]> code.ossystems Code Review - openembedded-core.git/commit
bind: Security fix CVE-2016-8864
authorYi Zhao <yi.zhao@windriver.com>
Thu, 13 Apr 2017 05:48:12 +0000 (13:48 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 28 Apr 2017 10:26:07 +0000 (11:26 +0100)
commitc06f3a5993c7d63d91840c2a4d5b621e946ef78f
tree80e55372aeb8214675047c1fcae518cb98b218bf
parent83d55bcc63510d3704078f19c255c524d8fffc39
bind: Security fix CVE-2016-8864

CVE-2016-8864: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before
9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause
a denial of service (assertion failure and daemon exit) via a DNAME
record in the answer section of a response to a recursive query,
related to db.c and resolver.c.

External References:
https://nvd.nist.gov/vuln/detail/CVE-2016-8864

Patch from:
https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commit;h=c1d0599a246f646d1c22018f8fa09459270a44b8

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-connectivity/bind/bind/CVE-2016-8864.patch [new file with mode: 0644]
meta/recipes-connectivity/bind/bind_9.10.3-P3.bb