Upgrade bind9 to a version that the above CVEs have been fixed:
bind9-dnsutils_1:9.16.27-1~deb11u1_amd64.deb to
bind9-dnsutils_1:9.16.33-1~deb11u1_amd64.deb
bind9-host_1:9.16.27-1~deb11u1_amd64.deb to
bind9-host_1:9.16.33-1~deb11u1_amd64.deb
bind9-libs_1:9.16.27-1~deb11u1_amd64.deb to
bind9-libs_1:9.16.33-1~deb11u1_amd64.deb
This fix provides the URL of the package in base-bullseye.lst to
make sure that the binary package can be downloaded no matter how
the upstream changes.
Test plan:
PASS: build-pkgs --clean --all && build-image
Reviewed: https:/ /review. opendev. org/c/starlingx /tools/ +/862366 /opendev. org/starlingx/ tools/commit/ b299878b1e77f45 ed8ebb190c0fa8a fd321bad42
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit b299878b1e77f45 ed8ebb190c0fa8a fd321bad42
Author: Wentao Zhang <email address hidden>
Date: Mon Oct 31 08:36:15 2022 +0800
Debian: bind9:fix CVE-2022-2795, CVE-2022-3080, CVE-2022-38177, CVE-2022-38178
Upgrade bind9 to a version that the above CVEs have been fixed: dnsutils_ 1:9.16. 27-1~deb11u1_ amd64.deb to dnsutils_ 1:9.16. 33-1~deb11u1_ amd64.deb host_1: 9.16.27- 1~deb11u1_ amd64.deb to host_1: 9.16.33- 1~deb11u1_ amd64.deb libs_1: 9.16.27- 1~deb11u1_ amd64.deb to libs_1: 9.16.33- 1~deb11u1_ amd64.deb
bind9-
bind9-
bind9-
bind9-
bind9-
bind9-
(Refer to https:/ /www.debian. org/security/ 2022/dsa- 5235)
This fix provides the URL of the package in base-bullseye.lst to
make sure that the binary package can be downloaded no matter how
the upstream changes.
Test plan:
PASS: build-pkgs --clean --all && build-image
Closes-bug: 1994099 db337e0987c698e 13634d36750
Signed-off-by: Wentao Zhang<email address hidden>
Change-Id: I155dc621386339