~ubuntu-branches/ubuntu/oneiric/bind9/oneiric-security : changes

~ubuntu-branches/ubuntu/oneiric/bind9/oneiric-security » Changes from revision 46

From Revision 46 to 27

Rev	Summary	Authors	Tags	Date
46	* SECURITY UPDATE: denial of service via regex syntax checki... * SECURITY UPDATE: denial of service via regex syntax checking - configure,configure.in,config.h.in: remove check for regex.h to disable regex syntax checking. - CVE-2013-2266	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu4.6	11 years ago
45	* SECURITY UPDATE: denial of service via specific combinatio... * SECURITY UPDATE: denial of service via specific combinations of RDATA - bin/named/query.c: fix logic - Patch backported from 9.8.3-P4 - CVE-2012-5166	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu4.5	11 years ago
44	* SECURITY UPDATE: denial of service via large crafted resou... * SECURITY UPDATE: denial of service via large crafted resource record - check length in lib/dns/include/dns/rdata.h, lib/dns/{master,rdata,rdataslab}.c. - Patch backported from 9.7.6-P3 - CVE-2012-4244	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu4.4	11 years ago
43	* SECURITY UPDATE: denial of service via dnssec validation l... * SECURITY UPDATE: denial of service via dnssec validation load - lib/dns/resolver.c: don't use bad->expire before it has been set. - Patch backported from 9.7.6-P2. - CVE-2012-3817	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu4.3	11 years ago
42	* SECURITY UPDATE: ghost domain names attack * SECURITY UPDATE: ghost domain names attack - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that of the old NS RRset when replacing it. - Patch backported from 9.7.5. - CVE-2012-1033 * SECURITY UPDATE: denial of service via zero length rdata handling - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for duplicate rdata. - Patch backported from 9.7.6-P1. - CVE-2012-1667	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu4.2	11 years ago
41	* SECURITY UPDATE: denial of service via specially crafted p... * SECURITY UPDATE: denial of service via specially crafted packet - bin/named/query.c,lib/dns/rbtdb.c: correctly handle cache lookups that return RRSIG data associated with nonexistent records. - Patch backported from 9.7.4-P1. - CVE-2011-4313	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu4.1	12 years ago
40	debian/apparmor-profile: Allow /var/run and /run. (LP: #8102... debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)	Martin Pitt	1:9.7.3.dfsg-1ubuntu4	12 years ago
39	* SECURITY UPDATE: denial of service via specially crafted p... * SECURITY UPDATE: denial of service via specially crafted packet - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache, nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute flag to indicate negative-cache records rather than using rrtype 0. - Patch backported from 9.7.3-P3. - CVE-2011-2464	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu3	12 years ago
38	* SECURITY UPDATE: denial of service via off-by-one * SECURITY UPDATE: denial of service via off-by-one - lib/dns/ncache.c: correctly validate length. - Patch backported from 9.7.3-P1. - CVE-2011-1910	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu2.1	12 years ago
37	debian/rules, configure, contrib/dlz/config.dlz.in: use debian/rules, configure, contrib/dlz/config.dlz.in: use DEB_HOST_MULTIARCH so we can find multiarch libraries and fix FTBFS. (LP: #745642)	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu2	13 years ago
36	* debian/bind9-default.md5sum: * debian/bind9-default.md5sum: - updated to reflect the default md5sum in maverick and natty, this avoids a bogus /etc/default/bind9.dpkg-dist file (LP: #556332)	Michael Vogt	1:9.7.3.dfsg-1ubuntu1	13 years ago
35	[Peter Palfrader] [Peter Palfrader] * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right db. [Internet Systems Consortium, Inc] * 9.7.3 - Closes: #612287 [Mahyuddin Susanto] * Updated Indonesian debconf templates. Closes: #608559 [LaMont Jones] * soname changes	LaMont Jones	1:9.7.3.dfsg-1	13 years ago
34	Natty version, no source changes Natty version, no source changes	LaMont Jones	1:9.7.3.dfsg-1~build1	13 years ago
33	* Non-maintainer upload. * Non-maintainer upload. * Fix encoding of Danish debconf translation	Christian Perrier	1:9.7.2.dfsg.P3-1.1	13 years ago
32	[ISC] [ISC] * Fix denial of service via ncache entry and a rrsig for the same type (CVE-2010-3613) * answers were incorrectly marked as insecure during key algorithm rollover (CVE-2010-3614) * Using "allow-query" in the "options" or "view" statements to restrict access to authoritative zones had no effect. (CVE-2010-3615) [LaMont Jones] * Adjust indentation for dpkg change. Closes: #597171	LaMont Jones	1:9.7.2.dfsg.P3-1	13 years ago
31	build for upload build for upload	LaMont Jones	1:9.7.2.dfsg.P3-1~build1	13 years ago
30	upload to natty upload to natty	LaMont Jones	1:9.7.2.dfsg.P2-3~build1	13 years ago
29	[ Andres Rodriguez ] [ Andres Rodriguez ] * Add apport hook (LP: #533601): - debian/bind9.apport: Added. [ Martin Pitt ] * debian/rules: Install Apport hook when building on Ubuntu.	Martin Pitt	1:9.7.2.dfsg.P2-2ubuntu1	13 years ago
28	[Roy Jamison] [Roy Jamison] lib/isc/unix/resource.c was missing inttypes.h include. LP: #674199	LaMont Jones	1:9.7.2.dfsg.P2-2	13 years ago
27	backport to natty backport to natty	LaMont Jones	1:9.7.2.dfsg.P2-2~build1	13 years ago

Older »