]> code.ossystems Code Review - openembedded-core.git/commit
bind: Security fix CVE-2016-8864
authorYi Zhao <yi.zhao@windriver.com>
Thu, 13 Apr 2017 05:48:12 +0000 (13:48 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 18 May 2017 12:04:50 +0000 (13:04 +0100)
commit6c1969bf82f36650c696c9fd7f0aa35d60dc4214
tree66dc9f4b60dd64cfca24923be02ddfffb1ab0b4a
parenteaa844b6ce75d68f952de67ea5145a54a1968171
bind: Security fix CVE-2016-8864

CVE-2016-8864: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before
9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause
a denial of service (assertion failure and daemon exit) via a DNAME
record in the answer section of a response to a recursive query,
related to db.c and resolver.c.

External References:
https://nvd.nist.gov/vuln/detail/CVE-2016-8864

Patch from:
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commit;h=c1d0599a246f646d1c22018f8fa09459270a44b8

(From OE-Core rev: c06f3a5993c7d63d91840c2a4d5b621e946ef78f)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-connectivity/bind/bind/CVE-2016-8864.patch [new file with mode: 0644]
meta/recipes-connectivity/bind/bind_9.10.3-P3.bb