summaryrefslogtreecommitdiffstats
path: root/recipes-connectivity/bind/bind/CVE-2017-3136.patch
diff options
context:
space:
mode:
Diffstat (limited to 'recipes-connectivity/bind/bind/CVE-2017-3136.patch')
-rw-r--r--recipes-connectivity/bind/bind/CVE-2017-3136.patch47
1 files changed, 0 insertions, 47 deletions
diff --git a/recipes-connectivity/bind/bind/CVE-2017-3136.patch b/recipes-connectivity/bind/bind/CVE-2017-3136.patch
deleted file mode 100644
index c47a6f7..0000000
--- a/recipes-connectivity/bind/bind/CVE-2017-3136.patch
+++ /dev/null
@@ -1,47 +0,0 @@
1From cdb44bbabefa96fceb9bca540f5112493756d593 Mon Sep 17 00:00:00 2001
2From: Sona Sarmadi <sona.sarmadi@enea.com>
3Date: Wed, 27 Sep 2017 09:45:10 +0200
4Subject: [PATCH] Dns64 with break-dnssec yes; can result in a assertion
5 failure.
6
7From 764240ca07ab1b796226d5402ccd9fbfa77ec32a Mon Sep 17 00:00:00 2001
8From: Mark Andrews <marka@isc.org>
9Date: Wed, 15 Feb 2017 12:18:51 +1100
10
11(cherry picked from commit 3bce12e4b6d37f570ffc7747b499f8b90e8521ac)
12
13CVE: CVE-2017-3136
14Upstream-Status: Backport [backport from remotes/origin/v9_10]
15
16Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
17---
18 CHANGES | 3 +++
19 bin/named/query.c | 1 +
20 2 files changed, 4 insertions(+)
21
22diff --git a/CHANGES b/CHANGES
23index ec11967..ba27df0 100644
24--- a/CHANGES
25+++ b/CHANGES
26@@ -1,3 +1,6 @@
27+4575. [security] Dns64 with break-dnssec yes; can result in a
28+ assertion failure. (CVE-2017-3136) [RT #44653]
29+
30 4517. [security] Named could mishandle authority sections that were
31 missing RRSIGs triggering an assertion failure.
32 (CVE-2016-9444) [RT # 43632]
33diff --git a/bin/named/query.c b/bin/named/query.c
34index 1398776..48822ff 100644
35--- a/bin/named/query.c
36+++ b/bin/named/query.c
37@@ -8149,6 +8149,7 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
38 result = query_dns64(client, &fname, rdataset,
39 sigrdataset, dbuf,
40 DNS_SECTION_ANSWER);
41+ noqname = NULL;
42 dns_rdataset_disassociate(rdataset);
43 dns_message_puttemprdataset(client->message, &rdataset);
44 if (result == ISC_R_NOMORE) {
45--
461.9.1
47