~ddstreet/ubuntu/+source/bind9:lp1710278-x

Last commit made on 2019-07-23
Get this branch:
git clone -b lp1710278-x https://git.launchpad.net/~ddstreet/ubuntu/+source/bind9
Only Dan Streetman can upload to this branch. If you are Dan Streetman please log in for upload directions.

Branch merges

Branch information

Name:
lp1710278-x
Repository:
lp:~ddstreet/ubuntu/+source/bind9

Recent commits

714714f... by Dan Streetman

update changelog

6b90bc5... by Dan Streetman

LP: #1710278 zspill to atomic

eb8b12a... by Dan Streetman

LP: #1710278

fce2ae9... by Marc Deslauriers

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f63a531029d63212075f836c3d00fe764c5975c3

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

f63a531... by Marc Deslauriers

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: ce70edc07011a3590eb933a6f99672ce0d184392

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

ce70edc... by Marc Deslauriers

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.11 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 6dee2fb8e4bc476658bc0ed406ff1715be604e30

New changelog entries:
  * SECURITY UPDATE: denial of service crash when deny-answer-aliases
    option is used
    - debian/patches/CVE-2018-5740.patch: explicit DNAME query could
      trigger a crash if deny-answer-aliases was set
    - CVE-2018-5740

6dee2fb... by Marc Deslauriers

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.10 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 802816e7dd0a9bb29cf3295dbc3e5c08affcc7c4

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

802816e... by Andreas Hasenack

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.9 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: cc1c0c21b3990155234416d1c803fe18049a990e
Upload parent: 79ab6e7438ad26be74098a893717ef8098cdae8b

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

79ab6e7... by Andreas Hasenack

changelog

67d4b7d... by Andreas Hasenack

  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).