openembedded-core.git/meta/recipes-connectivity/bind, branch uninative-1.4

meta: update patch metadata

2016-07-08T08:55:40+00:00

Enforce the correct tag names across all of oe-core for consistency.

Signed-off-by: Ross Burton

bind: switch Python dependency to Python 3.x

2016-06-02T10:45:24+00:00

Signed-off-by: Alexander Kanavin 
Signed-off-by: Richard Purdie

bind: CVE-2016-2088

2016-04-18T15:27:45+00:00

Duplicate EDNS COOKIE options in a response could trigger an
assertion failure: Fix with a backport.

bind as built with the oe-core recipe is not at risk: Only servers
which are built with DNS cookie support (--enable-sit) are vulnerable
to denial of service.

Fixes [YOCTO #9438]

Signed-off-by: Jussi Kukkonen 
Signed-off-by: Ross Burton

bind: CVE-2016-1285 CVE-2016-1286

2016-04-14T09:58:27+00:00

Fixes following vulnerabilities:
CVE-2016-1285 bind: malformed packet sent to rndc can trigger assertion failure
CVE-2016-1286 bind: malformed signature records for DNAME records can
trigger assertion failure

[YOCTO #9400]

External References:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1285
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1286

References to the Upstream commits and Security Advisories:
===========================================================
CVE-2016-1285: https://kb.isc.org/article/AA-01352
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=70037e040e587329cec82123e12b9f4f7c945f67

CVE-2016-1286_1: https://kb.isc.org/article/AA-01353
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=a3d327bf1ceaaeabb20223d8de85166e940b9f12

CVE-2016-1286_2: https://kb.isc.org/article/AA-01353
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;
h=7602be276a73a6eb5431c5acd9718e68a55e8b61

Signed-off-by: Sona Sarmadi 
Signed-off-by: Ross Burton

bind: /var/cache/bind

2016-03-24T21:44:27+00:00

Change the ownership of /var/cache/bind to bind rather than root.

Signed-off-by: Joe Slater 
Signed-off-by: Ross Burton

bind: update to 9.10.3-P3

2016-01-26T22:31:09+00:00

Addresses CVE-2015-8704 and CVE-2015-8705

CVE-2015-8704
Allows remote authenticated users to cause a denial of service via a malformed Address Prefix List record

CVE-2015-8705:
When debug loggin is enabled, allows remote attackers to cause a denial of service or have possibly unspecified impact via OPT data or ECS option

[YOCTO 8966]

References:
https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705

Signed-off-by: Ross Burton

bind: 9.10.2-P4 -> 9.10.3-P2

2015-12-27T11:26:59+00:00

Upgrade bind from 9.10.2-P4 to 9.10.3-P2.

* update context of 0001-build-use-pkg-config-to-find-libxml2.patch
* add PACKAGECONFIGs readline and libedit. They provide same library, so
  should not be set at same time.

Signed-off-by: Kai Kang 
Signed-off-by: Ross Burton

bind: fix too long error from gen

2015-09-21T14:20:04+00:00

gen.c uses 512 as the path length which is a little short when build in
deep dir, and cause "too long" error, use PATH_MAX if defined.

Signed-off-by: Robert Yang 
Signed-off-by: Ross Burton

meta: Fix Upstream-Status statements

2015-09-12T21:59:01+00:00

Fix a variety of problems such as typos, bad punctuations, or incorrect
Upstream-Status values.

Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie

bind: fix compile failure when building path is long

2015-09-12T21:47:11+00:00

Fix the building path is long, when building bind, we would meet the following
error.

    ".../long/path/to/bind/9.10.2-P3-r0/bind-9.10.2-P3/lib/dns" too long

This is because the in gen.c, DIRNAMESIZE is limited to 256. But in OE, the
path length limit is more than 400. So we change it to 512.

Signed-off-by: Chen Qi 
Signed-off-by: Ross Burton