Ubuntu Pastebin

Paste from ahasenack at Thu, 29 Jun 2017 14:44:51 +0000

Download as text
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
Description: Add tests for the rt43779 CVE-2016-8864 regression
 Ubuntu had a patch called rt43779.patch which included a fix for the
 first (of two) CVE-2016-8864 regressions plus tests:
    4530.   [bug]           Change 4489 broke the handling of CNAME -> DNAME
                            in responses resulting in SERVFAIL being returned.
                            [RT #43779]
    (cherry picked from commit 60cb462c56536f307fac4db8bdebf1247e2b5f66)
 Debian also had a patch for this regression, but without the tests. In order
 to keep the tests, but not have a delta against Debian that drops a patch, we
 split the original rt43779.patch into two: CVE-2016-8864.patch, which we can
 then take from Debian as-is, and this CVE-2016-8864-regression-tests.patch
 which has just the tests for that issue.
Download as text