~nacc/ubuntu/+source/bind9:ubuntu/vivid-security

Last commit made on 2016-01-19
Get this branch:
git clone -b ubuntu/vivid-security https://git.launchpad.net/~nacc/ubuntu/+source/bind9
Only Nish Aravamudan can upload to this branch. If you are Nish Aravamudan please log in for upload directions.

Branch merges

Branch information

Name:
ubuntu/vivid-security
Repository:
lp:~nacc/ubuntu/+source/bind9

Recent commits

3dd1e24... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-9ubuntu0.5 to ubuntu/vivid-security

Imported using usd-importer.

Publish parent: 1f340cf9f3ad7d7ead178e3275d26ff6692bd6cc

New changelog entries:
  * SECURITY UPDATE: denial of service via string formatting operations
    - lib/dns/rdata/in_1/apl_42.c: use correct length.
    - CVE-2015-8704

1f340cf... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-9ubuntu0.4 to ubuntu/vivid-security

Imported using usd-importer.

Publish parent: 88d7cd0da4539412a6217089054113e5b06da294

New changelog entries:
  * SECURITY UPDATE: REQUIRE failure via incorrect class
    - properly handle class in lib/dns/include/dns/message.h,
      lib/dns/message.c, lib/dns/resolver.c, lib/dns/xfrin.c.
    - CVE-2015-8000

88d7cd0... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-9ubuntu0.3 to ubuntu/vivid-security

Imported using usd-importer.

Publish parent: d95190106171db3e908453d459c3c00e35c86c2f

New changelog entries:
  * SECURITY UPDATE: denial of service in DNSSEC-signed record validation
    via malformed keys
    - fix validation inlib/dns/hmac_link.c, lib/dns/include/dst/dst.h,
      lib/dns/ncache.c, lib/dns/openssldh_link.c,
      lib/dns/openssldsa_link.c, lib/dns/opensslecdsa_link.c,
      lib/dns/opensslrsa_link.c, lib/dns/resolver.c.
    - CVE-2015-5722

d951901... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-9ubuntu0.2 to ubuntu/vivid-security

Imported using usd-importer.

Publish parent: e7762323b5ddd44e229d6e5753594ecb6b69d91b

New changelog entries:
  * SECURITY UPDATE: denial of service in TKEY record query handling
    - lib/dns/tkey.c: clear out name before trying the answer section.
    - CVE-2015-5477

e776232... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-9ubuntu0.1 to ubuntu/vivid-security

Imported using usd-importer.

Publish parent: f6b8624043c38b96ae4fe74eba7d58c4722feb0c

New changelog entries:
  * SECURITY UPDATE: resolver DoS via specially crafted zone data
    - lib/dns/validator.c: don't use uninitialized fixedname.
    - CVE-2015-4620

f6b8624... by Michael Gilbert <email address hidden>

Import patches-unapplied version 1:9.9.5.dfsg-9 to ubuntu/vivid

Imported using usd-importer.

Publish parent: 4bc96866d56758548702611ee74b2981d8250c26
Changelog parent: fd649d95fb0a99052c524e8250b0379e4bb25335

fd649d9... by Michael Gilbert <email address hidden>

Import patches-unapplied version 1:9.9.5.dfsg-9 to debian/sid

Imported using usd-importer.

Publish parent: d5e474c77898aa41ffa3cec35f149a72309fa631

New changelog entries:
  * Fix CVE-2015-1349: named crash due to managed key rollover, primarily only
    affecting setups using DNSSEC (closes: #778733).

4bc9686... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-8ubuntu1 to ubuntu/vivid

Imported using usd-importer.

Publish parent: 79fd633cc482eaba2d2039badc6e643538172e46
Changelog parent: 738e3e493a21788052d85197268102e2558337ef

738e3e4... by Marc Deslauriers

Import patches-unapplied version 1:9.9.5.dfsg-8ubuntu1 to ubuntu/vivid-proposed

Imported using usd-importer.

Publish parent: 729397bdb3cdf4876dff6d4c9937f44f843c7314

New changelog entries:
  * SECURITY UPDATE: denial of service via revoking a managed trust anchor
    and supplying an untrusted replacement
    - lib/dns/zone.c: avoid crash due to managed-key rollover
    - Based on patch supplied by Evan Hunt <email address hidden>
    - CVE-2015-1349

79fd633... by Michael Gilbert <email address hidden>

Import patches-unapplied version 1:9.9.5.dfsg-8 to ubuntu/vivid

Imported using usd-importer.

Publish parent: 4e4ab94458afc85136e1f4a50b00a5cfa2bb1f32
Changelog parent: d5e474c77898aa41ffa3cec35f149a72309fa631