public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH] bind: Update to 9.11.18
@ 2020-04-21 19:02 Matthias Fischer
  0 siblings, 0 replies; only message in thread
From: Matthias Fischer @ 2020-04-21 19:02 UTC (permalink / raw)
  To: development

[-- Attachment #1: Type: text/plain, Size: 1327 bytes --]

For details see:
https://downloads.isc.org/isc/bind9/9.11.18/RELEASE-NOTES-bind-9.11.18.html

"Security Fixes

DNS rebinding protection was ineffective when BIND 9 is configured as a forwarding
DNS server. Found and responsibly reported by Tobias Klein. [GL #1574]

Known Issues

We have received reports that in some circumstances, receipt of an IXFR can cause
the processing of queries to slow significantly. Some of these were related to RPZ
processing, which has been fixed in this release (see below). Others appear to occur
where there are NSEC3-related changes (such as an operator changing the NSEC3 salt
used in the hash calculation). These are being investigated. [GL #1685]"

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
---
 lfs/bind | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/bind b/lfs/bind
index 80207f4dc..1d5bca986 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 9.11.17
+VER        = 9.11.18
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = ceab137e8e7ce3b356be95f505abf737
+$(DL_FILE)_MD5 = 83144af1532ba16e95f90b42036ef519
 
 install : $(TARGET)
 
-- 
2.18.0


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2020-04-21 19:02 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-04-21 19:02 [PATCH] bind: Update to 9.11.18 Matthias Fischer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox