bind: Update to 9.11.5

This includes the fix for CVE-2018-5738: When recursion is enabled but the
allow-recursion and allow-query-cache ACLs are not specified, they should be
limited to local networks, but they were inadvertently set to match the default
allow-query, thus allowing remote queries.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
This commit is contained in:
Noah Meyerhans
2018-10-28 15:39:38 -07:00
parent 4078b7a5d5
commit f9fbc75557
3 changed files with 14 additions and 27 deletions
+7 -20
View File
@@ -1,26 +1,13 @@
Index: bind-9.10.4-P3/bin/Makefile.in
Index: bind-9.11.5/bin/Makefile.in
===================================================================
--- bind-9.10.4-P3.orig/bin/Makefile.in
+++ bind-9.10.4-P3/bin/Makefile.in
@@ -10,7 +10,7 @@ srcdir = @srcdir@
VPATH = @srcdir@
--- bind-9.11.5.orig/bin/Makefile.in
+++ bind-9.11.5/bin/Makefile.in
@@ -12,7 +12,7 @@ VPATH = @srcdir@
top_srcdir = @top_srcdir@
-SUBDIRS = named rndc dig delv dnssec tools tests nsupdate \
+SUBDIRS = named rndc dig delv dnssec tools nsupdate \
check confgen @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@
TARGETS =
Index: bind-9.10.4-P3/lib/Makefile.in
===================================================================
--- bind-9.10.4-P3.orig/lib/Makefile.in
+++ bind-9.10.4-P3/lib/Makefile.in
@@ -14,7 +14,7 @@ top_srcdir = @top_srcdir@
# Attempt to disable parallel processing.
.NOTPARALLEL:
.NO_PARALLEL:
-SUBDIRS = isc isccc dns isccfg bind9 lwres irs tests samples
+SUBDIRS = isc isccc dns isccfg bind9 lwres irs samples
SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \
- @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests
+ @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@
TARGETS =
@BIND9_MAKE_RULES@
+4 -4
View File
@@ -1,8 +1,8 @@
Index: bind-9.10.4-P3/configure.in
Index: bind-9.11.5/configure.in
===================================================================
--- bind-9.10.4-P3.orig/configure.in
+++ bind-9.10.4-P3/configure.in
@@ -157,26 +157,11 @@ esac
--- bind-9.11.5.orig/configure.in
+++ bind-9.11.5/configure.in
@@ -181,26 +181,11 @@ esac
#
AC_CONFIG_FILES([make/rules make/includes])