OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2015.11 2015-10-09T13:23:46+00:00 2015-10-09T13:23:46+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-10-08T20:16:33+00:00 urn:sha1:e5fa81e745b2bc6f9beb6656b973ebb5a9dc5585 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-09-04T14:07:37+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-09-04T12:39:52+00:00 urn:sha1:38d1a66bda57cb4c47156021ee976c2583b55822 Fixes: CVE-2015-5722 - denial-of-service vector which can be exploited remotely against a BIND server that is performing validation on DNSSEC-signed records. CVE-2015-5986 - denial-of-service vector which can be used against a BIND server that is performing recursion and (under limited conditions) an authoritative-only nameserver. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-07-29T11:01:42+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-07-29T10:24:06+00:00 urn:sha1:948a1d40009ea62c2f0c851186539c491c93c1ea Fixes CVE-2015-5477 - An error in handling TKEY queries can cause named to exit with a REQUIRE assertion failure. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-07-08T21:46:06+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-07-08T16:52:15+00:00 urn:sha1:f70f45a43c486d04bc9aeb5a82f1ce778cf607bc Fixes: CVE-2015-4620 - On servers configured to perform DNSSEC validation an assertion failure could be triggered on answers from a specially configured server. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-03-03T07:36:01+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-03-02T23:32:30+00:00 urn:sha1:cb107525484304ddc47332c215d0bbeb5995b856 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-02-19T20:27:04+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-02-19T11:52:25+00:00 urn:sha1:7f484d8a1bb37d5f5c2d557f91dc917824f6ebda Fixes CVE-2015-1349 - Revoking a managed trust anchor and supplying an untrusted replacement could cause namedto crash with an assertion failure. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2014-12-09T11:40:32+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2014-12-09T11:34:51+00:00 urn:sha1:9289dc562d89aeca722d4b4c3b0083183c2eeaa7 Fixes CVE-2014-8500 - A flaw in delegation handling could be exploited to put named into an infinite loop, in which each lookup of a name server triggered additional lookups of more name servers. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2014-10-01T12:02:51+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2014-09-30T23:13:22+00:00 urn:sha1:f284a1170897790f16d745ee91df5845d05e0fd4 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>