]> code.ossystems Code Review - openembedded-core.git/commit
bind: upgrade to 9.10.2-P2
authorRoy Li <rongqing.li@windriver.com>
Mon, 27 Jul 2015 02:45:49 +0000 (10:45 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 31 Jul 2015 09:31:02 +0000 (10:31 +0100)
commitd12befdf03500a0c72b661caf1a8fe81a20b6163
treee10a61b45aa28901acfda4667a93176763d44630
parenta2d9a40802a39aa78d1285cc86f742f5803f76e1
bind: upgrade to 9.10.2-P2

upgrade to fix CVE-2015-4620:
    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x
    before 9.10.2-P2, when configured as a recursive resolver with DNSSEC
    validation, allows remote attackers to cause a denial of service (REQUIRE
    assertion failure and daemon exit) by constructing crafted zone data and
    then making a query for a name in that zone.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-connectivity/bind/bind_9.10.2-P2.bb [moved from meta/recipes-connectivity/bind/bind_9.10.2.bb with 95% similarity]