From 1c4b4e99188a11b64ed55a01c7fb923c33adf961 Mon Sep 17 00:00:00 2001 From: "Douglas R. Reno" Date: Mon, 22 Feb 2021 06:53:11 +0000 Subject: [PATCH] Downgrade to BIND-9.16.11, add a security fix Update to stunnel-5.58 Tags git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@24263 af4574ff-66df-0310-9fd7-8a98e5e911e0 --- general.ent | 4 ++-- introduction/welcome/changelog.xml | 15 +++++++++++++++ networking/netprogs/cifsutils.xml | 2 +- networking/netprogs/ncftp.xml | 2 +- networking/netutils/bind-utils.xml | 8 ++++---- networking/netutils/traceroute.xml | 2 +- networking/netutils/whois.xml | 2 +- packages.ent | 4 ++-- postlfs/security/stunnel.xml | 12 ++++++------ server/databases/mariadb.xml | 2 +- server/databases/postgresql.xml | 2 +- server/major/bind.xml | 12 +++++++++--- 12 files changed, 44 insertions(+), 23 deletions(-) diff --git a/general.ent b/general.ent index ec10141877..b342518556 100644 --- a/general.ent +++ b/general.ent @@ -1,12 +1,12 @@ - + - + diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml index f6313bd398..33e63c24c5 100644 --- a/introduction/welcome/changelog.xml +++ b/introduction/welcome/changelog.xml @@ -41,6 +41,21 @@ --> + + February 22nd, 2021 + + + [renodr] - Update to stunnel-5.58. Fixes + #14689. + + + [renodr] - Downgrade to BIND-9.16.11 due to major regressions, + and apply a security fix via a 'sed' instead. Fixes + #14683. + + + + February 21st, 2021 diff --git a/networking/netprogs/cifsutils.xml b/networking/netprogs/cifsutils.xml index 648090b915..fd9ee15b81 100644 --- a/networking/netprogs/cifsutils.xml +++ b/networking/netprogs/cifsutils.xml @@ -34,7 +34,7 @@ mounting SMB/CIFS shares on a Linux system. - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/networking/netprogs/ncftp.xml b/networking/netprogs/ncftp.xml index 207d278895..ec0c03ea8e 100644 --- a/networking/netprogs/ncftp.xml +++ b/networking/netprogs/ncftp.xml @@ -36,7 +36,7 @@ ftp program. - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/networking/netutils/bind-utils.xml b/networking/netutils/bind-utils.xml index 4a167895d5..bb23252f70 100644 --- a/networking/netutils/bind-utils.xml +++ b/networking/netutils/bind-utils.xml @@ -6,9 +6,9 @@ - - - + + + ]> @@ -40,7 +40,7 @@ BIND server, but need these client side applications. - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/networking/netutils/traceroute.xml b/networking/netutils/traceroute.xml index 6a7410751f..7f89b29683 100644 --- a/networking/netutils/traceroute.xml +++ b/networking/netutils/traceroute.xml @@ -45,7 +45,7 @@ - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/networking/netutils/whois.xml b/networking/netutils/whois.xml index 9121c5e6cb..d1c795d811 100644 --- a/networking/netutils/whois.xml +++ b/networking/netutils/whois.xml @@ -38,7 +38,7 @@ expect package in LFS. - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/packages.ent b/packages.ent index ed66affafa..16b8992d7f 100644 --- a/packages.ent +++ b/packages.ent @@ -39,7 +39,7 @@ - + @@ -596,7 +596,7 @@ to avoid building libxml2 twice, which is slow with all deps --> - + diff --git a/postlfs/security/stunnel.xml b/postlfs/security/stunnel.xml index a2fa6f12c6..9562db170e 100644 --- a/postlfs/security/stunnel.xml +++ b/postlfs/security/stunnel.xml @@ -9,10 +9,10 @@ - - - - + + + + ]> @@ -44,7 +44,7 @@ server package source code. - &lfs10_checked; + &lfs101_checked; Package Information @@ -259,7 +259,7 @@ chown stunnel:stunnel /var/lib/stunnel root user: -cat >/etc/stunnel/stunnel.conf << "EOF" +cat > /etc/stunnel/stunnel.conf << "EOF" ; File: /etc/stunnel/stunnel.conf ; Note: The pid and output locations are relative to the chroot location. diff --git a/server/databases/mariadb.xml b/server/databases/mariadb.xml index 95ef8ae460..fe576e3153 100644 --- a/server/databases/mariadb.xml +++ b/server/databases/mariadb.xml @@ -36,7 +36,7 @@ database management system. - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/server/databases/postgresql.xml b/server/databases/postgresql.xml index c2ba924c57..29ee9541d7 100644 --- a/server/databases/postgresql.xml +++ b/server/databases/postgresql.xml @@ -36,7 +36,7 @@ from the Berkeley Postgres database management system. - &lfs10_checked; + &lfs101_checked; Package Information diff --git a/server/major/bind.xml b/server/major/bind.xml index 58b05c1c25..738801d311 100644 --- a/server/major/bind.xml +++ b/server/major/bind.xml @@ -6,8 +6,8 @@ - - + + ]> @@ -35,7 +35,7 @@ to the . - &lfs10_checked; + &lfs101_checked; Package Information @@ -135,6 +135,12 @@ pip3 install ply + + Fix a security vulnerability: + + +sed -i '851 s/len/(len + 1)/' lib/dns/spnego.c + Install BIND by running the following commands: