From 3cd24d0c0a57de85e1d4127c363db2506de1c961 Mon Sep 17 00:00:00 2001
From: Petr Menšík <pemensik@redhat.com>
Date: Jan 18 2018 16:57:05 +0000
Subject: Fix CVE-2017-3145, rebase to 9.11.2-P1


Signed-off-by: Petr Menšík <pemensik@redhat.com>

---

diff --git a/.gitignore b/.gitignore
index 9a356ad..ad0da8a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -75,3 +75,4 @@ bind-9.7.2b1.tar.gz
 /bind-9.11.1-P1.tar.gz
 /bind-9.11.1-P2.tar.gz
 /bind-9.11.1-P3.tar.gz
+/bind-9.11.2-P1.tar.gz
diff --git a/bind.spec b/bind.spec
index 3ffd140..d196c54 100644
--- a/bind.spec
+++ b/bind.spec
@@ -2,7 +2,7 @@
 # Red Hat BIND package .spec file
 #
 
-%global PATCHVER P3
+%global PATCHVER P1
 #%%global PREVER rc1
 %global BINDVERSION %{version}%{?PREVER}%{?PATCHVER:-%{PATCHVER}}
 
@@ -24,8 +24,8 @@
 Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
 Name:     bind
 License:  MPLv2.0
-Version:  9.11.1
-Release:  5%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
+Version:  9.11.2
+Release:  1%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -846,7 +846,7 @@ rm -rf ${RPM_BUILD_ROOT}
 
 %files libs-lite
 %defattr(-,root,root,-)
-%{_libdir}/libdns.so.168*
+%{_libdir}/libdns.so.169*
 %{_libdir}/libirs.so.160*
 %{_libdir}/libisc.so.166*
 %{_libdir}/libisccfg.so.160*
@@ -1011,7 +1011,7 @@ rm -rf ${RPM_BUILD_ROOT}
 
 %files pkcs11-libs
 %defattr(-,root,root,-)
-%{_libdir}/libdns-pkcs11.so.168*
+%{_libdir}/libdns-pkcs11.so.169*
 %{_libdir}/libisc-pkcs11.so.166*
 
 %files pkcs11-devel
@@ -1029,6 +1029,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %{python3_sitelib}/isc/
 
 %changelog
+* Thu Jan 18 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1.P1
+- Fix CVE-2017-3145, rebase to 9.11.2-P1
+
 * Wed Jan 10 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-5.P3
 - Proper fix for python3-bind subpackage directory ownership (#1522944)
 
diff --git a/sources b/sources
index f808568..95b4bc9 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-9.11.1-P3.tar.gz) = bf92ce1e07e5c84cc42b413bdbd3ad97f37712a6dc330dc10182992d948b7a393d5446efa188379b39020c34d810cebe2a7acccc9b8aa6bb564e1f3e6be42e96
+SHA512 (bind-9.11.2-P1.tar.gz) = 168f27f580e3be2f7ada27afa2f72e715e750eec76831cf01bd32fabc1fa65dc29dab0eb7ed1682b076d3be99269897ddbc2c10551631a3911d9e5ae1aa40597
 SHA512 (config-16.tar.bz2) = 983e0a8de3bb0c16fb21331894cc97ea516233796158eb5d1c932608227b31889496d0467c3e43953bf504dbf8b5f19210d2c9f8e0e3742aea2c7609245bf3f7