All of lore.kernel.org
 help / color / mirror / Atom feed
From: Peter Korsgaard <peter@korsgaard.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH] package/bind: security bump to version 9.11.19
Date: Mon, 25 May 2020 21:58:24 +0200	[thread overview]
Message-ID: <877dwzkcrj.fsf@dell.be.48ers.dk> (raw)
In-Reply-To: <20200525061528.18998-1-peter@korsgaard.com> (Peter Korsgaard's message of "Mon, 25 May 2020 08:15:28 +0200")

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > Fixes the following security issues:
 > - (9.11.18) DNS rebinding protection was ineffective when BIND 9 is
 >   configured as a forwarding DNS server.  Found and responsibly reported by
 >   Tobias Klein.  [GL #1574]

 > - (9.11.19) To prevent exhaustion of server resources by a maliciously
 >   configured domain, the number of recursive queries that can be triggered
 >   by a request before aborting recursion has been further limited.  Root and
 >   top-level domain servers are no longer exempt from the
 >   max-recursion-queries limit.  Fetches for missing name server address
 >   records are limited to 4 for any domain.  This issue was disclosed in
 >   CVE-2020-8616.  [GL #1388]

 > - (9.11.19) Replaying a TSIG BADTIME response as a request could trigger an
 >   assertion failure.  This was disclosed in CVE-2020-8617.  [GL #1703]

 > Also update the COPYRIGHT hash for a change of copyright year and adjust the
 > spacing for the new agreements.

 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Committed, thanks.

-- 
Bye, Peter Korsgaard

  reply	other threads:[~2020-05-25 19:58 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-05-25  6:15 [Buildroot] [PATCH] package/bind: security bump to version 9.11.19 Peter Korsgaard
2020-05-25 19:58 ` Peter Korsgaard [this message]
2020-05-31 21:15 ` Peter Korsgaard

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=877dwzkcrj.fsf@dell.be.48ers.dk \
    --to=peter@korsgaard.com \
    --cc=buildroot@busybox.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.