diff options
author | Armin Kuster <akuster808@gmail.com> | 2017-11-03 12:54:48 -0700 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-11-07 13:25:31 +0000 |
commit | f5aa5aaa32ae14780ec35ecb13a2bbb244c5c207 (patch) | |
tree | d2b01e2455dcc2f51121e8bc1f86eb4de698bf49 /meta/recipes-connectivity | |
parent | 92f46eaa44450ce48f4cd20a52a9f5118b40fabe (diff) | |
download | poky-f5aa5aaa32ae14780ec35ecb13a2bbb244c5c207.tar.gz |
bind: update to 9.10.6
Security Fixes
* An error in TSIG handling could permit unauthorized zone transfers
or zone updates. These flaws are disclosed in CVE-2017-3142 and
CVE-2017-3143. [RT #45383]
* The BIND installer on Windows used an unquoted service path, which
can enable privilege escalation. This flaw is disclosed in
CVE-2017-3141. [RT #45229]
* With certain RPZ configurations, a response with TTL 0 could cause
named to go into an infinite query loop. This flaw is disclosed in
CVE-2017-3140. [RT #45181]
End of Life
The end of life for BIND 9.10 is yet to be determined but will not be
before BIND 9.12.0 has been released for 6 months.
https://www.isc.org/downloads/software-support-policy/
more info see https://lists.isc.org/pipermail/bind-announce/2017-July/001063.html
(From OE-Core rev: 96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity')
-rw-r--r-- | meta/recipes-connectivity/bind/bind_9.10.6.bb (renamed from meta/recipes-connectivity/bind/bind_9.10.5-P3.bb) | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/meta/recipes-connectivity/bind/bind_9.10.5-P3.bb b/meta/recipes-connectivity/bind/bind_9.10.6.bb index b20a4aa396..7a35390a63 100644 --- a/meta/recipes-connectivity/bind/bind_9.10.5-P3.bb +++ b/meta/recipes-connectivity/bind/bind_9.10.6.bb | |||
@@ -23,11 +23,12 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ | |||
23 | file://use-python3-and-fix-install-lib-path.patch \ | 23 | file://use-python3-and-fix-install-lib-path.patch \ |
24 | " | 24 | " |
25 | 25 | ||
26 | SRC_URI[md5sum] = "84e663284b17aee0df1ce6f248b137d7" | ||
27 | SRC_URI[sha256sum] = "17bbcd2bd7b1d32f5ba4b30d5dbe8a39bce200079048073d1e0d050fdf47e69d" | ||
28 | |||
26 | UPSTREAM_CHECK_URI = "ftp://ftp.isc.org/isc/bind9/" | 29 | UPSTREAM_CHECK_URI = "ftp://ftp.isc.org/isc/bind9/" |
27 | UPSTREAM_CHECK_REGEX = "(?P<pver>9(\.\d+)+(-P\d+)*)/" | 30 | UPSTREAM_CHECK_REGEX = "(?P<pver>9(\.\d+)+(-P\d+)*)/" |
28 | 31 | ||
29 | SRC_URI[md5sum] = "d79cafbd9ac76239ee532dd89d05cc83" | ||
30 | SRC_URI[sha256sum] = "8d7e96b5b0bbac7b900d4c4bbb82e0956b4e509433c5fa392bb72a929b96606a" | ||
31 | 32 | ||
32 | ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" | 33 | ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" |
33 | EXTRA_OECONF = " ${ENABLE_IPV6} --with-libtool --enable-threads \ | 34 | EXTRA_OECONF = " ${ENABLE_IPV6} --with-libtool --enable-threads \ |