diff options
| author | Noah Meyerhans <frodo@morgul.net> | 2022-03-17 18:32:38 -0700 |
|---|---|---|
| committer | Rosen Penev <rosenp@gmail.com> | 2022-03-18 00:34:43 -0700 |
| commit | 4c6ea5379c02c97e49fde6e62cf0dad278f64313 (patch) | |
| tree | d3cc47eebe00569e972bb1e36986fd02021cde27 /net/bind | |
| parent | 0ce744202ad2a2feaa3b841ce934765416d1339e (diff) | |
bind: bump to 9.18.1
Fixes multiple security issues:
* CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the
fetch had been shut down earlier
* CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when
"synth-from-dnssec" was enabled
* CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
isc__nm_process_sock_buffer() to be called recursively,
which in turn left TCP connections hanging in the CLOSE_WAIT
state blocking indefinitely when out-of-order processing was
disabled.
* CVE-2021-25220 -- The rules for acceptance of records into the cache
have been tightened to prevent the possibility of
poisoning if forwarders send records outside the
configured bailiwick
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
Diffstat (limited to 'net/bind')
| -rw-r--r-- | net/bind/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/bind/Makefile b/net/bind/Makefile index 8dbf15cfe..f6065d49f 100644 --- a/net/bind/Makefile +++ b/net/bind/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=bind -PKG_VERSION:=9.18.0 +PKG_VERSION:=9.18.1 PKG_RELEASE:=$(AUTORELEASE) USERID:=bind=57:bind=57 @@ -22,7 +22,7 @@ PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz PKG_SOURCE_URL:= \ https://www.mirrorservice.org/sites/ftp.isc.org/isc/bind9/$(PKG_VERSION) \ https://ftp.isc.org/isc/bind9/$(PKG_VERSION) -PKG_HASH:=56525bf5caf01fd8fd9d90910880cc0f8a90a27a97d169187d651d4ecf0c411c +PKG_HASH:=57c7afd871694d615cb4defb1c1bd6ed023350943d7458414db8d493ef560427 PKG_FIXUP:=autoreconf PKG_REMOVE_FILES:=aclocal.m4 libtool.m4 |