diff options
| author | Roy Li <rongqing.li@windriver.com> | 2015-07-27 10:45:49 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-07-31 10:32:44 +0100 |
| commit | 133ad639878154f7cfb80bf163bbb5682c3594e9 (patch) | |
| tree | e3825cc8926613c57e75ef66aa4002a338b18504 /meta/recipes-connectivity/bind | |
| parent | 6ff6cc4c45081bc3325f958b6d5af5a03fee4920 (diff) | |
| download | poky-133ad639878154f7cfb80bf163bbb5682c3594e9.tar.gz | |
bind: upgrade to 9.10.2-P2
upgrade to fix CVE-2015-4620:
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x
before 9.10.2-P2, when configured as a recursive resolver with DNSSEC
validation, allows remote attackers to cause a denial of service (REQUIRE
assertion failure and daemon exit) by constructing crafted zone data and
then making a query for a name in that zone.
(From OE-Core rev: d12befdf03500a0c72b661caf1a8fe81a20b6163)
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/bind')
| -rw-r--r-- | meta/recipes-connectivity/bind/bind_9.10.2-P2.bb (renamed from meta/recipes-connectivity/bind/bind_9.10.2.bb) | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/meta/recipes-connectivity/bind/bind_9.10.2.bb b/meta/recipes-connectivity/bind/bind_9.10.2-P2.bb index 43f17984b5..3a8959eb9e 100644 --- a/meta/recipes-connectivity/bind/bind_9.10.2.bb +++ b/meta/recipes-connectivity/bind/bind_9.10.2-P2.bb | |||
| @@ -21,8 +21,8 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ | |||
| 21 | file://bind-ensure-searching-for-json-headers-searches-sysr.patch \ | 21 | file://bind-ensure-searching-for-json-headers-searches-sysr.patch \ |
| 22 | " | 22 | " |
| 23 | 23 | ||
| 24 | SRC_URI[md5sum] = "dca7a9967947bffa98547fca6130fc04" | 24 | SRC_URI[md5sum] = "55d8f094bc10baae0e23e5e9100ba320" |
| 25 | SRC_URI[sha256sum] = "6f9bb7908aa45c1edfa391e356fc0afc1ded175386cdefb6cf9e1289f7457a98" | 25 | SRC_URI[sha256sum] = "b1e6f0af88634aaf48fb9d06bbf82968264f49b8e2685f061dd3fd4c1ab76c5f" |
| 26 | 26 | ||
| 27 | # --enable-exportlib is necessary for building dhcp | 27 | # --enable-exportlib is necessary for building dhcp |
| 28 | ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" | 28 | ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" |
| @@ -34,8 +34,6 @@ EXTRA_OECONF = " ${ENABLE_IPV6} --with-randomdev=/dev/random --disable-threads \ | |||
| 34 | " | 34 | " |
| 35 | inherit autotools update-rc.d systemd useradd pkgconfig | 35 | inherit autotools update-rc.d systemd useradd pkgconfig |
| 36 | 36 | ||
| 37 | PR = "r1" | ||
| 38 | |||
| 39 | PACKAGECONFIG ?= "" | 37 | PACKAGECONFIG ?= "" |
| 40 | PACKAGECONFIG[httpstats] = "--with-libxml2,--without-libxml2,libxml2" | 38 | PACKAGECONFIG[httpstats] = "--with-libxml2,--without-libxml2,libxml2" |
| 41 | 39 | ||
