From 5f7a875f6ddcd787497e0dc946b03d933f7a72bb Mon Sep 17 00:00:00 2001 From: Ashishkumar Parmar Date: Wed, 8 Jul 2026 22:09:43 -0700 Subject: [PATCH] bind: Upgrade 9.18.44 -> 9.18.49 This upgrade fixes CVE-2026-1519, CVE-2026-3039, CVE-2026-3592, CVE-2026-5946 and CVE-2026-5950. Changelog ========= https://downloads.isc.org/isc/bind9/9.18.49/doc/arm/html/notes.html The 9.18.45 changelog includes a Python 3.10 requirement change for ISC's upstream system test suite, but OE-Core's bind recipe does not enable or package that test suite and does not inherit ptest. This change is therefore not part of the target build, installed packages, runtime dependencies, or runtime behavior. (From OE-Core rev: dee1f392d5294bc5a228ff185bd0c105243a26d4) Signed-off-by: Ashishkumar Parmar Signed-off-by: Yoann Congal Signed-off-by: Paul Barker --- .../bind/{bind_9.18.44.bb => bind_9.18.49.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-connectivity/bind/{bind_9.18.44.bb => bind_9.18.49.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind_9.18.44.bb b/meta/recipes-connectivity/bind/bind_9.18.49.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.18.44.bb rename to meta/recipes-connectivity/bind/bind_9.18.49.bb index d424edcb4e..723a09e739 100644 --- a/meta/recipes-connectivity/bind/bind_9.18.44.bb +++ b/meta/recipes-connectivity/bind/bind_9.18.49.bb @@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-avoid-start-failure-with-bind-user.patch \ " -SRC_URI[sha256sum] = "81f5035a25c576af1a93f0061cf70bde6d00a0c7bd1274abf73f5b5389a6f82d" +SRC_URI[sha256sum] = "c43ce4548ebed788cd9df63658a7de105ceafba43fcd63fa352b1093e525cd24" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2