lp:ubuntu/quantal/bind9

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

52. By Marc Deslauriers on 2012-10-05

* SECURITY UPDATE: denial of service via specific combinations of RDATA
  - bin/named/query.c: fix logic
  - Patch backported from 9.8.3-P4
  - CVE-2012-5166

51. By Marc Deslauriers on 2012-09-12

* SECURITY UPDATE: denial of service via large crafted resource record
  - check length in lib/dns/include/dns/rdata.h,
    lib/dns/{master,rdata,rdataslab}.c. Added tests to
    lib/dns/tests/Makefile.in, lib/dns/tests/{master,rdata}_test.c,
    lib/dns/tests/testdata/master/master1{5,6}.data.
  - Patch backported from 9.8.3-P3
  - CVE-2012-4244

50. By Marc Deslauriers on 2012-08-20

debian/bind9.apport: Add AppArmor info and logs to apport hook.

49. By Nico Golde <email address hidden> on 2012-07-30

* Non-maintainer upload by the Security Team.
* Fix denial of service vulnerability triggered
  through an assert because of using bad cache
  (CVE-2012-3817; Closes: #683259).

48. By Marc Deslauriers on 2012-07-26

* SECURITY UPDATE: denial of service via dnssec validation load
  - lib/dns/resolver.c: don't use bad->expire before it has been set.
  - Patch backported from 9.8.3-P2.
  - CVE-2012-3817

47. By Marc Deslauriers on 2012-06-20

* SECURITY UPDATE: ghost domain names attack
  - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
    of the old NS RRset when replacing it.
  - Patch backported from 9.8.2.
  - CVE-2012-1033
* SECURITY UPDATE: denial of service via zero length rdata handling
  - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
    duplicate rdata.
  - Patch backported from 9.8.3-P1.
  - CVE-2012-1667

46. By LaMont Jones on 2012-04-13

[Christoph Egger]

* define _GNU_SOURCE on kfreebsd et al. Closes: #658201

[LaMont Jones]

* chmod typo in postinst. LP: #980798
* Correctly order debhelper bits in postrm. Closes: #661040

45. By LaMont Jones on 2012-02-17

[Zlatan Todoric]

* fixed Serbian latin translation of debconf template. Closes: #634951

[Peter Eisentraut]

* Add support for "status" action to lwresd init script. Closes: #651540

[Bjørn Steensrud]

* NB Translations. Closes: #654454

[LaMont Jones]

* Default to run_resolvconf=false. LP: #933723
* Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202
* Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb.
  Closes: #620007 LP: #681536
* Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.
  LP: #929563

44. By LaMont Jones on 2012-01-25

Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202

43. By LaMont Jones on 2012-01-18

[Internet Software Consortium, Inc]

* 9.8.1-P1
  - Cache lookup could return RRSIG data associated with nonexistent
     records, leading to an assertion failure.

[LaMont Jones]

* add a readme entry for DNSSEC-by-default
* Failed to install due to chgrp on non-existant directory. Closes: #647598
* ack NMU: l10n issues