~nacc/ubuntu/+source/bind9:ubuntu/jaunty-security

Last commit made on 2010-01-20
Get this branch:
git clone -b ubuntu/jaunty-security https://git.launchpad.net/~nacc/ubuntu/+source/bind9
Only Nish Aravamudan can upload to this branch. If you are Nish Aravamudan please log in for upload directions.

Branch merges

Branch information

Name:
ubuntu/jaunty-security
Repository:
lp:~nacc/ubuntu/+source/bind9

Recent commits

2b5a4a1... by Marc Deslauriers

Import patches-unapplied version 1:9.5.1.dfsg.P2-1ubuntu0.4 to ubuntu/jaunty-security

Imported using usd-importer.

Publish parent: e728e09208b1563d7bf1bd837fb54f0aaa4dabc9

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: further fixes backported
      from 9.5.2-P2
    - CVE-2009-4022
  * SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: fixes backported from
      9.5.2-P2
    - CVE-2010-0097

e728e09... by Marc Deslauriers

Import patches-unapplied version 1:9.5.1.dfsg.P2-1ubuntu0.3 to ubuntu/jaunty-security

Imported using usd-importer.

Publish parent: f5e3b979351d2237e7722d84225f9108144e4eca

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - bin/named/query.c, lib/dns/{include/dns/types.h,masterdump.c,
      rbtdb.c,resolver.c,validator.c}: handle the additional section
      properly. lib/dns/api, version: increment versions.
    - debian/*: increment to libdns46, add libdns45 metapackage so
      upgrade-manager won't hold the bind9 upgrade back.
    - CVE-2009-4022

f5e3b97... by Kees Cook

Import patches-unapplied version 1:9.5.1.dfsg.P2-1ubuntu0.1 to ubuntu/jaunty-security

Imported using usd-importer.

Publish parent: ec4d9e91ed70e9c95e0f2c9d47744cd5d1a865c1

New changelog entries:
  * SECURITY UPDATE: server can exit on malicious update packet.
    - bin/named/update.c: backported upstream fix.
    - CVE-2009-0696

ec4d9e9... by LaMont Jones

Import patches-unapplied version 1:9.5.1.dfsg.P2-1 to ubuntu/jaunty

Imported using usd-importer.

Publish parent: 31cefd684562034d1b061d7179930ed7bac9fdff
Changelog parent: 68c481b91b6b7ee6be0be7b4e9bdfd6bdc509e1d

68c481b... by LaMont Jones

Import patches-unapplied version 1:9.5.1.dfsg.P2-1 to debian/sid

Imported using usd-importer.

Publish parent: 50c7ef90043c4cce99967134f22e80f30c349d98

New changelog entries:
  [Internet Software Consortium, Inc]
  * 9.5.1-P2
    - DNSSEC lookaside validation failed to handle unknown algorithms. [RT #19479]
  [LaMont Jones]
  * meta: fix override disparity
  [Sven Joachim]
  * meta: pass host and build into configure for hybrid build machines.
    Closes: #515110

50c7ef9... by LaMont Jones

Import patches-unapplied version 1:9.5.1.dfsg.P1-3 to debian/sid

Imported using usd-importer.

Publish parent: e7a51f755a4322acce1067b07ca1ab6209d9bc8f

New changelog entries:
  * package -2 for unstable
  [Juhana Helovuo]
  * fix atomic operations on alpha. Closes: #512285
  [Dann Frazier]
  * fix atomic operations on ia64. Closes: #520179
  [LaMont Jones]
  * build-conflict: libdb4.2-dev. Closes: #515074, #507013
  [localization folks]
  * l10n: Basque debconf template. Closes: #516549 (Piarres Beobide)

31cefd6... by LaMont Jones

Import patches-unapplied version 1:9.5.1.dfsg.P1-1 to ubuntu/jaunty

Imported using usd-importer.

Publish parent: 862a878d01404f422fe78fcabe895549a8791172
Changelog parent: e7a51f755a4322acce1067b07ca1ab6209d9bc8f

e7a51f7... by LaMont Jones

Import patches-unapplied version 1:9.5.1.dfsg.P1-1 to debian/sid

Imported using usd-importer.

Publish parent: a825c568c1723360ed237c84386d1f5a3843d0f9

New changelog entries:
  * New upstream patch release
    - supportable version of fix from 9.5.0.dfsg.P2-5.1
    - CVE-2009-0025: Closes: #511936
    - 2475: Overly agressive cache entry removal. Closes: #511768
    - other bug fixes worthy of patch-release inclusion

862a878... by Jamie Strandboge

Import patches-unapplied version 1:9.5.0.dfsg.P2-5ubuntu1 to ubuntu/jaunty

Imported using usd-importer.

Publish parent: 258b4156d8cd7a20cc0951f188c03e9af059423f

New changelog entries:
  * SECURITY UPDATE: clients treat malformed signatures as good when verifying
    server DSA and ECDSA certificates.
    - update lib/dns/openssldsa_link.c to properly check the return code of
      DSA_do_verify()
    - CVE-2009-0025

a825c56... by Ben Hutchings

Import patches-unapplied version 1:9.5.0.dfsg.P2-5.1 to debian/sid

Imported using usd-importer.

Publish parent: 55a029e40320b75eef1f1995be82cdd2e43e22cc

New changelog entries:
  * Non-maintainer upload.
  * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided
    by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot
    contacted him. Closes: #496954, #501800.
  * Remove obsolete dh_installmanpages invocation which was adding
    unwanted manual pages to bind9. Closes: #486196.