Skip to contentSkip to conversation

Upgrade bind to fix CVE issues

PATCH In review [email protected] 3 participants 7 messages Sep 18, 2015 – Dec 7, 2015

lore
Share & tools
lore

[email protected]

author
#0 lore raw

cover Upgrade bind to fix CVE issues

From: Kai Kang <[email protected]>

Build for qemumips and qemux86-64.

The following changes since commit ea562de57590c966cd5a75fda8defecd397e6436:

qemu: Update to upstream patches (2015-09-14 20:46:40 +0100)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib kangkai/bind
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/bind

Kai Kang (1):
bind: 9.10.2-P4 -> 9.10.3

 .../0001-build-use-pkg-config-to-find-libxml2.patch  | 20 ++++++++++++++------
 .../bind/{bind_9.10.2-P4.bb => bind_9.10.3.bb}       |  4 ++--
 2 files changed, 16 insertions(+), 8 deletions(-)
 rename meta/recipes-connectivity/bind/{bind_9.10.2-P4.bb => bind_9.10.3.bb} (96%)
Signature · 1 line
1.9.1
author
#1 lore raw

PATCH 1/1 bind: 9.10.2-P4 -> 9.10.3

From: Kai Kang <[email protected]>

Upgrade bind to 9.10.3 to fix CVE issues.

* update context of 0001-build-use-pkg-config-to-find-libxml2.patch for new version.

[YOCTO #8281]

Signed-off-by Kai Kang <[email protected]>
---
 .../0001-build-use-pkg-config-to-find-libxml2.patch  | 20 ++++++++++++++------
 .../bind/{bind_9.10.2-P4.bb => bind_9.10.3.bb}       |  4 ++--
 2 files changed, 16 insertions(+), 8 deletions(-)
 rename meta/recipes-connectivity/bind/{bind_9.10.2-P4.bb => bind_9.10.3.bb} (96%)
meta/recipes-connectivity/bind/bind/0001-build-use-pkg-config-to-find-libxml2.patch +14 -6
index cb5251d..7f2f514 100644
@@ -4,15 +4,18 @@ libxml2.
 Upstream-Status: Inappropriate
 Signed-off-by: Ross Burton <[email protected]>
 
+Update context for version 9.10.3.
+
+Signed-off-by: Kai Kang <[email protected]>
 ---
- configure.in | 18 +++---------------
- 1 file changed, 3 insertions(+), 15 deletions(-)
+ configure.in | 23 +++--------------------
+ 1 file changed, 3 insertions(+), 20 deletions(-)
 
 diff --git a/configure.in b/configure.in
-index d566e1c..c9ef3a6 100644
+index 0db826d..75819eb 100644
 --- a/configure.in
 +++ b/configure.in
-@@ -2102,21 +2102,9 @@ case "$use_libxml2" in
+@@ -2107,26 +2107,9 @@ case "$use_libxml2" in
  		DST_LIBXML2_INC=""
  		;;
  	auto|yes)

@@ -22,8 +25,13 @@ index d566e1c..c9ef3a6 100644
 -			libxml2_cflags=`xml2-config --cflags`
 -			;;
 -		*)
--			libxml2_libs=
--			libxml2_cflags=
+-			if test "$use_libxml2" = "yes" ; then
+-				AC_MSG_RESULT(no)
+-				AC_MSG_ERROR(required libxml2 version not available)
+-			else
+-				libxml2_libs=
+-				libxml2_cflags=
+-			fi
 -			;;
 -		esac
 -		;;
meta/recipes-connectivity/bind/bind_9.10.3.bb renamed from meta/recipes-connectivity/bind/bind_9.10.2-P4.bb +2 -2
similarity index 96%
rename from meta/recipes-connectivity/bind/bind_9.10.2-P4.bb
rename to meta/recipes-connectivity/bind/bind_9.10.3.bb
index efae289..1d3c6ff 100644
@@ -22,8 +22,8 @@ SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \
            file://0001-gen.c-extend-DIRNAMESIZE-from-256-to-512.patch \
            "
 
-SRC_URI[md5sum] = "8b1f5064837756c938eadc1537dec5c7"
-SRC_URI[sha256sum] = "c00b21ec1def212957f28efe9d10aac52d6ec515e84fbf2c42143f5d71429cb8"
+SRC_URI[md5sum] = "d8cbf04a62a139a841d4bf878087a555"
+SRC_URI[sha256sum] = "9ac33bd8754ab4b6ee449b1b2aa88e09f51cda088486f4ab1585acd920b98ff0"
 
 ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}"
 EXTRA_OECONF = " ${ENABLE_IPV6} --with-randomdev=/dev/random --disable-threads \
Signature · 1 line
1.9.1
#2 lore raw

Re: [PATCH 1/1] bind: 9.10.2-P4 -> 9.10.3

Quoted 2 lines · On 18 September 2015 at 04:22, <[email protected]> wrote:

Upgrade bind to 9.10.3 to fix CVE issues.

Sorry, but we just had the M3 build so can you submit this as a patch to 9.10.2-P4 instead of an upgrade?

Ross

author
#3 lore raw

Re: [PATCH 1/1] bind: 9.10.2-P4 -> 9.10.3

Quoted 9 lines · Ross

On 18 September 2015 at 04:22, <[email protected] <mailto:[email protected]>> wrote:

Upgrade bind to 9.10.3 to fix CVE issues.

Sorry, but we just had the M3 build so can you submit this as a patch to 9.10.2-P4 instead of an upgrade?

Ross

OK. I'll do that.

Signature · 2 lines
Regards,
Neil | Kai Kang
#4 lore raw

Re: [PATCH 1/1] bind: 9.10.2-P4 -> 9.10.3

Quoted 8 lines · Kang Kai
Quoted 7 lines · Ross

On 18 September 2015 at 04:22, <[email protected] <mailto:[email protected]>> wrote:

Upgrade bind to 9.10.3 to fix CVE issues.

Quoted 6 lines
Quoted 4 lines

Sorry, but we just had the M3 build so can you submit this as a patch to 9.10.2-P4 instead of an upgrade?

Ross

OK. I'll do that.

Ross,

Kai has been working on other things.

9.10.3 appears to be a bug fix only minor upgev.
If Kai can show that there are only bug fixes can
we accept that version for oe-core-2.0.1?

../Randy

Quoted 7 lines

--
Regards,
Neil | Kai Kang

Signature · 2 lines
# Randy MacLeod. SMTS, Linux, Wind River
Direct: 613.963.1350 | 350 Terry Fox Drive, Suite 200, Ottawa, ON, Canada, K2K 2W5
author
#5 lore raw

Re: [PATCH 1/1] bind: 9.10.2-P4 -> 9.10.3

In reply to Burton, Ross
Quoted 9 lines · Ross

On 18 September 2015 at 04:22, <[email protected] <mailto:[email protected]>> wrote:

Upgrade bind to 9.10.3 to fix CVE issues.

Sorry, but we just had the M3 build so can you submit this as a patch to 9.10.2-P4 instead of an upgrade?

Ross

Could we discuss this patch now? Thanks.

Signature · 2 lines
Regards,
Neil | Kai Kang
#6 lore raw

Re: [PATCH 1/1] bind: 9.10.2-P4 -> 9.10.3

Quoted 2 lines · Kang Kai

Could we discuss this patch now? Thanks.

Certainly. Can you rebase it to current master please?

Ross