From: Roy Li
9.10.2-p3 includes the fix for CVE-2015-5477:
BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote
attackers to cause a denial of service (REQUIRE assertion failure
and daemon exit) via TKEY queries.
Signed-off-by: Roy Li
---
.../bind/{bind_9.10.2-P2.bb => bind
From: Roy Li
upgrade to fix CVE-2015-4620:
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x
before 9.10.2-P2, when configured as a recursive resolver with DNSSEC
validation, allows remote attackers to cause a denial of service (REQUIRE
assertion failure a
On 30 April 2015 at 10:24, Rongqing Li wrote:
> I can not reproduce it on Ubuntu and Fedora release 21, for x86. mips
>
This is what I see:
| x86_64-poky-linux-gcc -m64 -march=corei7 -mtune=corei7 -mfpmath=sse
-msse4.2 --sysroot=/data/poky-master/tmp/sysroots/intel-corei7-64 -O2
-pipe -g -fel
On 2015年04月30日 16:02, Richard Purdie wrote:
4. update the dont-test-on-host.patch
>5. update the Copyright file checksum, since the date in it has been changed.
>
>Signed-off-by: Roy Li
If you apply this patch, then run "bitbake dhcp" it fails. This is what
it did last time it was submitted to
On Wed, 2015-04-29 at 16:59 +0800, rongqing...@windriver.com wrote:
> From: Roy Li
>
> 1. Remove seven unneeded CVE patches, and five patches in them were
> not already used
> 2. 9.10.2 fixed the CVE-2015-1349
> 3. Remove bind-subdirs-run-serially.patch and cross-build-fix.patch,
> similar fixes
From: Roy Li
1. Remove seven unneeded CVE patches, and five patches in them were
not already used
2. 9.10.2 fixed the CVE-2015-1349
3. Remove bind-subdirs-run-serially.patch and cross-build-fix.patch,
similar fixes are merged into 9.10.2
4. update the dont-test-on-host.patch
5. update the Copyrig
