mbox

bind: Update to 9.10.3-p3

Message ID 1454868708-26504-1-git-send-email-matthias.fischer@ipfire.org
State Accepted
Commit da0dec75a7d5e327dbf320c9c1c04361745c88af
Headers

Message

Matthias Fischer Feb. 8, 2016, 5:11 a.m. UTC 
  Changelog (excerpt):
[bug] Fixed a regression in resolver.c:possibly_mark()
which caused known-bogus servers to be queried
anyway. [RT #41321]

[security] render_ecs errors were mishandled when printing out
a OPT record resulting in a assertion failure.
(CVE-2015-8705) [RT #41397]

[security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 lfs/bind | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

Comments

Michael Tremer Feb. 8, 2016, 12:55 p.m. UTC | #1 
I will wait until the source for these has been uploaded.

Best,
-Michael

On Sun, 2016-02-07 at 19:11 +0100, Matthias Fischer wrote:
> Changelog (excerpt):
> [bug] Fixed a regression in resolver.c:possibly_mark()
> which caused known-bogus servers to be queried
> anyway. [RT #41321]
> 
> [security] render_ecs errors were mishandled when printing out
> a OPT record resulting in a assertion failure.
> (CVE-2015-8705) [RT #41397]
> 
> [security] Specific APL data could trigger a INSIST.
> (CVE-2015-8704) [RT #41396]
> 
> Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
> ---
>  lfs/bind | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/lfs/bind b/lfs/bind
> index b0d5185..e2bb516 100644
> --- a/lfs/bind
> +++ b/lfs/bind
> @@ -1,7 +1,7 @@
>  ####################################################################
> ###########
>  #                                                                   
>           #
>  # IPFire.org - A linux based
> firewall                                         #
> -# Copyright (C) 2015  Michael Tremer & Christian
> Schmidt                      #
> +# Copyright (C) 2016  Michael Tremer & Christian
> Schmidt                      #
>  #                                                                   
>           #
>  # This program is free software: you can redistribute it and/or
> modify        #
>  # it under the terms of the GNU General Public License as published
> by        #
> @@ -25,7 +25,7 @@
>  
>  include Config
>  
> -VER        = 9.10.3-P2
> +VER        = 9.10.3-P3
>  
>  THISAPP    = bind-$(VER)
>  DL_FILE    = $(THISAPP).tar.gz
> @@ -43,7 +43,7 @@ objects = $(DL_FILE)
>  
>  $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>  
> -$(DL_FILE)_MD5 = 672dd3c2796b12ac8440f55bcaecfa82
> +$(DL_FILE)_MD5 = bcf7e772b616f7259420a3edc5df350a
>  
>  install : $(TARGET)
>
Matthias Fischer Feb. 8, 2016, 7:58 p.m. UTC | #2 
Hi,

On 08.02.2016 02:55, Michael Tremer wrote:
> I will wait until the source for these has been uploaded.

Since '/pub/sources' now exists again: Done. ;-)

Best,
Matthias