| |
@@ -120,6 +120,12 @@
|
| |
#ifdef DNS_SSUMATCHTYPE_SELFKRB5
|
| |
MATCH("krb5-self", DNS_SSUMATCHTYPE_SELFKRB5);
|
| |
#endif
|
| |
+
|
| |
+ /* At least bind 9.11.5 or 9.12.3 is required for it
|
| |
+ * as these match types are part of CVE-2018-5741 fixes */
|
| |
+ MATCH("ms-selfsub", dns_ssumatchtype_selfsubms);
|
| |
+ MATCH("krb5-selfsub", dns_ssumatchtype_selfsubkrb5);
|
| |
+
|
| |
#ifdef DNS_SSUMATCHTYPE_SUBDOMAINMS
|
| |
MATCH("ms-subdomain", DNS_SSUMATCHTYPE_SUBDOMAINMS);
|
| |
#endif
|
| |
Support for ms-selfsub and krb5-selfsub was added in bind as part of the
fix for CVE-2018-5741. As a result, bind versions 9.11.5+ or 9.12.3+ are
required now.
Fixes: https://pagure.io/bind-dyndb-ldap/issue/191
Signed-off-by: Alexander Bokovoy abokovoy@redhat.com