Summary: | <net-dns/bind{,-tools}-9.10.3_p2: two vulnerabilities (CVE-2015-{8000,8461}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | idl0r |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | B3 [noglsa cve] | ||
Package list: | Runtime testing required: | --- |
Description
Agostino Sarubbo
2015-12-21 11:35:16 UTC
net-dns/bind-9.10.3_p2 and net-dns/bind-tools-9.10.3_p2 have been added. Please stabilize both together, net-dns/bind and net-dns/bind-tools, if you'd like to stabilize the fixed version. Arches, please test and mark stable: =net-dns/bind-9.10.3_p2 =net-dns/bind-tools-9.10.3_p2 Target Keywords : "alpha amd64 arm hppa ia64 ppc ppc64 sparc x86" Thank you! Depends on =dev-libs/libressl-2.2.5 which is ~amd64 [ebuild R ~] net-dns/bind-tools-9.10.3_p2::gentoo USE="ipv6 libressl* readline seccomp ssl -doc -gost -gssapi -idn -uran dom -xml" 0 KiB Stable for HPPA PPC64. (In reply to Craig Inches from comment #3) > Depends on =dev-libs/libressl-2.2.5 which is ~amd64 That's why it's masked in profiles/base/use.stable.mask, so it doesn't matter. (In reply to Jeroen Roovers from comment #5) > (In reply to Craig Inches from comment #3) > > Depends on =dev-libs/libressl-2.2.5 which is ~amd64 > > That's why it's masked in profiles/base/use.stable.mask, so it doesn't > matter. Then AMD64 OK amd64 stable x86 done arm stable sparc stable alpha stable ia64 stable ppc stable. Maintainer(s), please cleanup. Security, please vote. @maintainer(s), please cleanup the vulnerable versions. =net-dns/bind-tools-9.10.1_p1 remains in the tree. Unsupported arches remain unstable for 9.10.1_p2. Please let us know if you can clean or need to stabilize the remaining arches. |