[OE-core] [PATCH][fido] bind: CVE-2016-1285 CVE-2016-1286

Sona Sarmadi sona.sarmadi at enea.com
Tue Apr 12 11:11:47 UTC 2016


I guess you need this patch: https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=patch;h=a078c9eeae8c2db7edf2b15ff1d25a3a297c751

Can I send you a new patch or can you add this? 


> Unfortunately I can't build bind with this patch applied:
> 
> | cc.c: In function 'verify':
> | cc.c:293:27: error: 'hmac' undeclared (first use in this function)
> |   if (!isccc_sexpr_binaryp(hmac))
> |                            ^
> | cc.c:293:27: note: each undeclared identifier is reported only once
> for each function it appears in
> | make[2]: *** [cc.o] Error 1
> 
> Based on a quick skim read of the patches I think this is caused by CVE-
> 2016-1285.patch:
> 



More information about the Openembedded-core mailing list