From aefcb6b1151f0961f722fdbf73c60c123e875040 Mon Sep 17 00:00:00 2001 From: Sona Sarmadi Date: Mon, 21 Dec 2015 12:35:20 +0100 Subject: bind: CVE-2015-8000 Fixes a denial of service in BIND. An error in the parsing of incoming responses allows some records with an incorrect class to be accepted by BIND instead of being rejected as malformed. This can trigger a REQUIRE assertion failure when those records are subsequently cached. [YOCTO #8838] References: http://www.openwall.com/lists/oss-security/2015/12/15/14 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000 https://bugzilla.redhat.com/attachment.cgi?id=1105581 (From OE-Core rev: c9c42b0ec2c7b9b3e613f68db06230ebc6e2711c) Signed-off-by: Sona Sarmadi Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie --- meta/recipes-connectivity/bind/bind_9.9.5.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta/recipes-connectivity/bind/bind_9.9.5.bb') diff --git a/meta/recipes-connectivity/bind/bind_9.9.5.bb b/meta/recipes-connectivity/bind/bind_9.9.5.bb index ee940112f7..6e4878d06b 100644 --- a/meta/recipes-connectivity/bind/bind_9.9.5.bb +++ b/meta/recipes-connectivity/bind/bind_9.9.5.bb @@ -22,6 +22,7 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://CVE-2015-1349.patch \ file://CVE-2015-4620.patch \ file://CVE-2015-5722.patch \ + file://CVE-2015-8000.patch \ " SRC_URI[md5sum] = "e676c65cad5234617ee22f48e328c24e" -- cgit v1.2.3-54-g00ecf