<div dir="ltr"><span style="font-size:12.8px">Thanks Ross.  I was a little overzealous using my history without validating the recipient.  Sorry for the ML noise.</span><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">-Derek </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Jan 24, 2016 at 8:13 AM, Derek Straka <span dir="ltr">&lt;<a href="mailto:derek@asterius.io" target="_blank">derek@asterius.io</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Addresses CVE-2015-8704 and CVE-2015-8705<br>
<br>
CVE-2015-8704<br>
Allows remote authenticated users to cause a denial of service via a malformed Address Prefix List record<br>
<br>
CVE-2015-8705:<br>
When debug loggin is enabled, allows remote attackers to cause a denial of service or have possibly unspecified impact via OPT data or ECS option<br>
<br>
[YOCTO 8966]<br>
<br>
References:<br>
<a href="https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html" rel="noreferrer" target="_blank">https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html</a><br>
<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704" rel="noreferrer" target="_blank">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704</a><br>
<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705" rel="noreferrer" target="_blank">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705</a><br>
---<br>
 .../bind/{<a href="http://bind_9.10.3-P2.bb" rel="noreferrer" target="_blank">bind_9.10.3-P2.bb</a> =&gt; <a href="http://bind_9.10.3-P3.bb" rel="noreferrer" target="_blank">bind_9.10.3-P3.bb</a>}                     | 4 ++--<br>
 1 file changed, 2 insertions(+), 2 deletions(-)<br>
 rename meta/recipes-connectivity/bind/{<a href="http://bind_9.10.3-P2.bb" rel="noreferrer" target="_blank">bind_9.10.3-P2.bb</a> =&gt; <a href="http://bind_9.10.3-P3.bb" rel="noreferrer" target="_blank">bind_9.10.3-P3.bb</a>} (96%)<br>
<br>
diff --git a/meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P2.bb" rel="noreferrer" target="_blank">bind_9.10.3-P2.bb</a> b/meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P3.bb" rel="noreferrer" target="_blank">bind_9.10.3-P3.bb</a><br>
similarity index 96%<br>
rename from meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P2.bb" rel="noreferrer" target="_blank">bind_9.10.3-P2.bb</a><br>
rename to meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P3.bb" rel="noreferrer" target="_blank">bind_9.10.3-P3.bb</a><br>
index 875a0c8..da414c0 100644<br>
--- a/meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P2.bb" rel="noreferrer" target="_blank">bind_9.10.3-P2.bb</a><br>
+++ b/meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P3.bb" rel="noreferrer" target="_blank">bind_9.10.3-P3.bb</a><br>
@@ -23,8 +23,8 @@ SRC_URI = &quot;<a href="ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz" rel="noreferrer" target="_blank">ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz</a> \<br>
            file://0001-lib-dns-gen.c-fix-too-long-error.patch \<br>
            &quot;<br>
<br>
-SRC_URI[md5sum] = &quot;672dd3c2796b12ac8440f55bcaecfa82&quot;<br>
-SRC_URI[sha256sum] = &quot;4a6c1911ac0d4b6be635b63de3429b6c168ea244043f12bbc8a4eb3368fd6ecd&quot;<br>
+SRC_URI[md5sum] = &quot;bcf7e772b616f7259420a3edc5df350a&quot;<br>
+SRC_URI[sha256sum] = &quot;690810d1fbb72afa629e74638d19cd44e28d2b2e5eb63f55c705ad85d1a4cb83&quot;<br>
<br>
 ENABLE_IPV6 = &quot;--enable-ipv6=${@bb.utils.contains(&#39;DISTRO_FEATURES&#39;, &#39;ipv6&#39;, &#39;yes&#39;, &#39;no&#39;, d)}&quot;<br>
 EXTRA_OECONF = &quot; ${ENABLE_IPV6} --with-randomdev=/dev/random --disable-threads \<br>
<span class="HOEnZb"><font color="#888888">--<br>
1.9.1<br>
<br>
</font></span></blockquote></div><br></div>