From mboxrd@z Thu Jan  1 00:00:00 1970
From: Matthias Fischer <matthias.fischer@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH] bind: Update to 9.11.0-P2
Date: Sat, 14 Jan 2017 13:10:43 +0100
Message-ID: <20170114121043.1780-1-matthias.fischer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8118553367730038863=="
List-Id: <development.lists.ipfire.org>

--===============8118553367730038863==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

For details see:
https://ftp.isc.org/isc/bind9/9.11.0-P2/RELEASE-NOTES-bind-9.11.0-P2.html

"BIND 9.11.0-P2 addresses the security issues described in CVE-2016-9131, CVE=
-2016-9147,=20
CVE-2016-9444 and CVE-2016-9778.

...

Security Fixes

A coding error in the nxdomain-redirect feature could lead to an assertion fa=
ilure if the
redirection namespace was served from a local authoritative data source such =
as a local zone
or a DLZ instead of via recursive lookup. This flaw is disclosed in CVE-2016-=
9778. [RT

Named could mishandle authority sections that were missing RRSIGs triggering =
an assertion
failure. This flaw is disclosed in CVE-2016-9444. [RT # 43632]

Named mishandled some responses where covering RRSIG records are returned wit=
hout the
requested data resulting in a assertion failure. This flaw is disclosed in CV=
E-2016-9147.
[RT #43548]

Named incorrectly tried to cache TKEY records which could trigger a assertion=
 failure when
there was a class mismatch. This flaw is disclosed in CVE-2016-9131. [RT #435=
22]

It was possible to trigger assertions when processing a response. This flaw i=
s disclosed in
CVE-2016-8864. [RT #43465]"

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
---
 lfs/bind | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/bind b/lfs/bind
index 7554cb123..d25c2df9f 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -1,7 +1,7 @@
 ############################################################################=
###
 #                                                                           =
  #
 # IPFire.org - A linux based firewall                                       =
  #
-# Copyright (C) 2007-2016  IPFire Team  <info(a)ipfire.org>                 =
    #
+# Copyright (C) 2007-2017  IPFire Team  <info(a)ipfire.org>                 =
    #
 #                                                                           =
  #
 # This program is free software: you can redistribute it and/or modify      =
  #
 # it under the terms of the GNU General Public License as published by      =
  #
@@ -25,7 +25,7 @@
=20
 include Config
=20
-VER        =3D 9.11.0-P1
+VER        =3D 9.11.0-P2
=20
 THISAPP    =3D bind-$(VER)
 DL_FILE    =3D $(THISAPP).tar.gz
@@ -43,7 +43,7 @@ objects =3D $(DL_FILE)
=20
 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
=20
-$(DL_FILE)_MD5 =3D 4ec15dcf90ad77e923a05d7386348080
+$(DL_FILE)_MD5 =3D b8ccec541de18ac2716e7a8268baaaba
=20
 install : $(TARGET)
=20
--=20
2.11.0


--===============8118553367730038863==--