This includes the fix for CVE-2018-5738: When recursion is enabled but the allow-recursion and allow-query-cache ACLs are not specified, they should be limited to local networks, but they were inadvertently set to match the default allow-query, thus allowing remote queries. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
13 lines
435 B
Diff
13 lines
435 B
Diff
Index: bind-9.11.5/bin/Makefile.in
|
|
===================================================================
|
|
--- bind-9.11.5.orig/bin/Makefile.in
|
|
+++ bind-9.11.5/bin/Makefile.in
|
|
@@ -12,7 +12,7 @@ VPATH = @srcdir@
|
|
top_srcdir = @top_srcdir@
|
|
|
|
SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \
|
|
- @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests
|
|
+ @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@
|
|
TARGETS =
|
|
|
|
@BIND9_MAKE_RULES@
|