diff options
| author | Noah Meyerhans <frodo@morgul.net> | 2022-03-18 10:24:31 -0700 |
|---|---|---|
| committer | Noah Meyerhans <frodo@morgul.net> | 2022-03-18 10:57:37 -0700 |
| commit | 17ab4ed4e4e727bca53a4a68e816baac463fb692 (patch) | |
| tree | 7393305760673eb7bd1fc6549e9a7735d3d5203b | |
| parent | ed3e4b711e4aa37f9593f3a26a05b93f1c9f1e67 (diff) | |
bind: update to 9.11.37
Fixes security issues:
* CVE-2021-25220 -- The rules for acceptance of records into the cache
have been tightened to prevent the possibility of
poisoning if forwarders send records outside
the configured bailiwick.
* CVE-2021-25219 -- The "lame-ttl" option is now forcibly set to 0. This
effectively disables the lame server cache, as it could
previously be abused by an attacker to significantly
degrade resolver performance.
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
| -rw-r--r-- | net/bind/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/bind/Makefile b/net/bind/Makefile index 486738a48..5df441b3e 100644 --- a/net/bind/Makefile +++ b/net/bind/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=bind -PKG_VERSION:=9.11.36 +PKG_VERSION:=9.11.37 PKG_RELEASE:=1 USERID:=bind=57:bind=57 @@ -21,7 +21,7 @@ PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:= \ https://www.mirrorservice.org/sites/ftp.isc.org/isc/bind9/$(PKG_VERSION) \ https://ftp.isc.org/isc/bind9/$(PKG_VERSION) -PKG_HASH:=c953fcb6703b395aaa53e65ff8b2869b69a5303dd60507cba2201305e1811681 +PKG_HASH:=0d8efbe7ec166ada90e46add4267b7e7c934790cba9bd5af6b8380a4fbfb5aff PKG_FIXUP:=autoreconf PKG_REMOVE_FILES:=aclocal.m4 libtool.m4 |