Skip to contentSkip to conversation

package/bind: drop CVE-2017-3139 from IGNORE_CVES

PATCH Superseded Daniel Lang 2 participants 2 messages Sep 20, 2023 – Sep 25, 2023

v1 of 2 Superseded Latest is v2 →

lore
Share & tools
lore

Daniel Lang

author
#0 lore raw

PATCH 1/1 package/bind: drop CVE-2017-3139 from IGNORE_CVES

As of 2021-05-14 CVE-2017-3139 is no longer listed as affecting bind, only RHEL.

---
 package/bind/bind.mk | 2 --
 1 file changed, 2 deletions(-)
package/bind/bind.mk +0 -2
index b934ab3190..618b5b9278 100644
@@ -14,8 +14,6 @@ BIND_LICENSE = MPL-2.0
 BIND_LICENSE_FILES = COPYRIGHT
 BIND_CPE_ID_VENDOR = isc
 BIND_SELINUX_MODULES = bind
-# Only applies to RHEL6.x with DNSSEC validation on
-BIND_IGNORE_CVES = CVE-2017-3139
 # Library CVE and not used by bind but used by ISC DHCP
 BIND_IGNORE_CVES += CVE-2019-6470
 BIND_TARGET_SERVER_SBIN = arpaname ddns-confgen dnssec-checkds dnssec-coverage
Signature · 6 lines
2.42.0

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
#1 lore raw
Quoted 3 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Daniel" == Daniel Lang <[email protected]> writes:

As of 2021-05-14 CVE-2017-3139 is no longer listed as affecting bind, only RHEL.

Committed to 2023.02.x, 2023.05.x and 2023.08.x, thanks.

Signature · 5 lines
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot