diff options
| author | Derek Straka <derek@asterius.io> | 2016-01-24 08:13:04 -0500 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-01-26 22:31:59 +0000 |
| commit | 9967746a35d9217d074a79e67b4f05779ba01e43 (patch) | |
| tree | 148fe555d38a8153bea4d454b40e714a7e6eb6ab /meta/classes | |
| parent | cac47db9c5d66801107e42462f2e5a8e4dc4724b (diff) | |
| download | poky-9967746a35d9217d074a79e67b4f05779ba01e43.tar.gz | |
bind: update to 9.10.3-P3
Addresses CVE-2015-8704 and CVE-2015-8705
CVE-2015-8704
Allows remote authenticated users to cause a denial of service via a malformed Address Prefix List record
CVE-2015-8705:
When debug loggin is enabled, allows remote attackers to cause a denial of service or have possibly unspecified impact via OPT data or ECS option
[YOCTO 8966]
References:
https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705
(From OE-Core rev: 58d47cdf91076cf055046ce9ec5f3e2e21dae1c0)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/classes')
0 files changed, 0 insertions, 0 deletions