From: "Yoann Congal" <yoann.congal@smile.fr>
To: <hprajapati@mvista.com>, <openembedded-core@lists.openembedded.org>
Subject: Re: [OE-core] [scarthgap][PATCH 1/6] bind: fix for CVE-2026-10723
Date: Fri, 02 Oct 2026 12:22:06 +0200 [thread overview]
Message-ID: <DLUA0IDDMIN2.1WN7ILFAZNFQY@smile.fr> (raw)
In-Reply-To: <20260928071115.304055-1-hprajapati@mvista.com>
On Mon Sep 28, 2026 at 9:11 AM CEST, Hitendra Prajapati via lists.openembedded.org wrote:
> Pick patch from [1], [2] & [3] also mentioned at Debian report in [4]
>
> [1] https://gitlab.isc.org/isc-projects/bind9/-/commit/c9cb6a5e24e43489cf3fd4d4cc2193b6a74499cb
> [2] https://gitlab.isc.org/isc-projects/bind9/-/commit/35e3d49d2222c13786a06021c7ed583d2a656e51
> [3] https://gitlab.isc.org/isc-projects/bind9/-/commit/833dd3b230b92596074e8da15b12298f46c939f2
> [4] https://security-tracker.debian.org/tracker/CVE-2026-10723
>
> Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
> ---
> .../bind/bind/CVE-2026-10723-01.patch | 70 +++
> .../bind/bind/CVE-2026-10723-02.patch | 496 ++++++++++++++++++
> .../bind/bind/CVE-2026-10723-03.patch | 310 +++++++++++
> .../recipes-connectivity/bind/bind_9.18.49.bb | 3 +
> 4 files changed, 879 insertions(+)
> create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2026-10723-01.patch
> create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch
> create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2026-10723-03.patch
> [...]
> diff --git a/meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch b/meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch
> new file mode 100644
> index 0000000000..a3ff47b8bf
> --- /dev/null
> +++ b/meta/recipes-connectivity/bind/bind/CVE-2026-10723-02.patch
> @@ -0,0 +1,496 @@
> +From: Alessio Podda <alessio@isc.org>
> +Date: Wed, 3 Jun 2026 10:42:43 +0200
> +Subject: Reproducer for #5874 NSEC3 impersonation
> +
> +LLM generated.
> +
> +(cherry picked from commit f3e2eb333be3ac636f745aa13cfb8d9ee8af87d8)
> +
> +Origin: https://gitlab.isc.org/isc-projects/bind9/-/commit/35e3d49d2222c13786a06021c7ed583d2a656e51
> +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2026-10723
> +Bug-Freexian-Security: https://deb.freexian.com/extended-lts/tracker/CVE-2026-10723
> +
> +CVE: CVE-2026-10723
> +Upstream-Status: Backport [https://gitlab.isc.org/isc-projects/bind9/-/commit/35e3d49d2222c13786a06021c7ed583d2a656e51b]
Hello,
That URL is wrong and return a 404 (an extra 'b'?)
Can you check please?
Can you also check the other URLs of this series?
FYI this gitlab instance seem to be under load of bot pressure and I
can't reach it right now. I'll also accept
https://github.com/isc-projects/bind9/ URLs (official mirror).
Regards,
--
Yoann Congal
Smile ECS
next prev parent reply other threads:[~2026-10-02 10:22 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-28 7:11 [scarthgap][PATCH 1/6] bind: fix for CVE-2026-10723 Hitendra Prajapati
2026-09-28 7:11 ` [scarthgap][PATCH 2/6] bind: fix for CVE-2026-10822 Hitendra Prajapati
2026-09-28 7:11 ` [scarthgap][PATCH 3/6] bind: fix for CVE-2026-11331 Hitendra Prajapati
2026-09-28 7:11 ` [scarthgap][PATCH 4/6] bind: fix for CVE-2026-11622, CVE-2026-11721 Hitendra Prajapati
2026-09-28 7:11 ` [scarthgap][PATCH 5/6] bind: fix for CVE-2026-12617 Hitendra Prajapati
2026-09-28 7:11 ` [scarthgap][PATCH 6/6] bind: fix for CVE-2026-13204, CVE-2026-13321 Hitendra Prajapati
2026-10-02 10:22 ` Yoann Congal [this message]
2026-10-12 4:39 ` [scarthgap][PATCH 1/6] bind: fix for CVE-2026-10723 Hitendra Prajapati
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=DLUA0IDDMIN2.1WN7ILFAZNFQY@smile.fr \
--to=yoann.congal@smile.fr \
--cc=hprajapati@mvista.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox