<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Subject:
</th>
<td>[OpenWrt-Devel] [CC 15.05-rc3] bind: Security update (2
CVEs)</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Date: </th>
<td>Thu, 3 Sep 2015 15:59:29 +0200</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">From: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:jow@openwrt.org">jow@openwrt.org</a></td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:openwrt-security-announce@lists.openwrt.org">openwrt-security-announce@lists.openwrt.org</a>,
<a class="moz-txt-link-abbreviated" href="mailto:openwrt-devel@lists.openwrt.org">openwrt-devel@lists.openwrt.org</a>,
<a class="moz-txt-link-abbreviated" href="mailto:openwrt-users@lists.openwrt.org">openwrt-users@lists.openwrt.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>The bind package has been rebuilt and was uploaded to the Chaos Calmer
15.05 Release Candicate 3 repository due to multiple security issues.
VERSION
9.9.6-P1-2 => 9.9.7-P3-1
CHANGELOG
[Thu, 3 Sep 2015 14:03:41 +0200 ffda9cc]
Update to 9.9.7-P3 to fix CVE-2015-5722 and CVE-2015-5986
[Thu, 3 Sep 2015 14:03:31 +0200 4e3085c]
Update to version 9.9.7-p2
CHANGES
net/bind/Makefile | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
REFERENCES
* <a class="moz-txt-link-freetext" href="https://www.isc.org/blogs/cve-2015-5722-parsing-malformed-keys-may-cause-bind-to-exit-due-to-a-failed-assertion-in-buffer-c/">https://www.isc.org/blogs/cve-2015-5722-parsing-malformed-keys-may-cause-bind-to-exit-due-to-a-failed-assertion-in-buffer-c/</a>
* <a class="moz-txt-link-freetext" href="https://www.isc.org/blogs/cve-2015-5986-an-incorrect-boundary-check-can-trigger-a-require-assertion-failure-in-openpgpkey_61-c/">https://www.isc.org/blogs/cve-2015-5986-an-incorrect-boundary-check-can-trigger-a-require-assertion-failure-in-openpgpkey_61-c/</a>
* <a class="moz-txt-link-freetext" href="https://github.com/openwrt/packages/commit/4e3085cd058dc573988be8476751048bf203bce4">https://github.com/openwrt/packages/commit/4e3085cd058dc573988be8476751048bf203bce4</a>
* <a class="moz-txt-link-freetext" href="https://github.com/openwrt/packages/commit/ffda9cc9c79ce55da93174025b31f057f7ccef64">https://github.com/openwrt/packages/commit/ffda9cc9c79ce55da93174025b31f057f7ccef64</a>
_______________________________________________
openwrt-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:openwrt-devel@lists.openwrt.org">openwrt-devel@lists.openwrt.org</a>
<a class="moz-txt-link-freetext" href="https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel">https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel</a>
</pre>
<br>
</div>
<br>
</body>
</html>