ubuntu/+source/bind9:ubuntu/karmic-security

Last commit made on 2010-12-01
Get this branch:
git clone -b ubuntu/karmic-security https://git.launchpad.net/ubuntu/+source/bind9
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/karmic-security
Repository:
lp:ubuntu/+source/bind9

Recent commits

06779fb... by Marc Deslauriers on 2010-11-26

Import patches-unapplied version 1:9.6.1.dfsg.P1-3ubuntu0.4 to ubuntu/karmic-security

Imported using git-ubuntu import.

Changelog parent: 742161e8a40c6b8974f3e697ecd5ff0b5e2ddbb7

New changelog entries:
  * SECURITY UPDATE: denial of service via ncache entry and a rrsig for the
    same type
    - lib/dns/rbtdb.c: properly mark existing RRSIG records as stale.
    - bin/tests/system/resolver/*: added tests.
    - CVE-2010-3613
  * SECURITY UPDATE: answers incorrectly marked as insecure during key
    algorithm rollover
    - lib/dns/include/dns/types.h, lib/dns/validator.c: improve logic.
    - bin/tests/system/dnssec/*: added tests.
    - CVE-2010-3614

742161e... by Marc Deslauriers on 2010-01-19

Import patches-unapplied version 1:9.6.1.dfsg.P1-3ubuntu0.3 to ubuntu/karmic-security

Imported using git-ubuntu import.

Changelog parent: 71a11b872bf0e108921604e0b032b8730a142e68

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: further fixes backported
      from 9.6.1-P3
    - CVE-2009-4022
  * SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses
    - bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
      lib/dns/{rbtdb.c,resolver.c,validator.c}: fixes backported from
      9.6.1-P3
    - CVE-2010-0097

71a11b8... by Marc Deslauriers on 2009-12-04

Import patches-unapplied version 1:9.6.1.dfsg.P1-3ubuntu0.2 to ubuntu/karmic-security

Imported using git-ubuntu import.

Changelog parent: f917bd0789b1d76731246b63d48ae7592309e1fc

New changelog entries:
  * SECURITY UPDATE: incorrect cache update from additional section
    - CHANGES, bin/named/query.c, lib/dns/{include/dns/types.h,
      masterdump.c,rbtdb.c,resolver.c,validator.c}: handle the additional
      section properly. lib/dns/api, version: increment versions.
    - debian/*: increment to libdns53, add libdns50 metapackage so
      upgrade-manager won't hold the bind9 upgrade back.
    - CVE-2009-4022

f917bd0... by LaMont Jones on 2009-08-17

Import patches-unapplied version 1:9.6.1.dfsg.P1-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 8158420ec39aa61c5dd9d63ee2280e9f7b0b4107

New changelog entries:
  * Build-Depend on the fixed libgeoip-dev. Closes: #540973

8158420... by LaMont Jones on 2009-08-14

Import patches-unapplied version 1:9.6.1.dfsg.P1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: f4ee7dadc6ccd986e428e4f2d6bfe7eebd4f336c

New changelog entries:
  [Jamie Strandboge]
  * reload individual named profile, not all of apparmor. LP: #412751
  [Guillaume Delacour]
  * bind9 did not purge cleanly. Closes: #497959
  [LaMont Jones]
  * postinst: do not append a blank line to /etc/default/bind9.
    Closes: #541469
  * init.d stop needs to not error out. LP: #398033
  * meta: fix build-depends. Closes: #539230

f4ee7da... by LaMont Jones on 2009-07-29

Import patches-unapplied version 1:9.6.1.dfsg.P1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: b6ab3480e1f32cdb8fbe9f1861215365e33c1a2b

New changelog entries:
  [Internet Software Consortium, Inc]
  * A specially crafted update packet will cause named to exit.
    CVE-2009-0696, CERT VU#725188. Closes: #538975
  [InterNIC]
  * Update db.root hints file.
  [LaMont Jones]
  * Move default zone definitions from named.conf to named.conf.default-zones.
     Closes: #492308
  * use start-stop-daemon if rndc stop fails. Closes: #536487
  * lwresd: pidfile name was wrong in init script. Closes: #527137

b6ab348... by LaMont Jones on 2009-06-23

Import patches-unapplied version 1:9.6.1.dfsg-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: db3901525bd45349ca782d3b0bfd6df62ef02c60

New changelog entries:
  * ia64: fix atomic.h
  [Internet Software Consortium, Inc]
  * 9.6.1
  [Martin Zobel-Helas]
  * GEO-IP Patch from
    git://git.kernel.org/pub/scm/network/bind/bind-geodns.git. Closes: #395191
  [LaMont Jones]
  * Remove /var/lib/bind on purge. Closes: #527613
  * Build-Depend: libdb-dev (>4.6). Closes: #527877, #528772
  * init.d: detect rndc errors better. LP: #380962
  * init.d: clean up exit status. Closes: #523454
  * Enable pkcs11 support, and then Revert - causes assertion failures
    c.f.: #516552

db39015... by LaMont Jones on 2009-04-23

Import patches-unapplied version 1:9.6.0.dfsg.P1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 5d9f7336cce1f7848af215532b578c4effba362a

New changelog entries:
  * random_1 broke memory usage assertions.

5d9f733... by LaMont Jones on 2009-03-20

Import patches-unapplied version 1:9.6.0.dfsg.P1-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: f5bd4bd772c8c773597d2641ccd7f1371b8e9de6

New changelog entries:
  [Michael Milligan]
  * Add min-cache-ttl and min-ncache-ttl keywords
  [LaMont Jones]

  * Fix merge errors from 9.6.0.dfsg.P1-0
  [Internet Software Consortium, Inc]
  * 9.6.0-P1
  [LaMont Jones]
  * meta: fix override disparity
  * meta: soname package fixups for 9.6.0
  * meta: update Standards-Version: 3.7.3.0
  * upstream now uses a bind subdir. Closes: #212659
  [Sven Joachim]
  * meta: pass host and build into configure for hybrid build machines.
    Closes: #515110

f5bd4bd... by LaMont Jones on 2009-03-18

Import patches-unapplied version 1:9.5.1.dfsg.P1-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 3ea7c21ad8ba9cfc95a68feaea1952b41ddef75e

New changelog entries:
  * package -2 for unstable
  [Juhana Helovuo]
  * fix atomic operations on alpha. Closes: #512285
  [Dann Frazier]
  * fix atomic operations on ia64. Closes: #520179
  [LaMont Jones]
  * build-conflict: libdb4.2-dev. Closes: #515074, #507013
  [localization folks]
  * l10n: Basque debconf template. Closes: #516549 (Piarres Beobide)