bind: security bump to version 9.9.8-P2
Fixes: Named is potentially vulnerable to the OpenSSL vulnerabilty described in CVE-2015-3193. CVE-2015-8461 - Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. CVE-2015-8000 - Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. Signed-off-by:Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Loading
Please register or sign in to comment