diff options
| author | Armin Kuster <akuster808@gmail.com> | 2017-11-03 12:54:48 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-11-05 22:42:44 +0000 |
| commit | 96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb (patch) | |
| tree | 307a8e501ac5939f5ce5f07a4ff79491cd971fbb | |
| parent | a843ab62f2252165ec3d687de92f939f766376e4 (diff) | |
| download | openembedded-core-96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb.tar.gz openembedded-core-96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb.tar.bz2 openembedded-core-96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb.zip | |
bind: update to 9.10.6
Security Fixes
* An error in TSIG handling could permit unauthorized zone transfers
or zone updates. These flaws are disclosed in CVE-2017-3142 and
CVE-2017-3143. [RT #45383]
* The BIND installer on Windows used an unquoted service path, which
can enable privilege escalation. This flaw is disclosed in
CVE-2017-3141. [RT #45229]
* With certain RPZ configurations, a response with TTL 0 could cause
named to go into an infinite query loop. This flaw is disclosed in
CVE-2017-3140. [RT #45181]
End of Life
The end of life for BIND 9.10 is yet to be determined but will not be
before BIND 9.12.0 has been released for 6 months.
https://www.isc.org/downloads/software-support-policy/
more info see https://lists.isc.org/pipermail/bind-announce/2017-July/001063.html
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-connectivity/bind/bind_9.10.6.bb (renamed from meta/recipes-connectivity/bind/bind_9.10.5-P3.bb) | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/meta/recipes-connectivity/bind/bind_9.10.5-P3.bb b/meta/recipes-connectivity/bind/bind_9.10.6.bb index b20a4aa396..7a35390a63 100644 --- a/meta/recipes-connectivity/bind/bind_9.10.5-P3.bb +++ b/meta/recipes-connectivity/bind/bind_9.10.6.bb @@ -23,11 +23,12 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://use-python3-and-fix-install-lib-path.patch \ " +SRC_URI[md5sum] = "84e663284b17aee0df1ce6f248b137d7" +SRC_URI[sha256sum] = "17bbcd2bd7b1d32f5ba4b30d5dbe8a39bce200079048073d1e0d050fdf47e69d" + UPSTREAM_CHECK_URI = "ftp://ftp.isc.org/isc/bind9/" UPSTREAM_CHECK_REGEX = "(?P<pver>9(\.\d+)+(-P\d+)*)/" -SRC_URI[md5sum] = "d79cafbd9ac76239ee532dd89d05cc83" -SRC_URI[sha256sum] = "8d7e96b5b0bbac7b900d4c4bbb82e0956b4e509433c5fa392bb72a929b96606a" ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" EXTRA_OECONF = " ${ENABLE_IPV6} --with-libtool --enable-threads \ |