diff options
Diffstat (limited to 'recipes-connectivity/bind/bind/CVE-2017-3136.patch')
-rw-r--r-- | recipes-connectivity/bind/bind/CVE-2017-3136.patch | 47 |
1 files changed, 0 insertions, 47 deletions
diff --git a/recipes-connectivity/bind/bind/CVE-2017-3136.patch b/recipes-connectivity/bind/bind/CVE-2017-3136.patch deleted file mode 100644 index c47a6f7..0000000 --- a/recipes-connectivity/bind/bind/CVE-2017-3136.patch +++ /dev/null | |||
@@ -1,47 +0,0 @@ | |||
1 | From cdb44bbabefa96fceb9bca540f5112493756d593 Mon Sep 17 00:00:00 2001 | ||
2 | From: Sona Sarmadi <sona.sarmadi@enea.com> | ||
3 | Date: Wed, 27 Sep 2017 09:45:10 +0200 | ||
4 | Subject: [PATCH] Dns64 with break-dnssec yes; can result in a assertion | ||
5 | failure. | ||
6 | |||
7 | From 764240ca07ab1b796226d5402ccd9fbfa77ec32a Mon Sep 17 00:00:00 2001 | ||
8 | From: Mark Andrews <marka@isc.org> | ||
9 | Date: Wed, 15 Feb 2017 12:18:51 +1100 | ||
10 | |||
11 | (cherry picked from commit 3bce12e4b6d37f570ffc7747b499f8b90e8521ac) | ||
12 | |||
13 | CVE: CVE-2017-3136 | ||
14 | Upstream-Status: Backport [backport from remotes/origin/v9_10] | ||
15 | |||
16 | Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> | ||
17 | --- | ||
18 | CHANGES | 3 +++ | ||
19 | bin/named/query.c | 1 + | ||
20 | 2 files changed, 4 insertions(+) | ||
21 | |||
22 | diff --git a/CHANGES b/CHANGES | ||
23 | index ec11967..ba27df0 100644 | ||
24 | --- a/CHANGES | ||
25 | +++ b/CHANGES | ||
26 | @@ -1,3 +1,6 @@ | ||
27 | +4575. [security] Dns64 with break-dnssec yes; can result in a | ||
28 | + assertion failure. (CVE-2017-3136) [RT #44653] | ||
29 | + | ||
30 | 4517. [security] Named could mishandle authority sections that were | ||
31 | missing RRSIGs triggering an assertion failure. | ||
32 | (CVE-2016-9444) [RT # 43632] | ||
33 | diff --git a/bin/named/query.c b/bin/named/query.c | ||
34 | index 1398776..48822ff 100644 | ||
35 | --- a/bin/named/query.c | ||
36 | +++ b/bin/named/query.c | ||
37 | @@ -8149,6 +8149,7 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) | ||
38 | result = query_dns64(client, &fname, rdataset, | ||
39 | sigrdataset, dbuf, | ||
40 | DNS_SECTION_ANSWER); | ||
41 | + noqname = NULL; | ||
42 | dns_rdataset_disassociate(rdataset); | ||
43 | dns_message_puttemprdataset(client->message, &rdataset); | ||
44 | if (result == ISC_R_NOMORE) { | ||
45 | -- | ||
46 | 1.9.1 | ||
47 | |||