Open
fix CVE-2023-4408 #324
xuyongliang_01Add on Jun 17
fix CVE-2023-4408 #324
Open
Total: 2 files changed+3146-1
| @@ -19,7 +19,7 @@ Name: bind | |||
| 19 | Summary: Domain Name System (DNS) Server (named) | 19 | Summary: Domain Name System (DNS) Server (named) |
| 20 | License: MPLv2.0 | 20 | License: MPLv2.0 |
| 21 | Version: 9.11.21 | 21 | Version: 9.11.21 |
| 22 | -Release: 24 | 22 | +Release: 25 |
| 23 | Epoch: 32 | 23 | Epoch: 32 |
| 24 | Url: http://www.isc.org/products/BIND/ | 24 | Url: http://www.isc.org/products/BIND/ |
| 25 | Source0: https://ftp.isc.org/isc/bind9/9.11.21/bind-%{version}.tar.gz | 25 | Source0: https://ftp.isc.org/isc/bind9/9.11.21/bind-%{version}.tar.gz |
| @@ -261,6 +261,7 @@ Patch6083:backport-CVE-2026-3039.patch | |||
| 261 | Patch6084:backport-CVE-2026-3592-01.patch | 261 | Patch6084:backport-CVE-2026-3592-01.patch |
| 262 | Patch6085:backport-CVE-2026-3592-02.patch | 262 | Patch6085:backport-CVE-2026-3592-02.patch |
| 263 | Patch6086:backport-CVE-2026-5946.patch | 263 | Patch6086:backport-CVE-2026-5946.patch |
| 264 | +Patch6087:backport-bind-9.11-CVE-2023-4408.patch | ||
| 264 | 265 | ||
| 265 | %description | 266 | %description |
| 266 | Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name | 267 | Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name |
| @@ -565,6 +566,7 @@ cp -a %{SOURCE29} lib/dns/tests/testdata/dstrandom/random.data | |||
| 565 | %patch6084 -p1 | 566 | %patch6084 -p1 |
| 566 | %patch6085 -p1 | 567 | %patch6085 -p1 |
| 567 | %patch6086 -p1 | 568 | %patch6086 -p1 |
| 569 | +%patch6087 -p1 | ||
| 568 | 570 | ||
| 569 | %if %{with PKCS11} | 571 | %if %{with PKCS11} |
| 570 | cp -r bin/named{,-pkcs11} | 572 | cp -r bin/named{,-pkcs11} |
| @@ -1344,6 +1346,12 @@ rm -rf ${RPM_BUILD_ROOT} | |||
| 1344 | 1346 | ||
| 1345 | 1347 | ||
| 1346 | %changelog | 1348 | %changelog |
| 1349 | +* Wed Jun 17 2026 xuyongliang <xuyongliang_yewu@cmss.chinamobile.com> - 32:9.11.21-25 | ||
| 1350 | +- Type:CVE | ||
| 1351 | +- CVE:CVE-2023-4408 | ||
| 1352 | +- SUG:NA | ||
| 1353 | +- DESC:fix CVE-2023-4408 | ||
| 1354 | + | ||
| 1347 | * Fri Jun 05 2026 tangce1 <tangce1@h-partners.com> - 32:9.11.21-24 | 1355 | * Fri Jun 05 2026 tangce1 <tangce1@h-partners.com> - 32:9.11.21-24 |
| 1348 | - Type:CVE | 1356 | - Type:CVE |
| 1349 | - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946 | 1357 | - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946 |