From e1230ee0b5171e574838943eb6a4bb79f4d8cba8 Mon Sep 17 00:00:00 2001 From: Betty <38226164+BettyRain@users.noreply.github.com> Date: Fri, 8 Sep 2023 09:48:02 -0700 Subject: [PATCH] Bump the bind version to 9.16.37 to fix CVE-2022-3924, CVE-2022-3094, CVE-2022-3736 (#6195) Bump the bind version to 9.16.37 to fix CVE-2022-3924, CVE-2022-3094, CVE-2022-3736 (#6195) --------- Co-authored-by: Betty Lakes --- SPECS/bind/bind.signatures.json | 2 +- SPECS/bind/bind.spec | 7 +++++-- cgmanifest.json | 4 ++-- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/SPECS/bind/bind.signatures.json b/SPECS/bind/bind.signatures.json index 6ab466cffe..b8ade039d5 100644 --- a/SPECS/bind/bind.signatures.json +++ b/SPECS/bind/bind.signatures.json @@ -14,6 +14,6 @@ "named.sysconfig": "8f8eff846667b7811358e289e9fe594de17d0e47f2b8cebf7840ad8db7f34816", "setup-named-chroot.sh": "786fbc88c7929fadf217cf2286f2eb03b6fba14843e5da40ad43c0022dd71c3a", "setup-named-softhsm.sh": "3b243d9e48577acb95a08ae5dd7288c5eec4830bc02bd29b1f1724c497d12864", - "bind-9.16.33.tar.xz": "ec4fbea4b2e368d1824971509e33fa159224ad14b436034c6bcd46104c328d91" + "bind-9.16.37.tar.xz": "0e4661d522a2fe1f111c1f0685e7d6993d657f81dae24e7a75dbd8db3ef2e2ab" } } \ No newline at end of file diff --git a/SPECS/bind/bind.spec b/SPECS/bind/bind.spec index 74af5b4226..5addea61c0 100644 --- a/SPECS/bind/bind.spec +++ b/SPECS/bind/bind.spec @@ -9,8 +9,8 @@ Summary: Domain Name System software Name: bind -Version: 9.16.33 -Release: 2%{?dist} +Version: 9.16.37 +Release: 1%{?dist} License: ISC Vendor: Microsoft Corporation Distribution: Mariner @@ -615,6 +615,9 @@ fi; %{_mandir}/man8/named-nzd2nzf.8* %changelog +* Thu Sep 07 2023 Betty Lakes - 9.16.37-1 +- Bump the version to 9.16.37 to fix CVE-2022-3924, CVE-2022-3094, CVE-2022-3736 + * Wed Jul 26 2023 Suresh Thelkar - 9.16.33-2 - Patch to fix CVE-2023-2828 diff --git a/cgmanifest.json b/cgmanifest.json index 82e7063f6a..9edede5e7b 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -1087,8 +1087,8 @@ "type": "other", "other": { "name": "bind", - "version": "9.16.33", - "downloadUrl": "https://ftp.isc.org/isc/bind9/9.16.33/bind-9.16.33.tar.xz" + "version": "9.16.37", + "downloadUrl": "https://ftp.isc.org/isc/bind9/9.16.37/bind-9.16.37.tar.xz" } } },