On Mon Sep 28, 2026 at 9:11 AM CEST, Hitendra Prajapati via lists.openembedded.org wrote: > Pick patch from [1], [2] & [3] also mentioned at Debian report in [4] > > [1] > https://gitlab.isc.org/isc-projects/bind9/-/commit/c9cb6a5e24e43489cf3fd4d4cc2193b6a74499cb > [2] > https://gitlab.isc.org/isc-projects/bind9/-/commit/35e3d49d2222c13786a06021c7ed583d2a656e51 > [3] > https://gitlab.isc.org/isc-projects/bind9/-/commit/833dd3b230b92596074e8da15b12298f46c939f2 > [4] https://security-tracker.debian.org/tracker/CVE-2026-10723 > > Signed-off-by: Hitendra Prajapati <[email protected]> > --- > .../bind/bind/CVE-2026-10723-01.patch | 70 +++ > .../bind/bind/CVE-2026-10723-02.patch | 496 ++++++++++++++++++ > .../bind/bind/CVE-2026-10723-03.patch | 310 +++++++++++ > .../recipes-connectivity/bind/bind_9.18.49.bb | 3 + > 4 files changed, 879 insertions(+) > create mode 100644 > meta/recipes-connectivity/bind/bind/CVE-2026-10723-01.patch > create mode 100644 > meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch > create mode 100644 > meta/recipes-connectivity/bind/bind/CVE-2026-10723-03.patch > [...] > diff --git a/meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch > b/meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch > new file mode 100644 > index 0000000000..a3ff47b8bf > --- /dev/null > +++ b/meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch > @@ -0,0 +1,496 @@ > +From: Alessio Podda <[email protected]> > +Date: Wed, 3 Jun 2026 10:42:43 +0200 > +Subject: Reproducer for #5874 NSEC3 impersonation > + > +LLM generated. > + > +(cherry picked from commit f3e2eb333be3ac636f745aa13cfb8d9ee8af87d8) > + > +Origin: > https://gitlab.isc.org/isc-projects/bind9/-/commit/35e3d49d2222c13786a06021c7ed583d2a656e51 > +Bug-Debian-Security: > https://security-tracker.debian.org/tracker/CVE-2026-10723 > +Bug-Freexian-Security: > https://deb.freexian.com/extended-lts/tracker/CVE-2026-10723 > + > +CVE: CVE-2026-10723 > +Upstream-Status: Backport > [https://gitlab.isc.org/isc-projects/bind9/-/commit/35e3d49d2222c13786a06021c7ed583d2a656e51b]
Hello, That URL is wrong and return a 404 (an extra 'b'?) Can you check please? Can you also check the other URLs of this series? FYI this gitlab instance seem to be under load of bot pressure and I can't reach it right now. I'll also accept https://github.com/isc-projects/bind9/ URLs (official mirror). Regards, -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247099): https://lists.openembedded.org/g/openembedded-core/message/247099 Mute This Topic: https://lists.openembedded.org/mt/121467728/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
