Re: [OE-core] [PATCH] Add two patches for bind

2016-10-13 Thread Burton, Ross
On 17 September 2016 at 14:55, Zheng Ruoqin wrote: > 1.CVE-2016-2775.patch > [security] getrrsetbyname with a non absolute name could > trigger an infinite recursion bug in lwresd > and named with lwres configured if when combined > with a sear

[OE-core] [PATCH] Add two patches for bind

2016-10-12 Thread Zheng Ruoqin
1.CVE-2016-2775.patch [security] getrrsetbyname with a non absolute name could trigger an infinite recursion bug in lwresd and named with lwres configured if when combined with a search list entry the resulting name is too long. (