~ubuntu-branches/ubuntu/hardy/bind9/hardy-updates : changes

~ubuntu-branches/ubuntu/hardy/bind9/hardy-updates » Changes from revision 33

From Revision 33 to 14

Rev	Summary	Authors	Tags	Date
33	* SECURITY UPDATE: denial of service via ncache entry and a ... * SECURITY UPDATE: denial of service via ncache entry and a rrsig for the same type - lib/dns/rbtdb.c: properly mark existing RRSIG records as stale. - CVE-2010-3613 * SECURITY UPDATE: answers incorrectly marked as insecure during key algorithm rollover - lib/dns/include/dns/types.h, lib/dns/validator.c: improve logic. - CVE-2010-3614	Marc Deslauriers	1:9.4.2.dfsg.P2-2ubuntu0.6	13 years ago
32	* SECURITY UPDATE: incorrect cache update from additional se... * SECURITY UPDATE: incorrect cache update from additional section - bin/named/query.c, lib/dns/include/dns/types.h, lib/dns/{resolver.c,validator.c}: further fixes backported from 9.4.3-P5 - CVE-2009-4022 * SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses - bin/named/query.c, lib/dns/include/dns/types.h, lib/dns/{resolver.c,validator.c}: fixes backported from 9.4.3-P5 - CVE-2010-0097	Marc Deslauriers	1:9.4.2.dfsg.P2-2ubuntu0.5	14 years ago
31	* SECURITY UPDATE: incorrect cache update from additional se... * SECURITY UPDATE: incorrect cache update from additional section - bin/named/query.c, lib/dns/{include/dns/types.h,masterdump.c, rbtdb.c,resolver.c,validator.c}: handle the additional section properly. lib/dns/api, version: increment versions. - debian/*: increment to libdns36, add libdns35 metapackage so upgrade-manager won't hold the bind9 upgrade back. - CVE-2009-4022	Marc Deslauriers	1:9.4.2.dfsg.P2-2ubuntu0.4	14 years ago
30	* SECURITY UPDATE: server can exit on malicious update packe... * SECURITY UPDATE: server can exit on malicious update packet. - bin/named/update.c: backported upstream fix. - CVE-2009-0696	Kees Cook	1:9.4.2.dfsg.P2-2ubuntu0.2	14 years ago
29	* SECURITY UPDATE: clients treat malformed signatures as goo... * SECURITY UPDATE: clients treat malformed signatures as good when verifying server DSA and ECDSA certificates. - update lib/dns/openssldsa_link.c to properly check the return code of DSA_do_verify() - CVE-2009-0025	Jamie Strandboge	1:9.4.2.dfsg.P2-2ubuntu0.1	15 years ago
28	* apparmor profile: add /var/log/named * apparmor profile: add /var/log/named * dig: add -DDIG_SIGCHASE to compile options. LP: #257682	LaMont Jones	1:9.4.2.dfsg.P2-2	15 years ago
27	* SECURITY UPDATE: Randomize UDP query source ports to impro... * SECURITY UPDATE: Randomize UDP query source ports to improve forgery resilience. * References CVE-2008-1447	LaMont Jones	1:9.4.2-10ubuntu0.1	15 years ago
26	[Jamie Strandboge] [Jamie Strandboge] * debian/bind9.preinst: AA force-complain on upgrade without existing profile. LP: #204658 [LaMont Jones] * host: manpage inaccurately describes default query. LP: #203087	LaMont Jones	1:9.4.2-10	16 years ago
25	* apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind * apparmor: make profile match README.Debian	LaMont Jones	1:9.4.2-9	16 years ago
24	Correct apparmor profile filename. LP: #200739 Correct apparmor profile filename. LP: #200739	LaMont Jones	1:9.4.2-6	16 years ago
23	* incorporate ubuntu apparmor change from Jamie Strandboge, * incorporate ubuntu apparmor change from Jamie Strandboge, with changes: - Add apparmor profile, reload apparmor profile on config - Add a note about apparmor to README.Debian - conflicts/replaces old apparmor versions * db.root: include AAAA RRs. Closes: #464111 * Don't die when /var/lib/bind already exists. LP: #191685 * build: turn on optimization. Closes: #435194	LaMont Jones	1:9.4.2-4	16 years ago
22	* add AppArmor profile * add AppArmor profile + debian/apparmor-profile + debian/bind9.postinst: Reload AA profile on configuration * updated debian/README.Debian for note on AppArmor * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we should now take control * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile * Modify Maintainer value to match the DebianMaintainerField specification.	Jamie Strandboge	1:9.4.2-3ubuntu1	16 years ago
21	* don't run rndc-confgen when it's not there. Closes: #4595... * don't run rndc-confgen when it's not there. Closes: #459551 * control: drop use of ${Source-Version}	LaMont Jones	1:9.4.2-3	16 years ago
20	[Mike O'Connor] [Mike O'Connor] * bind9.init: LSB compliance. Closes: #448006 [Internet Software Consortium, Inc] * New release: 9.4.2 [LaMont Jones] * soname shifts for new release	LaMont Jones	1:9.4.2-1	16 years ago
19	[Thomas Antepoth] [Thomas Antepoth] * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 [LaMont Jones] * document git repositories * db.root: l.root-servers.net changed IP address. Closes: #449148 LP: #160176 * init.d: if there are no networks configured, error out quickly	LaMont Jones	1:9.4.1-P1-4	16 years ago
18	Only deliver upstream changes with bind9-doc Only deliver upstream changes with bind9-doc	LaMont Jones	1:9.4.1-P1-3	16 years ago
17	* manpages: fix typo errors. Closes: #395834 * manpages: fix typo errors. Closes: #395834 * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750 * named.conf.5: correct filename. Closes: #428015 * bind9.NEWS: update version for ACL change doc. Closes: #435225 * build: don't have dnsutils deliver man pages that it shouldn't. LP: #82178 * nslookup.1: some of the manpage was not visible. LP: #131415 * document git repositories * unix/socket.c: don't send to a socket with pending_send. Closes: #430065	LaMont Jones	1:9.4.1-P1-2	16 years ago
16	New upstream version, addresses CVE-2007-2926 and CVE-2007-2... New upstream version, addresses CVE-2007-2926 and CVE-2007-2925	Bdale Garbee	1:9.4.1-P1-1	16 years ago
15	New upstream version New upstream version	LaMont Jones	1:9.4.1-1	17 years ago
14	debian/control: Update maintainer fields according to debian... debian/control: Update maintainer fields according to debian- maintainer-field spec.	Martin Pitt	1:9.3.4-2ubuntu2	17 years ago

Older »