bind: bump to 9.16.27
authorNoah Meyerhans <frodo@morgul.net>
Fri, 18 Mar 2022 17:11:08 +0000 (10:11 -0700)
committerNoah Meyerhans <frodo@morgul.net>
Fri, 18 Mar 2022 17:39:38 +0000 (10:39 -0700)
commite8dc42753c64942d5817d8ca2a3553f55e202a8e
treea75541f2754d5fc24b13920dbe317746509dff7f
parent17e7ca6e2e66c6e591588aba7249dd7396b876f5
bind: bump to 9.16.27

Fixes security issues:

 * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
isc__nm_process_sock_buffer() to be called recursively,
which in turn left TCP connections hanging in the
CLOSE_WAIT state blocking indefinitely when
out-of-order processing was disabled.

 * CVE-2021-25220 -- The rules for acceptance of records into the cache
have been tightened to prevent the possibility of
poisoning if forwarders send records outside
the configured bailiwick.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
net/bind/Makefile
net/bind/patches/001-no-tests.patch