative/appendices/EOL.html and
https://doc.powerdns.com/recursor/appendices/EOL.html

> '''
> static const std::set<uint16_t> metaTypes = { QType::AXFR, QType::IXFR,
> QType::RRSIG, QType::NSEC3, QType::OPT, QType::TSIG, QType::TKEY,
> QType::MAILA, QType::MAILB };
> '''


To do this in old C++, replace this by:

static const std::set<uint16_t> metaTypes;

and in main(), put something like:

metaTypes.insert(QType::AXFR);
metaTypes.insert(QType::IXFR);
etc

But please please ponder running a 4.x version. Easy packages are available
on https://repo.powerdns.com/

	Bert