From: Armin Kuster Date: Fri, 3 Nov 2017 19:54:48 +0000 (-0700) Subject: bind: update to 9.10.6 X-Git-Tag: uninative-1.8~1265 X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=96e9adb60320b2e2f0bb7a04d9ed49ddc53649bb;p=openembedded-core.git bind: update to 9.10.6 Security Fixes * An error in TSIG handling could permit unauthorized zone transfers or zone updates. These flaws are disclosed in CVE-2017-3142 and CVE-2017-3143. [RT #45383] * The BIND installer on Windows used an unquoted service path, which can enable privilege escalation. This flaw is disclosed in CVE-2017-3141. [RT #45229] * With certain RPZ configurations, a response with TTL 0 could cause named to go into an infinite query loop. This flaw is disclosed in CVE-2017-3140. [RT #45181] End of Life The end of life for BIND 9.10 is yet to be determined but will not be before BIND 9.12.0 has been released for 6 months. https://www.isc.org/downloads/software-support-policy/ more info see https://lists.isc.org/pipermail/bind-announce/2017-July/001063.html Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-connectivity/bind/bind_9.10.5-P3.bb b/meta/recipes-connectivity/bind/bind_9.10.6.bb similarity index 96% rename from meta/recipes-connectivity/bind/bind_9.10.5-P3.bb rename to meta/recipes-connectivity/bind/bind_9.10.6.bb index b20a4aa396..7a35390a63 100644 --- a/meta/recipes-connectivity/bind/bind_9.10.5-P3.bb +++ b/meta/recipes-connectivity/bind/bind_9.10.6.bb @@ -23,11 +23,12 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://use-python3-and-fix-install-lib-path.patch \ " +SRC_URI[md5sum] = "84e663284b17aee0df1ce6f248b137d7" +SRC_URI[sha256sum] = "17bbcd2bd7b1d32f5ba4b30d5dbe8a39bce200079048073d1e0d050fdf47e69d" + UPSTREAM_CHECK_URI = "ftp://ftp.isc.org/isc/bind9/" UPSTREAM_CHECK_REGEX = "(?P9(\.\d+)+(-P\d+)*)/" -SRC_URI[md5sum] = "d79cafbd9ac76239ee532dd89d05cc83" -SRC_URI[sha256sum] = "8d7e96b5b0bbac7b900d4c4bbb82e0956b4e509433c5fa392bb72a929b96606a" ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}" EXTRA_OECONF = " ${ENABLE_IPV6} --with-libtool --enable-threads \