diff options
| author | Armin Kuster <akuster808@gmail.com> | 2017-11-03 12:54:48 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-11-07 13:25:31 +0000 |
| commit | f5aa5aaa32ae14780ec35ecb13a2bbb244c5c207 (patch) | |
| tree | d2b01e2455dcc2f51121e8bc1f86eb4de698bf49 /meta/recipes-connectivity/openssh | |
| parent | 92f46eaa44450ce48f4cd20a52a9f5118b40fabe (diff) | |
| download | poky-f5aa5aaa32ae14780ec35ecb13a2bbb244c5c207.tar.gz | |
bind: update to 9.10.6
Security Fixes
* An error in TSIG handling could permit unauthorized zone transfers
or zone updates. These flaws are disclosed in CVE-2017-3142 and
CVE-2017-3143. [RT #45383]
* The BIND installer on Windows used an unquoted service path, which
can enable privilege escalation. This flaw is disclosed in
CVE-2017-3141. [RT #45229]
* With certain RPZ configurations, a response with TTL 0 could cause
named to go into an infinite query loop. This flaw is disclosed in
CVE-2017-3140. [RT #45181]
End of Life
The end of life for BIND 9.10 is yet to be determined but will not be
before BIND 9.12.0 has been released for 6 months.
https://www.isc.org/downloads/software-support-policy/
more info see https://lists.isc.org/pipermail/bind-announce/2017-July/001063.html
(From OE-Core rev: 96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/openssh')
0 files changed, 0 insertions, 0 deletions