#192 Add ms-selfsub and krb5-selfsub match types
Merged 3 years ago by abbra. Opened 3 years ago by abbra.
abbra/bind-dyndb-ldap support-krb5-selfsub  into  master

file modified
+6
@@ -120,6 +120,12 @@ 

  #ifdef DNS_SSUMATCHTYPE_SELFKRB5

  	MATCH("krb5-self", DNS_SSUMATCHTYPE_SELFKRB5);

  #endif

+ 

+ 	/* At least bind 9.11.5 or 9.12.3 is required for it

+ 	 * as these match types are part of CVE-2018-5741 fixes */

+ 	MATCH("ms-selfsub", dns_ssumatchtype_selfsubms);

+ 	MATCH("krb5-selfsub", dns_ssumatchtype_selfsubkrb5);

+ 

  #ifdef DNS_SSUMATCHTYPE_SUBDOMAINMS

  	MATCH("ms-subdomain", DNS_SSUMATCHTYPE_SUBDOMAINMS);

  #endif

Support for ms-selfsub and krb5-selfsub was added in bind as part of the
fix for CVE-2018-5741. As a result, bind versions 9.11.5+ or 9.12.3+ are
required now.

Fixes: https://pagure.io/bind-dyndb-ldap/issue/191

Signed-off-by: Alexander Bokovoy abokovoy@redhat.com

CI tests succeeded against FreeIPA in Fedora 32.

Pull-Request has been merged by abbra

3 years ago
Metadata