~nacc/ubuntu/+source/bind9:applied/ubuntu/karmic-security

Last commit made on 2010-12-01
Get this branch:
git clone -b applied/ubuntu/karmic-security https://git.launchpad.net/~nacc/ubuntu/+source/bind9
Only Nish Aravamudan can upload to this branch. If you are Nish Aravamudan please log in for upload directions.

Branch merges

Branch information

Name:
applied/ubuntu/karmic-security
Repository:
lp:~nacc/ubuntu/+source/bind9

Recent commits

be71e7b... by Marc Deslauriers

Import patches-applied version 1:9.6.1.dfsg.P1-3ubuntu0.4 to applied/ubuntu/karmic-security

Imported using usd-importer.

Publish parent: 558fb6e51db0d5e3054099e4f441e3b37619425b
Unapplied parent: 0f028fb97eed7a0f70f86e832ac2bfece85d9491

New changelog entries:
  * SECURITY UPDATE: denial of service via ncache entry and a rrsig for the
    same type
    - lib/dns/rbtdb.c: properly mark existing RRSIG records as stale.
    - bin/tests/system/resolver/*: added tests.
    - CVE-2010-3613
  * SECURITY UPDATE: answers incorrectly marked as insecure during key
    algorithm rollover
    - lib/dns/include/dns/types.h, lib/dns/validator.c: improve logic.
    - bin/tests/system/dnssec/*: added tests.
    - CVE-2010-3614

0f028fb... by Marc Deslauriers

Import patches-unapplied version 1:9.6.1.dfsg.P1-3ubuntu0.4 to ubuntu/karmic-security

Imported using usd-importer.

Publish parent: 1deaeda9d079c6f93ddd6d8fbc99db74a49a6d98

New changelog entries:
  * SECURITY UPDATE: denial of service via ncache entry and a rrsig for the
    same type
    - lib/dns/rbtdb.c: properly mark existing RRSIG records as stale.
    - bin/tests/system/resolver/*: added tests.
    - CVE-2010-3613
  * SECURITY UPDATE: answers incorrectly marked as insecure during key
    algorithm rollover
    - lib/dns/include/dns/types.h, lib/dns/validator.c: improve logic.
    - bin/tests/system/dnssec/*: added tests.
    - CVE-2010-3614

558fb6e... by Marc Deslauriers

Import patches-applied version 1:9.6.1.dfsg.P1-3ubuntu0.3 to applied/ubuntu/karmic-security

Imported using usd-importer.

Publish parent: 9d5a8b10a1dc7fca85c7ee223a96a2c42a4347c2
Unapplied parent: 1deaeda9d079c6f93ddd6d8fbc99db74a49a6d98

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: further fixes backported
      from 9.6.1-P3
    - CVE-2009-4022
  * SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: fixes backported from
      9.6.1-P3
    - CVE-2010-0097

1deaeda... by Marc Deslauriers

Import patches-unapplied version 1:9.6.1.dfsg.P1-3ubuntu0.3 to ubuntu/karmic-security

Imported using usd-importer.

Publish parent: baf3a9f861c70b9bbe95a0cc9a0b400c12e2f2c0

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: further fixes backported
      from 9.6.1-P3
    - CVE-2009-4022
  * SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: fixes backported from
      9.6.1-P3
    - CVE-2010-0097

9d5a8b1... by Marc Deslauriers

Import patches-applied version 1:9.6.1.dfsg.P1-3ubuntu0.2 to applied/ubuntu/karmic-security

Imported using usd-importer.

Changelog parent: b24d1175e7b3dcf276b5cf04ab44be2bbdd1429a
Unapplied parent: baf3a9f861c70b9bbe95a0cc9a0b400c12e2f2c0

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - CHANGES, bin/named/query.c, lib/dns/{include/dns/types.h,
      masterdump.c,rbtdb.c,resolver.c,validator.c}: handle the additional
      section properly. lib/dns/api, version: increment versions.
    - debian/*: increment to libdns53, add libdns50 metapackage so
      upgrade-manager won't hold the bind9 upgrade back.
    - CVE-2009-4022

baf3a9f... by Marc Deslauriers

Import patches-unapplied version 1:9.6.1.dfsg.P1-3ubuntu0.2 to ubuntu/karmic-security

Imported using usd-importer.

Publish parent: a6d5c4f1aa06e668b466870d5aea892e063ba031

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - CHANGES, bin/named/query.c, lib/dns/{include/dns/types.h,
      masterdump.c,rbtdb.c,resolver.c,validator.c}: handle the additional
      section properly. lib/dns/api, version: increment versions.
    - debian/*: increment to libdns53, add libdns50 metapackage so
      upgrade-manager won't hold the bind9 upgrade back.
    - CVE-2009-4022

a6d5c4f... by LaMont Jones

Import patches-unapplied version 1:9.6.1.dfsg.P1-3 to ubuntu/karmic

Imported using usd-importer.

Publish parent: 14cfe759174f0b462498be066e388305262d820f
Changelog parent: c2775f4832b051bb9d6268d83fbb99d87a3d229c

b24d117... by LaMont Jones

Import patches-applied version 1:9.6.1.dfsg.P1-3 to applied/debian/sid

Imported using usd-importer.

Publish parent: 30e40fb34e3e9fa016639c9441b883bbc35ad36c
Unapplied parent: c2775f4832b051bb9d6268d83fbb99d87a3d229c

New changelog entries:
  * Build-Depend on the fixed libgeoip-dev. Closes: #540973

c2775f4... by LaMont Jones

Import patches-unapplied version 1:9.6.1.dfsg.P1-3 to debian/sid

Imported using usd-importer.

Publish parent: a9c75a11201e0ea26c87975fa85a6a47a24c34dc

New changelog entries:
  * Build-Depend on the fixed libgeoip-dev. Closes: #540973

30e40fb... by LaMont Jones

Import patches-applied version 1:9.6.1.dfsg.P1-2 to applied/debian/sid

Imported using usd-importer.

Publish parent: 70b1bb090d813e84a124cd073427573ba55d05e8
Unapplied parent: a9c75a11201e0ea26c87975fa85a6a47a24c34dc

New changelog entries:
  [Jamie Strandboge]
  * reload individual named profile, not all of apparmor. LP: #412751
  [Guillaume Delacour]
  * bind9 did not purge cleanly. Closes: #497959
  [LaMont Jones]
  * postinst: do not append a blank line to /etc/default/bind9.
    Closes: #541469
  * init.d stop needs to not error out. LP: #398033
  * meta: fix build-depends. Closes: #539230