File bind-CVE-2015-1349.patch of Package bind.openSUSE_13.1_Update
Index: bind-9.9.4-P2/lib/dns/zone.c
===================================================================
--- bind-9.9.4-P2.orig/lib/dns/zone.c 2015-07-08 15:58:17.098535220 +0200
+++ bind-9.9.4-P2/lib/dns/zone.c 2015-07-08 17:37:50.868674830 +0200
@@ -8456,6 +8456,12 @@
namebuf, tag);
trustkey = ISC_TRUE;
}
+ } else {
+ /*
+ * No previously known key, and the key is not
+ * secure, so skip it.
+ */
+ continue;
}
/* Delete old version */
@@ -8504,7 +8510,7 @@
trust_key(zone, keyname, &dnskey, mctx);
}
- if (!deletekey)
+ if (secure && !deletekey)
set_refreshkeytimer(zone, &keydata, now);
}