diff options
| author | Yi Zhao <yi.zhao@windriver.com> | 2017-04-13 13:48:13 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-05-18 13:07:34 +0100 |
| commit | 01c4b5499d442ceb3e35b33dfa7f39c25e471121 (patch) | |
| tree | 3e3ec8715dc5a805f8438cc4022e9a3730f98ee5 /meta/recipes-core | |
| parent | 1e26fcb8bbcec01c75e343542b560ca652c32788 (diff) | |
| download | poky-01c4b5499d442ceb3e35b33dfa7f39c25e471121.tar.gz | |
bind: Security fix CVE-2016-6170
CVE-2016-6170: ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and
9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of
service (secondary DNS server crash) via a large AXFR response, and
possibly allows IXFR servers to cause a denial of service (IXFR client
crash) via a large IXFR response and allows remote authenticated users
to cause a denial of service (primary DNS server crash) via a large
UPDATE message.
External References:
https://nvd.nist.gov/vuln/detail/CVE-2016-6170
Patch from:
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commit;h=1bbcfe2fc84f57b1e4e075fb3bc2a1dd0a3a851f
(From OE-Core rev: 14abd767349bc868ca59838f1af3aaf17dfe4350)
(From OE-Core rev: 1d7829ce5e125d9c416ebd66e9363e78f8f5ae1c)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core')
0 files changed, 0 insertions, 0 deletions