lp:ubuntu/wily-proposed/bind9

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

79. By Marc Deslauriers on 2015-09-01

* SECURITY UPDATE: denial of service in DNSSEC-signed record validation
  via malformed keys
  - fix validation inlib/dns/hmac_link.c, lib/dns/include/dst/dst.h,
    lib/dns/ncache.c, lib/dns/openssldh_link.c,
    lib/dns/openssldsa_link.c, lib/dns/opensslecdsa_link.c,
    lib/dns/opensslrsa_link.c, lib/dns/resolver.c.
  - CVE-2015-5722

78. By Michael Gilbert <email address hidden> on 2015-07-29

Fix CVE-2015-5477: maliciously crafted TKEY query can cause named to exit
(closes: #793903).

77. By Marc Deslauriers on 2015-07-27

* SECURITY UPDATE: denial of service in TKEY record query handling
  - lib/dns/tkey.c: clear out name before trying the answer section.
  - CVE-2015-5477

76. By Michael Gilbert <email address hidden> on 2015-07-09

Fix CVE-2015-4620: DNSSEC validation of a malicously crafted zone can
cause the resolver to crash (closes: #791715).

75. By Marc Deslauriers on 2015-06-29

* SECURITY UPDATE: resolver DoS via specially crafted zone data
  - lib/dns/validator.c: don't use uninitialized fixedname.
  - CVE-2015-4620

74. By Michael Gilbert <email address hidden> on 2015-02-19

Fix CVE-2015-1349: named crash due to managed key rollover, primarily only
affecting setups using DNSSEC (closes: #778733).

73. By Marc Deslauriers on 2015-02-18

* SECURITY UPDATE: denial of service via revoking a managed trust anchor
  and supplying an untrusted replacement
  - lib/dns/zone.c: avoid crash due to managed-key rollover
  - Based on patch supplied by Evan Hunt <email address hidden>
  - CVE-2015-1349

72. By Michael Gilbert <email address hidden> on 2015-01-01

Launch rndc command in the background in networking scripts to avoid a
hang in named from bringing down the entire network (closes: #760555).

71. By Marc Deslauriers on 2014-12-09

* SECURITY UPDATE: denial of service via delegation handling defect
  - limit max recursion in bin/named/config.c, bin/named/query.c,
    bin/named/server.c, lib/dns/adb.c, lib/dns/include/dns/adb.h,
    lib/dns/include/dns/resolver.h, lib/dns/resolver.c,
    lib/export/isc/Makefile.in, lib/isc/counter.c,
    lib/isc/include/isc/counter.h, lib/isc/include/isc/Makefile.in,
    lib/isc/include/isc/types.h, lib/isc/Makefile.in,
    lib/isc/tests/counter_test.c, lib/isc/tests/Makefile.in,
    lib/isccfg/namedconf.c.
  - Patch extracted from 9.9.6-P1.
  - CVE-2014-8500

70. By Michael Gilbert <email address hidden> on 2014-11-30

Include dlz_dlopen.h in libbind-dev (closes: #769117).