diff options
author | Sona Sarmadi <sona.sarmadi@enea.com> | 2016-04-07 12:27:27 +0200 |
---|---|---|
committer | Sona Sarmadi <sona.sarmadi@enea.com> | 2016-04-08 12:32:32 +0200 |
commit | 71129828ff4cfda3d66aa9378be3c5a53f2beb8b (patch) | |
tree | 7a71ee4e6376fd06a3678251c8f3f6e5d7617f9a /meta/recipes-connectivity/bind/bind_9.9.5.bb | |
parent | 4ddc912615a690b7f612517ac5a5b345c9f89f8e (diff) | |
download | poky-daisy-enea.tar.gz |
bind: CVE-2016-1285 CVE-2016-1286daisy-enea
CVE-2016-1285 bind: malformed packet sent to rndc can trigger assertion failure
CVE-2016-1286 bind: malformed signature records for DNAME records can
trigger assertion failure
[YOCTO #9400]
External References:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1285
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1286
References to the Upstream commits and Security Advisories:
CVE-2016-1285: https://kb.isc.org/article/AA-01352
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=31e4657cf246e41d4c5c890315cb6cf89a0db25a
CVE-2016-1286_1: https://kb.isc.org/article/AA-01353
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=76c3c9fe9f3f1353b47214b8f98b3d7f53e10bc7
CVE-2016-1286_2: https://kb.isc.org/article/AA-01353
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=ce3cd91caee698cb144e1350c6c78292c6be6339
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Diffstat (limited to 'meta/recipes-connectivity/bind/bind_9.9.5.bb')
-rw-r--r-- | meta/recipes-connectivity/bind/bind_9.9.5.bb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/bind/bind_9.9.5.bb b/meta/recipes-connectivity/bind/bind_9.9.5.bb index 68f5367a4b..80e2ca6cf5 100644 --- a/meta/recipes-connectivity/bind/bind_9.9.5.bb +++ b/meta/recipes-connectivity/bind/bind_9.9.5.bb | |||
@@ -21,6 +21,10 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ | |||
21 | file://CVE-2015-8000.patch \ | 21 | file://CVE-2015-8000.patch \ |
22 | file://CVE-2015-8704.patch \ | 22 | file://CVE-2015-8704.patch \ |
23 | file://CVE-2015-8461.patch \ | 23 | file://CVE-2015-8461.patch \ |
24 | file://CVE-2016-1285.patch \ | ||
25 | file://fix-typo-in-CVE-2016-1285.patch \ | ||
26 | file://CVE-2016-1286_1.patch \ | ||
27 | file://CVE-2016-1286_2.patch \ | ||
24 | " | 28 | " |
25 | 29 | ||
26 | SRC_URI[md5sum] = "e676c65cad5234617ee22f48e328c24e" | 30 | SRC_URI[md5sum] = "e676c65cad5234617ee22f48e328c24e" |