-
fce2ae9...
by
Marc Deslauriers
on 2019-04-24
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: f63a531029d63212075f836c3d00fe764c5975c3
New changelog entries:
* SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
- debian/patches/CVE-2018-5743.patch: add reference counting in
bin/named/client.c, bin/named/include/named/client.h,
bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
lib/isc/include/isc/quota.h, lib/isc/quota.c,
lib/isc/win32/libisc.def.in.
- debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
operations with isc_refcount reference counting in
bin/named/client.c, bin/named/include/named/interfacemgr.h,
bin/named/interfacemgr.c.
- CVE-2018-5743
-
f63a531...
by
Marc Deslauriers
on 2019-02-20
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: ce70edc07011a3590eb933a6f99672ce0d184392
New changelog entries:
* SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
unsupported key algorithm when using managed-keys
- debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
lib/dns/zone.c,
- debian/patches/CVE-2018-5745.patch: properly handle situations when
the key tag cannot be computed in lib/dns/include/dst/dst.h,
lib/dns/zone.c.
- CVE-2018-5745
* SECURITY UPDATE: Controls for zone transfers may not be properly
applied to Dynamically Loadable Zones (DLZs) if the zones are writable
- debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
the zone table as a DLZ zone bin/named/xfrout.c.
- CVE-2019-6465
-
ce70edc...
by
Marc Deslauriers
on 2018-09-19
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.11 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: 6dee2fb8e4bc476658bc0ed406ff1715be604e30
New changelog entries:
* SECURITY UPDATE: denial of service crash when deny-answer-aliases
option is used
- debian/patches/CVE-2018-5740.patch: explicit DNAME query could
trigger a crash if deny-answer-aliases was set
- CVE-2018-5740
-
6dee2fb...
by
Marc Deslauriers
on 2018-01-16
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.10 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: 802816e7dd0a9bb29cf3295dbc3e5c08affcc7c4
New changelog entries:
* SECURITY UPDATE: assertion failure via improper cleanup
- debian/patches/CVE-2017-3145.patch: fix cleanup handling in
lib/dns/resolver.c.
- CVE-2017-3145
-
802816e...
by
Andreas Hasenack
on 2017-11-06
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.9 to ubuntu/xenial-proposed
Imported using git-ubuntu import.
Changelog parent: cc1c0c21b3990155234416d1c803fe18049a990e
Upload parent: 79ab6e7438ad26be74098a893717ef8098cdae8b
New changelog entries:
* d/bind9.service: source the defaults file and start the daemon with the
options set there (LP: #1565060).
-
79ab6e7...
by
Andreas Hasenack
on 2017-11-06
-
changelog
-
67d4b7d...
by
Andreas Hasenack
on 2017-11-06
-
* d/bind9.service: source the defaults file and start the daemon with the
options set there (LP: #1565060).
-
cc1c0c2...
by
Marc Deslauriers
on 2017-09-15
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.8 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: 7744d0657bed6e7aaf6275179e0b032eeb5b29bd
New changelog entries:
* SECURITY REGRESSION: regression in last security update
- debian/patches/CVE-2017-3142-regression.patch: fix verification of
TSIG signed TCP message sequences where not all the messages contain
TSIG records in lib/dns/tsig.c, aded test to
lib/dns/tests/Makefile.in, lib/dns/tests/tsig_test.c.
* debian/patches/update_keys.patch: Update the built in managed keys to
include the upcoming root KSK in bind.keys, bind.keys.h.
-
da88765...
by
Marc Deslauriers
on 2017-09-15
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.8 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: 627768fe0cfa3484fef4a17dbd798aae4350b726
New changelog entries:
* SECURITY REGRESSION: regression in last security update
- debian/patches/CVE-2017-3142-regression.patch: fix verification of
TSIG signed TCP message sequences where not all the messages contain
TSIG records in lib/dns/tsig.c, aded test to
lib/dns/tests/Makefile.in, lib/dns/tests/tsig_test.c.
* debian/patches/update_keys.patch: Update the built in managed keys to
include the upcoming root KSK in bind.keys, bind.keys.h.
-
7744d06...
by
Marc Deslauriers
on 2017-06-29
-
Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.7 to ubuntu/xenial-security
Imported using git-ubuntu import.
Changelog parent: eb6fd53d13e1a6973b99f0f5df0e027baf295cf6
New changelog entries:
* SECURITY UPDATE: TSIG authentication issues
- debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
- CVE-2017-3142
- CVE-2017-3143
