Jussi Kukkonen 74ab080d34 bind: CVE-2016-2088 ...

Duplicate EDNS COOKIE options in a response could trigger an
assertion failure: Fix with a backport.

bind as built with the oe-core recipe is not at risk: Only servers
which are built with DNS cookie support (--enable-sit) are vulnerable
to denial of service.

Fixes [YOCTO #9438]

(From OE-Core rev: da38a9840b32e80464e2938395db5c9167729f7e)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-04-18 16:28:22 +01:00

..

bind

bind: CVE-2016-2088

2016-04-18 16:28:22 +01:00

bind_9.10.3-P3.bb

bind: CVE-2016-2088

2016-04-18 16:28:22 +01:00