Skip to contentSkip to conversation

bind: security bump to version 9.11.0-P1

PATCH New Gustavo Zacarias 2 participants 2 messages Nov 1, 2016 – Nov 2, 2016

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 bind: security bump to version 9.11.0-P1

Fixes:
CVE-2016-8864 - denial-of-service vector which can potentially be exploited against BIND 9 servers.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/bind/bind.hash | 2 +-
 package/bind/bind.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/bind/bind.hash +1 -1
index bc46604..a8846f7 100644
@@ -1,2 +1,2 @@
 # Verified from ftp://ftp.isc.org/isc/bind9/9.11.0/bind-9.11.0.tar.gz.sha256.asc
-sha256 6f0b403036e0281b272a0fbdd0dc3417f3050b625cb059c5409432611418058b  bind-9.11.0.tar.gz
+sha256 094cd3134ba1b44f0910de1334f05a7dca68d583da038de40a8ad7a0cb1592c6  bind-9.11.0-P1.tar.gz
package/bind/bind.mk +1 -1
index 9b5d8c5..ee50acf 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-BIND_VERSION = 9.11.0
+BIND_VERSION = 9.11.0-P1
 BIND_SITE = ftp://ftp.isc.org/isc/bind9/$(BIND_VERSION)
 # bind does not support parallel builds.
 BIND_MAKE = $(MAKE1)
Signature · 1 line
2.7.3
Applied
#1 lore raw

PATCH 1/1 bind: security bump to version 9.11.0-P1

Hello,

Quoted 9 lines · Gustavo Zacarias

Fixes:
CVE-2016-8864 - denial-of-service vector which can potentially be exploited against BIND 9 servers.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/bind/bind.hash | 2 +-
 package/bind/bind.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Applied to master, after fixing the hash URL, as pointed out by Vicente.

Thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com