For details see: https://downloads.isc.org/isc/bind9/9.11.10/RELEASE-NOTES-bind-9.11.10.html
"Security Fixes
A race condition could trigger an assertion failure when a large number of incoming packets were being rejected. This flaw is disclosed in CVE-2019-6471. [GL #942]"
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org --- config/rootfiles/common/bind | 12 +++++++----- lfs/bind | 4 ++-- 2 files changed, 9 insertions(+), 7 deletions(-)
diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 40babe862..2b67a039c 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -128,6 +128,7 @@ usr/bin/nsupdate #usr/include/isc/crc64.h #usr/include/isc/deprecated.h #usr/include/isc/dir.h +#usr/include/isc/endian.h #usr/include/isc/entropy.h #usr/include/isc/errno.h #usr/include/isc/error.h @@ -192,6 +193,7 @@ usr/bin/nsupdate #usr/include/isc/serial.h #usr/include/isc/sha1.h #usr/include/isc/sha2.h +#usr/include/isc/siphash.h #usr/include/isc/sockaddr.h #usr/include/isc/socket.h #usr/include/isc/stat.h @@ -266,15 +268,15 @@ usr/bin/nsupdate #usr/lib/libbind9.la #usr/lib/libbind9.so usr/lib/libbind9.so.161 -usr/lib/libbind9.so.161.0.2 +usr/lib/libbind9.so.161.0.3 #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libdns.so.1106 -usr/lib/libdns.so.1106.0.2 +usr/lib/libdns.so.1107 +usr/lib/libdns.so.1107.0.0 #usr/lib/libisc.la #usr/lib/libisc.so usr/lib/libisc.so.1100 -usr/lib/libisc.so.1100.2.0 +usr/lib/libisc.so.1100.3.0 #usr/lib/libisccc.la #usr/lib/libisccc.so usr/lib/libisccc.so.161 @@ -282,7 +284,7 @@ usr/lib/libisccc.so.161.0.1 #usr/lib/libisccfg.la #usr/lib/libisccfg.so usr/lib/libisccfg.so.163 -usr/lib/libisccfg.so.163.0.1 +usr/lib/libisccfg.so.163.0.2 #usr/lib/liblwres.la #usr/lib/liblwres.so usr/lib/liblwres.so.161 diff --git a/lfs/bind b/lfs/bind index d893f8510..46f935903 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@
include Config
-VER = 9.11.9 +VER = 9.11.10
THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 8acbca69b32074ab326ac46cb2288041 +$(DL_FILE)_MD5 = d337c24bac0bb0d83470cd0021366bd0
install : $(TARGET)