Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-18 Thread Adrian Bunk
On Thu, Nov 14, 2019 at 01:16:44PM +, Ross Burton wrote: > On 14/11/2019 12:51, Adrian Bunk wrote: > > On Thu, Nov 14, 2019 at 12:04:40PM +, Ross Burton wrote: > > > On 13/11/2019 08:19, Adrian Bunk wrote: > > > > +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using > >

Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-17 Thread akuster808
On 11/15/19 1:46 PM, Adrian Bunk wrote: > On Thu, Nov 14, 2019 at 07:18:28AM -0800, akuster808 wrote: >> >> On 11/14/19 4:51 AM, Adrian Bunk wrote: >>> On Thu, Nov 14, 2019 at 12:04:40PM +, Ross Burton wrote: On 13/11/2019 08:19, Adrian Bunk wrote: > +# Affects: Builds of dhcpd

Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-15 Thread Adrian Bunk
On Thu, Nov 14, 2019 at 07:18:28AM -0800, akuster808 wrote: > > > On 11/14/19 4:51 AM, Adrian Bunk wrote: > > On Thu, Nov 14, 2019 at 12:04:40PM +, Ross Burton wrote: > >> On 13/11/2019 08:19, Adrian Bunk wrote: > >>> +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using >

Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-14 Thread akuster808
On 11/14/19 4:51 AM, Adrian Bunk wrote: > On Thu, Nov 14, 2019 at 12:04:40PM +, Ross Burton wrote: >> On 13/11/2019 08:19, Adrian Bunk wrote: >>> +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND >>> versions 9.11.2 or later >>> +CVE_CHECK_WHITELIST +=

Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-14 Thread Ross Burton
On 14/11/2019 12:51, Adrian Bunk wrote: On Thu, Nov 14, 2019 at 12:04:40PM +, Ross Burton wrote: On 13/11/2019 08:19, Adrian Bunk wrote: +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later +CVE_CHECK_WHITELIST += "CVE-2019-6470" Can you

Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-14 Thread Adrian Bunk
On Thu, Nov 14, 2019 at 12:04:40PM +, Ross Burton wrote: > On 13/11/2019 08:19, Adrian Bunk wrote: > > +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND > > versions 9.11.2 or later > > +CVE_CHECK_WHITELIST += "CVE-2019-6470" > > Can you be a bit more explicit about

Re: [OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-14 Thread Ross Burton
On 13/11/2019 08:19, Adrian Bunk wrote: +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later +CVE_CHECK_WHITELIST += "CVE-2019-6470" Can you be a bit more explicit about why this is whitelisted? Ross --

[OE-core] [PATCH] bind: Whitelist CVE-2019-6470

2019-11-13 Thread Adrian Bunk
Signed-off-by: Adrian Bunk --- meta/recipes-connectivity/bind/bind_9.11.5-P4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-connectivity/bind/bind_9.11.5-P4.bb b/meta/recipes-connectivity/bind/bind_9.11.5-P4.bb index 3e2412dfa4..0a52a66144 100644 ---