linux/poky.git/meta/recipes-connectivity/bind, branch yocto-3.4.3

bind: fix CVE-2021-25219

2021-12-17T10:02:39+00:00

Backport patches to fix CVE-2021-25219. (From OE-Core rev: 918660a2d4bc89a763a5934765ff6a1647709fcc) (From OE-Core rev: 6dda02aa752c618f2adb0b1372e93b48a0a09a17) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit 729693f0c250aec7dfdb91a9bb4dd5420c7efbee) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'

2021-09-07T20:54:11+00:00

Repo-wide replacement to use newer variable to represent systemd system unitdir directory. (From OE-Core rev: 5ace3ada5c54500c71becc8e0c6eddeb8bc053e3) Signed-off-by: Robert P. J. Day Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

bind: upgrade 9.16.19 -> 9.16.20

2021-08-26T07:07:55+00:00

(From OE-Core rev: 58bcdd72ccd21d598008cdbde4a0f27e4d3740cc) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

bind: upgrade 9.16.18 -> 9.16.19

2021-08-02T14:44:11+00:00

--- 9.16.19 released --- 5671. [bug] A race condition could occur where two threads were competing for the same set of key file locks, leading to a deadlock. This has been fixed. [GL #2786] 5670. [bug] create_keydata() created an invalid placeholder keydata record upon a refresh failure, which prevented the database of managed keys from subsequently being read back. This has been fixed. [GL #2686] 5669. [func] KASP support was extended with the "check DS" feature. Zones with "dnssec-policy" and "parental-agents" configured now check for DS presence and can perform automatic KSK rollovers. [GL #1126] 5668. [bug] Rescheduling a setnsec3param() task when a zone failed to load on startup caused a hang on shutdown. This has been fixed. [GL #2791] 5667. [bug] The configuration-checking code failed to account for the inheritance rules of the "dnssec-policy" option. This has been fixed. [GL #2780] 5666. [doc] The safe "edns-udp-size" value was tweaked to match the probing value from BIND 9.16 for better compatibility. [GL #2183] 5665. [bug] If nsupdate sends an SOA request and receives a REFUSED response, it now fails over to the next available server. [GL #2758] 5664. [func] For UDP messages larger than the path MTU, named now sends an empty response with the TC (TrunCated) bit set. In addition, setting the DF (Don't Fragment) flag on outgoing UDP sockets was re-enabled. [GL #2790] 5662. [bug] Views with recursion disabled are now configured with a default cache size of 2 MB unless "max-cache-size" is explicitly set. This prevents cache RBT hash tables from being needlessly preallocated for such views. [GL #2777] 5661. [bug] Change 5644 inadvertently introduced a deadlock: when locking the key file mutex for each zone structure in a different view, the "in-view" logic was not considered. This has been fixed. [GL #2783] 5658. [bug] Increasing "max-cache-size" for a running named instance (using "rndc reconfig") did not cause the hash tables used by cache databases to be grown accordingly. This has been fixed. [GL #2770] 5655. [bug] Signed, insecure delegation responses prepared by named either lacked the necessary NSEC records or contained duplicate NSEC records when both wildcard expansion and CNAME chaining were required to prepare the response. This has been fixed. [GL #2759] 5653. [bug] A bug that caused the NSEC3 salt to be changed on every restart for zones using KASP has been fixed. [GL #2725] (From OE-Core rev: 8afda7983aa6476eb5d44962e99992eb479eff1f) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

bind: upgrade 9.16.16 -> 9.16.18

2021-06-26T10:27:16+00:00

(From OE-Core rev: e3e4f7b9c95b7c89ab1542483f1782ae884d4ebb) (From OE-Core rev: b3c94e9a50a64f56296500063c0c2baea6de4d16) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

bind: upgrade 9.16.15 -> 9.16.16

2021-05-28T05:41:03+00:00

(From OE-Core rev: ad19d41cbdb2afa2f58fa18be44343f199ab488e) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

bind: upgrade 9.16.13 -> 9.16.15

2021-05-18T11:43:00+00:00

(From OE-Core rev: e938c7041a651071a995ceeb475ed4eb8fb8949a) Signed-off-by: Richard Purdie

bind: Exclude CVE-2019-6470 from cve-check

2021-05-12T22:06:04+00:00

Issue only affects dhcpd with recent bind versions. We don't ship dhcpd anymore so the issue doesn't affect us. (From OE-Core rev: 30106ae676124ba3c0e496a4f19c919c8418b59b) Signed-off-by: Richard Purdie

bind: upgrade 9.16.12 -> 9.16.13

2021-05-09T22:30:15+00:00

(From OE-Core rev: 40624d1d3420783f24253b87465cd5ab7ecb32b4) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie