Skip to contentSkip to conversation

bind: security bump to version 9.11.5

PATCH New Peter Korsgaard 1 participant 3 messages Nov 7, 2018 – Nov 25, 2018

lore
Share & tools
lore

Peter Korsgaard

author
#0 lore raw

PATCH 1/1 bind: security bump to version 9.11.5

Fixes the following security issues:

- CVE-2018-5738: Some versions of BIND can improperly permit recursive query service to unauthorized clients

- CVE-2018-5740: A flaw in the "deny-answer-aliases" feature can cause an INSIST assertion failure in named

For more details, see the release notes:

https://ftp.isc.org/isc/bind9/9.11.5/RELEASE-NOTES-bind-9.11.5.html

Drop patch 0003-Rename-ptrsize-to-ptr_size.patch as the uClibc-ng issue was fixed upstream in commit 931fd627f6195 (mips: fix clashing symbols), which is included in uclibc-1.0.12 (January 2016).

Signed-off-by Peter Korsgaard <[email protected]>
---
 .../bind/{0002-cross.patch => 0001-cross.patch}    |  0
 package/bind/0003-Rename-ptrsize-to-ptr_size.patch | 74 ----------------------
 package/bind/bind.hash                             |  4 +-
 package/bind/bind.mk                               |  2 +-
 4 files changed, 3 insertions(+), 77 deletions(-)
 rename package/bind/{0002-cross.patch => 0001-cross.patch} (100%)
 delete mode 100644 package/bind/0003-Rename-ptrsize-to-ptr_size.patch
package/bind/0001-cross.patch renamed from package/bind/0002-cross.patch +0 -0
similarity index 100%
rename from package/bind/0002-cross.patch
rename to package/bind/0001-cross.patch
package/bind/0003-Rename-ptrsize-to-ptr_size.patch deleted +0 -74

74 lines not on this page · raw message

package/bind/bind.hash +2 -2
index 19d5f61f6d..ea76108cc0 100644
@@ -1,4 +1,4 @@
-# Verified from https://ftp.isc.org/isc/bind9/9.11.4-P1/bind-9.11.4-P1.tar.gz.asc
+# Verified from https://ftp.isc.org/isc/bind9/9.11.5/bind-9.11.5.tar.gz.asc
 # with key BE0E9748B718253A28BB89FFF1B11BF05CF02E57
-sha256 a85af7b629109d41285c7adeae1515daac638bbe4d5dc30d1f4b343dff09d811 bind-9.11.4-P2.tar.gz
+sha256 a4cae11dad954bdd4eb592178f875bfec09fcc7e29fe0f6b7a4e5b5c6bc61322 bind-9.11.5.tar.gz
 sha256 336f3c40e37a1a13690efb4c63e20908faa4c40498cc02f3579fb67d3a1933a5 COPYRIGHT
package/bind/bind.mk +1 -1
index 95f615bf81..19d9d1cf5c 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-BIND_VERSION = 9.11.4-P2
+BIND_VERSION = 9.11.5
 BIND_SITE = http://ftp.isc.org/isc/bind9/$(BIND_VERSION)
 # bind does not support parallel builds.
 BIND_MAKE = $(MAKE1)
Signature · 1 line
2.11.0
author
#1 lore raw

PATCH 1/1 bind: security bump to version 9.11.5

Quoted 11 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Peter" == Peter Korsgaard <[email protected]> writes:

Fixes the following security issues:
- CVE-2018-5738: Some versions of BIND can improperly permit recursive query service to unauthorized clients

- CVE-2018-5740: A flaw in the "deny-answer-aliases" feature can cause an INSIST assertion failure in named

For more details, see the release notes:

Quoted 7 lines

https://ftp.isc.org/isc/bind9/9.11.5/RELEASE-NOTES-bind-9.11.5.html

Drop patch 0003-Rename-ptrsize-to-ptr_size.patch as the uClibc-ng issue was fixed upstream in commit 931fd627f6195 (mips: fix clashing symbols), which is included in uclibc-1.0.12 (January 2016).

Signed-off-by Peter Korsgaard <[email protected]>

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard
author
#2 lore raw

PATCH 1/1 bind: security bump to version 9.11.5

In reply to Peter Korsgaard
Quoted 11 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Peter" == Peter Korsgaard <[email protected]> writes:

Fixes the following security issues:
- CVE-2018-5738: Some versions of BIND can improperly permit recursive query service to unauthorized clients

- CVE-2018-5740: A flaw in the "deny-answer-aliases" feature can cause an INSIST assertion failure in named

For more details, see the release notes:

Quoted 7 lines

https://ftp.isc.org/isc/bind9/9.11.5/RELEASE-NOTES-bind-9.11.5.html

Drop patch 0003-Rename-ptrsize-to-ptr_size.patch as the uClibc-ng issue was fixed upstream in commit 931fd627f6195 (mips: fix clashing symbols), which is included in uclibc-1.0.12 (January 2016).

Signed-off-by Peter Korsgaard <[email protected]>

Committed to 2018.02.x and 2018.08.x, thanks.

Signature · 1 line
Bye, Peter Korsgaard