~ubuntu-branches/ubuntu/dapper/bind9/dapper-updates : changes

~ubuntu-branches/ubuntu/dapper/bind9/dapper-updates » Changes from revision 16

From Revision 16

Rev	Summary	Authors	Tags	Date
16	* SECURITY UPDATE: denial of service via ncache entry and a ... * SECURITY UPDATE: denial of service via ncache entry and a rrsig for the same type - lib/dns/rbtdb.c: properly mark existing RRSIG records as stale. Also required backport of change #1997. - CVE-2010-3613 * SECURITY UPDATE: answers incorrectly marked as insecure during key algorithm rollover - lib/dns/include/dns/types.h, lib/dns/validator.c: improve logic. - CVE-2010-3614	Marc Deslauriers	1:9.3.2-2ubuntu1.12	13 years ago
15	* SECURITY UPDATE: incorrect cache update from additional se... * SECURITY UPDATE: incorrect cache update from additional section - bin/named/query.c, lib/dns/include/dns/types.h, lib/dns/{resolver.c,validator.c}: further fixes backported from 9.4.3-P5 - CVE-2009-4022 * SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses - bin/named/query.c, lib/dns/include/dns/types.h, lib/dns/{resolver.c,validator.c}: fixes backported from 9.4.3-P5 - CVE-2010-0097	Marc Deslauriers	1:9.3.2-2ubuntu1.11	14 years ago
14	* SECURITY UPDATE: incorrect cache update from additional se... * SECURITY UPDATE: incorrect cache update from additional section - bin/named/query.c, lib/dns/{include/dns/types.h,masterdump.c, rbtdb.c,resolver.c,validator.c}: handle the additional section properly. lib/dns/api, version: increment versions. - debian/*: increment to libdns23, add libdns21 metapackage so upgrade-manager won't hold the bind9 upgrade back. - CVE-2009-4022	Marc Deslauriers	1:9.3.2-2ubuntu1.9	14 years ago
13	* SECURITY UPDATE: server can exit on malicious update packe... * SECURITY UPDATE: server can exit on malicious update packet. - bin/named/update.c: backported upstream fix. - CVE-2009-0696	Kees Cook	1:9.3.2-2ubuntu1.7	14 years ago
12	* SECURITY UPDATE: clients treat malformed signatures as goo... * SECURITY UPDATE: clients treat malformed signatures as good when verifying server DSA and ECDSA certificates. - update lib/dns/openssldsa_link.c to properly check the return code of DSA_do_verify() - CVE-2009-0025	Jamie Strandboge	1:9.3.2-2ubuntu1.6	15 years ago
11	* SECURITY UPDATE: Randomize UDP query source ports to impro... * SECURITY UPDATE: Randomize UDP query source ports to improve forgery resilience. * References CVE-2008-1447	LaMont Jones	1:9.3.2-2ubuntu1.5	15 years ago
10	* SECURITY UPDATE: query responses could be forged remotely. * SECURITY UPDATE: query responses could be forged remotely. * bin/named/client.c, lib/dispatch.c, lib/include/dispatch.h: upstream fixes back ported. * References CVE-2007-2926	Kees Cook	1:9.3.2-2ubuntu1.3	16 years ago
9	* SECURITY UPDATE: remote denial of service. * SECURITY UPDATE: remote denial of service. * lib/dns/include/dns/validator.h, lib/dns/{validator,resolver}.c, lib/dns/api: fixes taken from upstream changes between bind 9.3.3 and 9.3.4, applied inline. * References CVE-2007-0493 CVE-2007-0494	Kees Cook	1:9.3.2-2ubuntu1.2	17 years ago
8	* SECURITY UPDATE: * SECURITY UPDATE: * bin/named/query.c, lib/dns/resolver.c: Apply upstream patch from 9.3.2-P1 to fix the following flaws: - A remote user (DNS server) can send specially crafted RRset responses in return to a recursive SIG query to cause the requesting named service to crash [CVE-2006-4095]. - A remote user can also send specially crafted queries to trigger an INSIST failure and cause the requesting service(s) to crash [CVE-2006-4096].	Martin Pitt	1:9.3.2-2ubuntu1.1	17 years ago
7	Drop build dependency on g++-3.4 (#292958 was filed for g++-... Drop build dependency on g++-3.4 (#292958 was filed for g++-3.3, fixed in g++-3.4 and up).	Matthias Klose	1:9.3.2-2ubuntu1	18 years ago
6	* correct force-reload. Closes: #333841 * correct force-reload. Closes: #333841 * Fix init.d's usage message. Closes: #331090 * resolvconf tweaks. Closes: #252232, #275412	LaMont Jones	1:9.3.2-2	18 years ago
5	* New upstream * New upstream * use lsb-base for start/stop messages in init.d. * switch to debhelper 4	LaMont Jones	1:9.3.2-1	18 years ago
4	resync with debian resync with debian	LaMont Jones	1:9.3.1-2ubuntu1	19 years ago
3	* Nathaniel McCallum * Nathaniel McCallum - debian/init.d: pretty initscript - debian/control: versioned depend on lsb-base	Thom May	1:9.2.4-1ubuntu1	19 years ago
2	* New upstream version. Closes: #269157 and others. * New upstream version. Closes: #269157 and others. * Version debhelper build-dep. Closes: #262720	LaMont Jones	1:9.2.4-1	19 years ago
1	Import upstream version 9.2.4 Import upstream version 9.2.4	LaMont Jones	upstream-9.2.4	19 years ago