openembedded-core.git/meta/recipes-connectivity/bind, branch 2016-10

bind: fix two CVEs

2016-10-15T08:58:56+00:00

Add two CVE patches from upstream
git: https://www.isc.org/git/

1.CVE-2016-2775.patch
2.CVE-2016-2776.patch

Signed-off-by: zhengruoqin 
Signed-off-by: Ross Burton

meta: update patch metadata

2016-07-08T08:55:40+00:00

Enforce the correct tag names across all of oe-core for consistency.

Signed-off-by: Ross Burton

bind: switch Python dependency to Python 3.x

2016-06-02T10:45:24+00:00

Signed-off-by: Alexander Kanavin 
Signed-off-by: Richard Purdie

bind: CVE-2016-2088

2016-04-18T15:27:45+00:00

Duplicate EDNS COOKIE options in a response could trigger an
assertion failure: Fix with a backport.

bind as built with the oe-core recipe is not at risk: Only servers
which are built with DNS cookie support (--enable-sit) are vulnerable
to denial of service.

Fixes [YOCTO #9438]

Signed-off-by: Jussi Kukkonen 
Signed-off-by: Ross Burton

bind: CVE-2016-1285 CVE-2016-1286

2016-04-14T09:58:27+00:00

Fixes following vulnerabilities:
CVE-2016-1285 bind: malformed packet sent to rndc can trigger assertion failure
CVE-2016-1286 bind: malformed signature records for DNAME records can
trigger assertion failure

[YOCTO #9400]

External References:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1285
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1286

References to the Upstream commits and Security Advisories:
===========================================================
CVE-2016-1285: https://kb.isc.org/article/AA-01352
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=70037e040e587329cec82123e12b9f4f7c945f67

CVE-2016-1286_1: https://kb.isc.org/article/AA-01353
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=a3d327bf1ceaaeabb20223d8de85166e940b9f12

CVE-2016-1286_2: https://kb.isc.org/article/AA-01353
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=7602be276a73a6eb5431c5acd9718e68a55e8b61

Signed-off-by: Sona Sarmadi 
Signed-off-by: Ross Burton

bind: /var/cache/bind

2016-03-24T21:44:27+00:00

Change the ownership of /var/cache/bind to bind rather than root.

Signed-off-by: Joe Slater 
Signed-off-by: Ross Burton

bind: update to 9.10.3-P3

2016-01-26T22:31:09+00:00

Addresses CVE-2015-8704 and CVE-2015-8705

CVE-2015-8704
Allows remote authenticated users to cause a denial of service via a malformed Address Prefix List record

CVE-2015-8705:
When debug loggin is enabled, allows remote attackers to cause a denial of service or have possibly unspecified impact via OPT data or ECS option

[YOCTO 8966]

References:
https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705

Signed-off-by: Ross Burton

bind: 9.10.2-P4 -> 9.10.3-P2

2015-12-27T11:26:59+00:00

Upgrade bind from 9.10.2-P4 to 9.10.3-P2.

* update context of 0001-build-use-pkg-config-to-find-libxml2.patch
* add PACKAGECONFIGs readline and libedit. They provide same library, so
  should not be set at same time.

Signed-off-by: Kai Kang 
Signed-off-by: Ross Burton

bind: fix too long error from gen

2015-09-21T14:20:04+00:00

gen.c uses 512 as the path length which is a little short when build in
deep dir, and cause "too long" error, use PATH_MAX if defined.

Signed-off-by: Robert Yang 
Signed-off-by: Ross Burton

meta: Fix Upstream-Status statements

2015-09-12T21:59:01+00:00

Fix a variety of problems such as typos, bad punctuations, or incorrect
Upstream-Status values.

Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie