Open
fix CVE-2023-4408 #271
lff11111Add on Jan 12
fix CVE-2023-4408 #271
Open
Total: 2 files changed+3142-1
| @@ -19,7 +19,7 @@ Name: bind | |||
| 19 | Summary: Domain Name System (DNS) Server (named) | 19 | Summary: Domain Name System (DNS) Server (named) |
| 20 | License: MPLv2.0 | 20 | License: MPLv2.0 |
| 21 | Version: 9.11.21 | 21 | Version: 9.11.21 |
| 22 | -Release: 22 | 22 | +Release: 23 |
| 23 | Epoch: 32 | 23 | Epoch: 32 |
| 24 | Url: http://www.isc.org/products/BIND/ | 24 | Url: http://www.isc.org/products/BIND/ |
| 25 | Source0: https://ftp.isc.org/isc/bind9/9.11.21/bind-%{version}.tar.gz | 25 | Source0: https://ftp.isc.org/isc/bind9/9.11.21/bind-%{version}.tar.gz |
| @@ -255,6 +255,7 @@ Patch6077:backport-CVE-2024-11187.patch | |||
| 255 | Patch6078:backport-bind-9.11-CVE-2023-50387.patch | 255 | Patch6078:backport-bind-9.11-CVE-2023-50387.patch |
| 256 | Patch6079:backport-bind-9.11-CVE-2023-50387-fixup.patch | 256 | Patch6079:backport-bind-9.11-CVE-2023-50387-fixup.patch |
| 257 | Patch6080:backport-CVE-2025-40778.patch | 257 | Patch6080:backport-CVE-2025-40778.patch |
| 258 | +Patch6081:backport-bind-9.11-CVE-2023-4408.patch | ||
| 258 | 259 | ||
| 259 | %description | 260 | %description |
| 260 | Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name | 261 | Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name |
| @@ -552,6 +553,7 @@ cp -a %{SOURCE29} lib/dns/tests/testdata/dstrandom/random.data | |||
| 552 | %patch199 -p1 | 553 | %patch199 -p1 |
| 553 | 554 | ||
| 554 | %patch6080 -p1 | 555 | %patch6080 -p1 |
| 556 | +%patch6081 -p1 | ||
| 555 | 557 | ||
| 556 | %if %{with PKCS11} | 558 | %if %{with PKCS11} |
| 557 | cp -r bin/named{,-pkcs11} | 559 | cp -r bin/named{,-pkcs11} |
| @@ -1331,6 +1333,12 @@ rm -rf ${RPM_BUILD_ROOT} | |||
| 1331 | 1333 | ||
| 1332 | 1334 | ||
| 1333 | %changelog | 1335 | %changelog |
| 1336 | +* Mon Jan 12 2026 lifeifei <lifeifei@kylinos.cn> - 32:9.11.21-23 | ||
| 1337 | +- Type:CVE | ||
| 1338 | +- CVE:CVE-2023-4408 | ||
| 1339 | +- SUG:NA | ||
| 1340 | +- DESC:fix CVE-2023-4408 | ||
| 1341 | + | ||
| 1334 | * Mon Nov 10 2025 liyunqing <liyunqing@kylinos.cn> - 32:9.11.21-22 | 1342 | * Mon Nov 10 2025 liyunqing <liyunqing@kylinos.cn> - 32:9.11.21-22 |
| 1335 | - Type:CVE | 1343 | - Type:CVE |
| 1336 | - CVE:CVE-2025-40778 | 1344 | - CVE:CVE-2025-40778 |