diff options
| author | Noah Meyerhans <frodo@morgul.net> | 2018-06-13 17:25:38 -0700 |
|---|---|---|
| committer | Noah Meyerhans <frodo@morgul.net> | 2018-06-13 21:46:03 -0700 |
| commit | 037f1def7d0da79868e0e303996d9fb14efb54ac (patch) | |
| tree | e866422f9d6f3adb1ee5d60081bf1419de529e9b /lang/python/python-crypto/Makefile | |
| parent | 996773d366742bf04555fa275fdf42275897f109 (diff) | |
bind: Update to version 9.11.3 and optionally support eddsa for dnssec
EdDSA support is optional and currently defaults to being disabled.
The following security issues are addressed with this update:
* An error in TSIG handling could permit unauthorized zone transfers
or zone updates. These flaws are disclosed in CVE-2017-3142 and
CVE-2017-3143.
* The BIND installer on Windows used an unquoted service path, which
can enable privilege escalation. This flaw is disclosed in
CVE-2017-3141.
* With certain RPZ configurations, a response with TTL 0 could cause
named to go into an infinite query loop. This flaw is disclosed in
CVE-2017-3140.
* Addresses could be referenced after being freed during resolver
processing, causing an assertion failure. The chances of this
happening were remote, but the introduction of a delay in
resolution increased them. This bug is disclosed in CVE-2017-3145.
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
Diffstat (limited to 'lang/python/python-crypto/Makefile')
0 files changed, 0 insertions, 0 deletions