openembedded-core.git/meta/recipes-connectivity/bind, branch dizzy

bind: CVE-2015-8000

2016-01-30T12:02:29+00:00

Fixes a denial of service in BIND.

An error in the parsing of incoming responses allows some
records with an incorrect class to be accepted by BIND
instead of being rejected as malformed. This can trigger
a REQUIRE assertion failure when those records are subsequently
cached.

[YOCTO #8838]

References:
http://www.openwall.com/lists/oss-security/2015/12/15/14
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000
https://bugzilla.redhat.com/attachment.cgi?id=1105581

Signed-off-by: Sona Sarmadi 
Signed-off-by: Armin Kuster

bind: CVE-2015-1349 CVE-2015-4620 CVE-2015-5722

2015-09-19T10:52:57+00:00

three security fixes.

Signed-off-by: Armin Kuster

bind9.9.5: CVE-2015-5477

2015-09-01T20:27:51+00:00

Fixed a flaw in the way BIND handled requests for TKEY
DNS resource records.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477
https://kb.isc.org/article/AA-01272

Signed-off-by: Sona Sarmadi 
Signed-off-by: Armin Kuster

bind: fix typo chown->chmod

2015-02-11T17:39:51+00:00

(From OE-Core rev: a6ee74222b43d0bb7fe9ef0072ede78f82a5e446)

Signed-off-by: Ting Liu 
Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

bind: fix for CVE-2014-8500

2015-01-06T14:13:07+00:00

[From upstream commit: 603a0e2637b35a2da820bc807f69bcf09c682dce]

[YOCTO #7098]

External References:
===================
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8500

(From OE-Core rev: 7225d6e0c82f264057de40c04b31655f2b0e0c96)

Signed-off-by: Sona Sarmadi 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

bind: clean host path in isc-config.sh

2014-12-31T10:17:28+00:00

* /usr/bin/isc-config.sh
* /usr/bin/bind9-config - hardlink to isc-config.sh

(From OE-Core rev: c2332d304a2c872e97653c980b090efa2181123b)

Signed-off-by: Shiqun Lin 
Signed-off-by: Wenzong Fan 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

bind: use PACKAGE_BEFORE_PN instead of PACKAGES_prepend

2014-12-31T10:17:24+00:00

Appending or prepending to PACKAGES breaks when the package is built natively,
so use PACKAGE_BEFORE_PN instead.

(From OE-Core rev: 23d7223a21582edefc4e30d76f94f8e81a543af9)

Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

bind: fix to use correct environment file in service file

2014-12-31T10:17:08+00:00

Use /etc/default/bind9 as the environment file in named.service.

(From OE-Core rev: 0ee1fa68a4d749585c43fc706c8da6e849d10857)

Signed-off-by: Chen Qi 
Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

bind: refer ubuntu/redhat to add bind user/group

2014-08-23T22:01:35+00:00

We refer what ubuntu/redhat did, gave bind a user/group

Here is the example in ubuntu 14.04:

$ ps -eo user,group,cmd | grep "named"
...
bind     bind     /usr/sbin/named -u bind
...

$vim bind9_1%3a9.9.5.dfsg-3_amd64.deb/postinst
...
    # lets give them a bind user/group in all cases.
    getent group bind >/dev/null 2>&1 || addgroup --system bind
    getent passwd bind >/dev/null 2>&1 ||
    adduser --system --home /var/cache/bind --no-create-home \
        --disabled-password --ingroup bind bind
...

Signed-off-by: Hongxu Jia 
Signed-off-by: Richard Purdie

Upstream-Status Cleanups

2014-04-25T16:18:46+00:00

Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie