From: Gustavo Zacarias Date: Thu, 17 Dec 2015 21:43:55 +0000 (-0300) Subject: bind: security bump to version 9.9.8-P2 X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=c3e119e09307eff7ef702f7f860ecbc9b156715e;p=buildroot.git bind: security bump to version 9.9.8-P2 Fixes: Named is potentially vulnerable to the OpenSSL vulnerabilty described in CVE-2015-3193. CVE-2015-8461 - Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. CVE-2015-8000 - Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni --- diff --git a/package/bind/bind.hash b/package/bind/bind.hash index 7f52c555bb..befc8d75d2 100644 --- a/package/bind/bind.hash +++ b/package/bind/bind.hash @@ -1,2 +1,2 @@ -# Verified from ftp://ftp.isc.org/isc/bind9/9.9.8/bind-9.9.8.tar.gz.sha256.asc -sha256 643997cdb0dd232a4c9f7c0f1436841fbf325c6b7269e6490bf5f380eda344e3 bind-9.9.8.tar.gz +# Verified from ftp://ftp.isc.org/isc/bind9/9.9.8-P2/bind-9.9.8-P2.tar.gz.sha256.asc +sha256 f5841926e19637b93ec0b44b5abfbab2410e692736cf11143d461f656fbdf329 bind-9.9.8-P2.tar.gz diff --git a/package/bind/bind.mk b/package/bind/bind.mk index e93b3566a6..0e9a0f417f 100644 --- a/package/bind/bind.mk +++ b/package/bind/bind.mk @@ -4,7 +4,7 @@ # ################################################################################ -BIND_VERSION = 9.9.8 +BIND_VERSION = 9.9.8-P2 BIND_SITE = ftp://ftp.isc.org/isc/bind9/$(BIND_VERSION) BIND_INSTALL_STAGING = YES BIND_CONFIG_SCRIPTS = bind9-config isc-config.sh