]> CyberLeo.Net >> Repos - FreeBSD/stable/8.git/commit
Update to version 9.6-ESV-R4-P3
authordougb <dougb@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 6 Jul 2011 00:50:54 +0000 (00:50 +0000)
committerdougb <dougb@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 6 Jul 2011 00:50:54 +0000 (00:50 +0000)
commit3f606454430247025c3d45ff82bdb15b1ef2e91f
tree5dd1bf263dc80eb4804560d8326d53639abbc14a
parentd969b1f076cafc6b04bd811164f0c647c9cd2a53
Update to version 9.6-ESV-R4-P3

ALL BIND USERS ARE ENCOURAGED TO UPGRADE IMMEDIATELY

This update addresses the following vulnerability:

CVE-2011-2464
=============
Severity: High
Exploitable: Remotely

Description:

A defect in the affected BIND 9 versions allows an attacker to remotely
cause the "named" process to exit using a specially crafted packet. This
defect affects both recursive and authoritative servers. The code location
of the defect makes it impossible to protect BIND using ACLs configured
within named.conf or by disabling any features at compile-time or run-time.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464
https://www.isc.org/software/bind/advisories/cve-2011-2464

git-svn-id: svn://svn.freebsd.org/base/stable/8@223815 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
13 files changed:
contrib/bind9/CHANGES
contrib/bind9/bin/named/bind9.xsl.h
contrib/bind9/lib/dns/api
contrib/bind9/lib/dns/include/dns/masterdump.h
contrib/bind9/lib/dns/include/dns/rdataset.h
contrib/bind9/lib/dns/masterdump.c
contrib/bind9/lib/dns/message.c
contrib/bind9/lib/dns/ncache.c
contrib/bind9/lib/dns/rbtdb.c
contrib/bind9/lib/dns/rdataset.c
contrib/bind9/lib/dns/resolver.c
contrib/bind9/lib/dns/validator.c
contrib/bind9/version