15.0 bind update

Nobby6 · 03-20-2022, 04:06 AM

Pat,

got 9.18.1 in -current (thanks!) but I also got 9.18.1 in 15 ?

was that an error? thought you said it would stick with 9.16 being LTS

Just a heads up given those who are using 9.16 and sockets might be in for a rude shock

avian · 03-21-2022, 01:25 PM

Quote:

Originally Posted by Nobby6

Pat,

got 9.18.1 in -current (thanks!) but I also got 9.18.1 in 15 ?

was that an error? thought you said it would stick with 9.16 being LTS

Just a heads up given those who are using 9.16 and sockets might be in for a rude shock

Could you explain the rude shock? I've been battling a few issues since moving to 9.18.1 on 15.0, wondering if is related.

volkerdi · 03-21-2022, 03:31 PM

Thanks, I've corrected this mistake.

marav · 03-21-2022, 03:33 PM

Code:

Mon Mar 21 20:24:16 UTC 2022
testing/packages/bind-9.18.1-x86_64-1_slack15.0.txz:  Moved.
patches/packages/bind-9.16.27-x86_64-1_slack15.0.txz:  Upgraded.
  Sorry folks, I had not meant to bump BIND to the newer branch. I've moved
  the other packages into /testing. Thanks to Nobby6 for pointing this out.
  This update fixes bugs and the following security issues:
  A synchronous call to closehandle_cb() caused isc__nm_process_sock_buffer()
  to be called recursively, which in turn left TCP connections hanging in the
  CLOSE_WAIT state blocking indefinitely when out-of-order processing was
  disabled.
  The rules for acceptance of records into the cache have been tightened to
  prevent the possibility of poisoning if forwarders send records outside
  the configured bailiwick.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0396
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25220
  (* Security fix *)