For details see: https://downloads.isc.org/isc/bind9/9.11.11/RELEASE-NOTES-bind-9.11.11.html

"Security Fixes

A race condition could trigger an assertion failure when a large number of incoming packets were being rejected. This flaw is disclosed in CVE-2019-6471. [GL #942]

...

Bug Fixes

Glue address records were not being returned in responses to root priming queries; this has been corrected. [GL #1092]

Interaction between DNS64 and RPZ No Data rule (CNAME *.) could cause unexpected results; this has been fixed. [GL #1106]

named-checkconf now checks DNS64 prefixes to ensure bits 64-71 are zero. [GL #1159]

named-checkconf could crash during configuration if configured to use "geoip continent" ACLs with legacy GeoIP. [GL #1163]

named-checkconf now correctly reports missing dnstap-output option when dnstap is set. [GL #1136]

Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL #1133]"

Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org --- config/rootfiles/common/bind | 4 ++-- lfs/bind | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 2b67a039c..6f90b879b 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -272,11 +272,11 @@ usr/lib/libbind9.so.161.0.3 #usr/lib/libdns.la #usr/lib/libdns.so usr/lib/libdns.so.1107 -usr/lib/libdns.so.1107.0.0 +usr/lib/libdns.so.1107.0.1 #usr/lib/libisc.la #usr/lib/libisc.so usr/lib/libisc.so.1100 -usr/lib/libisc.so.1100.3.0 +usr/lib/libisc.so.1100.3.1 #usr/lib/libisccc.la #usr/lib/libisccc.so usr/lib/libisccc.so.161 diff --git a/lfs/bind b/lfs/bind index 46f935903..b90d2da4e 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@

include Config

-VER = 9.11.10 +VER = 9.11.11

THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

-$(DL_FILE)_MD5 = d337c24bac0bb0d83470cd0021366bd0 +$(DL_FILE)_MD5 = 5b4a301aa97387db81352f7466bac161

install : $(TARGET)