~ubuntu-branches/ubuntu/lucid/bind9/lucid-security : changes

~ubuntu-branches/ubuntu/lucid/bind9/lucid-security » Changes from revision 32

From Revision 32 to 13

Rev	Summary	Authors	Tags	Date
32	* SECURITY UPDATE: denial of service via delegation handling... * SECURITY UPDATE: denial of service via delegation handling defect - limit max recursion in bin/named/config.c, bin/named/query.c, bin/named/server.c, lib/dns/adb.c, lib/dns/include/dns/adb.h, lib/dns/include/dns/resolver.h, lib/dns/resolver.c, lib/export/isc/Makefile.in, lib/isc/Makefile.in, lib/isc/counter.c, lib/isc/include/isc/counter.h, lib/isc/include/isc/Makefile.in, lib/isc/include/isc/types.h, lib/isc/tests/counter_test.c, lib/isccfg/namedconf.c. - Based on patch provided by upstream. - CVE-2014-8500	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.12	9 years ago
31	* SECURITY UPDATE: denial of service when processing NSEC3-s... * SECURITY UPDATE: denial of service when processing NSEC3-signed zone queries - debian/patches/CVE-2014-0591.patch: don't call memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2. - CVE-2014-0591	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.11	10 years ago
30	* SECURITY UPDATE: denial of service via incorrect bounds ch... * SECURITY UPDATE: denial of service via incorrect bounds checking on private type 'keydata' - lib/dns/rdata/generic/keydata_65533.c: check for correct length. - Patch backported from 9.8.5-P2 - CVE-2013-4854	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.10	10 years ago
29	* SECURITY UPDATE: denial of service via regex syntax checki... * SECURITY UPDATE: denial of service via regex syntax checking - configure,configure.in,config.h.in: remove check for regex.h to disable regex syntax checking. - CVE-2013-2266	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.9	11 years ago
28	* SECURITY UPDATE: denial of service via specific combinatio... * SECURITY UPDATE: denial of service via specific combinations of RDATA - bin/named/query.c: fix logic - Patch backported from 9.8.3-P4 - CVE-2012-5166	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.8	11 years ago
27	* SECURITY UPDATE: denial of service via large crafted resou... * SECURITY UPDATE: denial of service via large crafted resource record - check length in lib/dns/include/dns/rdata.h, lib/dns/{master,rdata,rdataslab}.c. - Patch backported from 9.7.6-P3 - CVE-2012-4244	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.7	11 years ago
26	* SECURITY UPDATE: denial of service via dnssec validation l... * SECURITY UPDATE: denial of service via dnssec validation load - lib/dns/resolver.c: don't use bad->expire before it has been set. - Patch backported from 9.7.6-P2. - CVE-2012-3817	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.6	11 years ago
25	* SECURITY UPDATE: ghost domain names attack * SECURITY UPDATE: ghost domain names attack - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that of the old NS RRset when replacing it. - Patch backported from 9.7.5. - CVE-2012-1033 * SECURITY UPDATE: denial of service via zero length rdata handling - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for duplicate rdata. - Patch backported from 9.7.6-P1. - CVE-2012-1667	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.5	11 years ago
24	* SECURITY UPDATE: denial of service via specially crafted p... * SECURITY UPDATE: denial of service via specially crafted packet - bin/named/query.c,lib/dns/rbtdb.c: correctly handle cache lookups that return RRSIG data associated with nonexistent records. - Patch backported from 9.7.4-P1. - CVE-2011-4313	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.4	12 years ago
23	* SECURITY UPDATE: denial of service via specially crafted p... * SECURITY UPDATE: denial of service via specially crafted packet - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache, nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute flag to indicate negative-cache records rather than using rrtype 0. - Patch backported from 9.7.3-P3. - CVE-2011-2464	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.3	12 years ago
22	* SECURITY UPDATE: denial of service via multiple trust anch... * SECURITY UPDATE: denial of service via multiple trust anchors for a single zone - lib/dns/validator.c: fix arguments to dns_keytable_findnextkeynode(). - Upstream change 2869. - CVE-2010-3762 * SECURITY UPDATE: denial of service via off-by-one - lib/dns/ncache.c: correctly validate length. - Patch backported from 9.7.3-P1. - CVE-2011-1910	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.2	12 years ago
21	* SECURITY UPDATE: denial of service via ncache entry and a ... * SECURITY UPDATE: denial of service via ncache entry and a rrsig for the same type - lib/dns/rbtdb.c: properly mark existing RRSIG records as stale. - bin/tests/system/resolver/: added tests. - CVE-2010-3613 SECURITY UPDATE: answers incorrectly marked as insecure during key algorithm rollover - lib/dns/include/dns/types.h, lib/dns/validator.c: improve logic. - bin/tests/system/dnssec/*: added tests. - CVE-2010-3614	Marc Deslauriers	1:9.7.0.dfsg.P1-1ubuntu0.1	13 years ago
20	[Internet Software Consortium, Inc] [Internet Software Consortium, Inc] * 9.7.0-P1 - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]	LaMont Jones	1:9.7.0.dfsg.P1-1	14 years ago
19	[Niko Tyni] [Niko Tyni] * fix mips/mipsel startup. Closes: #516616 [LaMont Jones] * ignore failures due to a lack of /etc/bind/named.conf. LP: #422968 ldap API changed regarding % sign. LP: #227344 * Drop more rfc and draft files. Closes: #572606 * update config.guess, config.sub. Closes: #572528	LaMont Jones	1:9.7.0.dfsg.1-1	14 years ago
18	[Aurelien Jarno] [Aurelien Jarno] * kfreebsd has linux threads. Closes: #470500 [LaMont Jones] * do not error out on initial install. Closes: #572443	LaMont Jones	1:9.7.0.dfsg-2	14 years ago
17	New upstream release New upstream release	LaMont Jones	1:9.7.0.dfsg-1	14 years ago
16	New upstream release. CVE-2010-0097 New upstream release. CVE-2010-0097	LaMont Jones		14 years ago
15	[Internet Software Consortium, Inc] [Internet Software Consortium, Inc] * 9.6.1-P2 - When validating, track whether pending data was from the additional section or not and only return it if validates as secure. [RT #20438] CVE-2009-4022 [LaMont Jones] * prerm: do not stop named on upgrade. Closes: #542888 * Drop some RFCs that crept into the diff. * meta: add ${misc:Depends} * lintian: update config.guess, config.sub in idnkit-1.0 tree * dnsutils: remove pre-sarge dpkg-divert calls in postinst * meta: soname changes * l10n: missing newline in pofile.	LaMont Jones		14 years ago
14	Build-Depend on the fixed libgeoip-dev. Closes: #540973 Build-Depend on the fixed libgeoip-dev. Closes: #540973	LaMont Jones	1:9.6.1.dfsg.P1-3	14 years ago
13	[Internet Software Consortium, Inc] [Internet Software Consortium, Inc] * A specially crafted update packet will cause named to exit. CVE-2009-0696, CERT VU#725188. Closes: #538975 [InterNIC] * Update db.root hints file. [LaMont Jones] * Move default zone definitions from named.conf to named.conf.default-zones. Closes: #492308 * use start-stop-daemon if rndc stop fails. Closes: #536487 * lwresd: pidfile name was wrong in init script. Closes: #527137	LaMont Jones	1:9.6.1.dfsg.P1-1	14 years ago

Older »