Download Latest Version v3.6.3 source code.tar.gz (4.8 MB)
Email in envelope

Get an email when there's a new version of dnsjava

Home / v3.6.0
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2024-07-21 1.3 kB
v3.6.0 source code.tar.gz 2024-07-21 4.8 MB
v3.6.0 source code.zip 2024-07-21 5.7 MB
Totals: 3 Items   10.5 MB 0
  • Fix CVE-2024-25638 (GHSA-cfxw-4h78-h7fw) Lookup and LookupSession do not sanitize input properly, allowing to smuggle additional responses, even with DNSSEC. I would like to thank Thomas Bellebaum from Fraunhofer AISEC (@bellebaum) and Martin Schanzenbach (@schanzen) for reporting and assisting me with this issue.
  • Fix CVE-2023-50387 (GHSA-crjg-w57m-rqqf) Denial-of-Service Algorithmic Complexity Attacks (KeyTrap)
  • Fix CVE-2023-50868 (GHSA-mmwx-rj87-vfgr) NSEC3 closest encloser proof can exhaust CPU resources (KeyTrap)
  • Fix running all DNSSEC on the specified executor
  • Add new DNSSEC algorithm constants for SM2SM3 and ECC-GOST12
  • Add A/AAAA record constructor with IP address byte array
  • Validate DS record digest lengths (#250)
  • Fix NPE in SimpleResolver on invalid responses (#277)
  • Add support for JEP 418: Internet-Address Resolution SPI (#290)
  • Full JPMS support (#246)
  • Pluggable I/O for SimpleResolver (@chrisruffalo, [#253])
  • UDP port leak in SimpleResolver (#318)
  • Fix clean shutdown in app containers when never used (#319)
  • Fix concurrency issue in I/O clients (#315, [#323])
  • LookupSession doesn't cache CNAMEs (#316)
  • SimpleResolver can fail with UPDATE response (#322)
  • Replace synchronization in Zone with locks (#305, based on work from @srijeet0406 in [#306])
Source: README.md, updated 2024-07-21