~ubuntu-branches/ubuntu/precise/bind9/precise-updates

• Changes
• Files

~ubuntu-branches/ubuntu/precise/bind9/precise-updates » Changes from revision 59

From Revision 59 to 40

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
59		* SECURITY UPDATE: denial of service in DNSSEC-signed record... * SECURITY UPDATE: denial of service in DNSSEC-signed record validation   via malformed keys   - fix validation inlib/dns/hmac_link.c, lib/dns/include/dst/dst.h,     lib/dns/ncache.c, lib/dns/openssldh_link.c,     lib/dns/openssldsa_link.c, lib/dns/opensslrsa_link.c,     lib/dns/resolver.c.   - CVE-2015-5722	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.13	8 years ago
58		* SECURITY UPDATE: denial of service in TKEY record query ha... * SECURITY UPDATE: denial of service in TKEY record query handling   - lib/dns/tkey.c: clear out name before trying the answer section.   - CVE-2015-5477 * SECURITY UPDATE: denial of service via AAAA record query   - bin/named/query.c: arrange for RPZ rewriting of any A records.   - CVE-2012-5689	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.12	8 years ago
57		* SECURITY UPDATE: resolver DoS via specially crafted zone d... * SECURITY UPDATE: resolver DoS via specially crafted zone data   - lib/dns/validator.c: don't use uninitialized fixedname.   - CVE-2015-4620	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.11	8 years ago
56		* SECURITY UPDATE: denial of service via revoking a managed ... * SECURITY UPDATE: denial of service via revoking a managed trust anchor   and supplying an untrusted replacement   - lib/dns/zone.c: avoid crash due to managed-key rollover   - Based on patch supplied by Evan Hunt <each@isc.org>   - CVE-2015-1349	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.10	9 years ago
55		* SECURITY UPDATE: denial of service via delegation handling... * SECURITY UPDATE: denial of service via delegation handling defect   - limit max recursion in bin/named/config.c, bin/named/query.c,     bin/named/server.c, lib/dns/adb.c, lib/dns/include/dns/adb.h,     lib/dns/include/dns/resolver.h, lib/dns/resolver.c,     lib/export/isc/Makefile.in, lib/isc/Makefile.in, lib/isc/counter.c,     lib/isc/include/isc/counter.h, lib/isc/include/isc/Makefile.in,     lib/isc/include/isc/types.h, lib/isc/tests/counter_test.c,     lib/isccfg/namedconf.c.   - Patch provided by upstream.   - CVE-2014-8500	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.9	9 years ago
54		* SECURITY UPDATE: denial of service when processing NSEC3-s... * SECURITY UPDATE: denial of service when processing NSEC3-signed zone   queries   - debian/patches/CVE-2014-0591.patch: don't call memcpy with     overlapping ranges in bin/named/query.c.   - patch backported from 9.8.6-P2.   - CVE-2014-0591	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.8	10 years ago
53		* SECURITY UPDATE: denial of service via incorrect bounds ch... * SECURITY UPDATE: denial of service via incorrect bounds checking on   private type 'keydata'   - lib/dns/rdata/generic/keydata_65533.c: check for correct length.   - Patch backported from 9.8.5-P2   - CVE-2013-4854	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.7	10 years ago
52		* SECURITY UPDATE: denial of service via regex syntax checki... * SECURITY UPDATE: denial of service via regex syntax checking   - configure,configure.in,config.h.in: remove check for regex.h to     disable regex syntax checking.   - CVE-2013-2266	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.6	11 years ago
51		* SECURITY UPDATE: denial of service via DNS64 and crafted q... * SECURITY UPDATE: denial of service via DNS64 and crafted query   - bin/named/query.c: init rdataset before cleanup.   - Patch backported from 9.8.4-P1   - CVE-2012-5688	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.5	11 years ago
50		* SECURITY UPDATE: denial of service via specific combinatio... * SECURITY UPDATE: denial of service via specific combinations of RDATA   - bin/named/query.c: fix logic   - Patch backported from 9.8.3-P4   - CVE-2012-5166	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.4	11 years ago
49		* SECURITY UPDATE: denial of service via large crafted resou... * SECURITY UPDATE: denial of service via large crafted resource record   - check length in lib/dns/include/dns/rdata.h,     lib/dns/{master,rdata,rdataslab}.c. Added tests to     lib/dns/tests/Makefile.in, lib/dns/tests/{master,rdata}_test.c,     lib/dns/tests/testdata/master/master1{5,6}.data.   - Patch backported from 9.8.3-P3   - CVE-2012-4244	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.3	11 years ago
48		* SECURITY UPDATE: denial of service via dnssec validation l... * SECURITY UPDATE: denial of service via dnssec validation load   - lib/dns/resolver.c: don't use bad->expire before it has been set.   - Patch backported from 9.8.3-P2.   - CVE-2012-3817	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.2	11 years ago
47		* SECURITY UPDATE: ghost domain names attack * SECURITY UPDATE: ghost domain names attack   - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that     of the old NS RRset when replacing it.   - Patch backported from 9.8.2.   - CVE-2012-1033 * SECURITY UPDATE: denial of service via zero length rdata handling   - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for     duplicate rdata.   - Patch backported from 9.8.3-P1.   - CVE-2012-1667	Marc Deslauriers	1:9.8.1.dfsg.P1-4ubuntu0.1	11 years ago
46		[Christoph Egger] [Christoph Egger] * define _GNU_SOURCE on kfreebsd et al.  Closes: #658201 [LaMont Jones] * chmod typo in postinst.  LP: #980798 * Correctly order debhelper bits in postrm.  Closes: #661040	LaMont Jones	1:9.8.1.dfsg.P1-4	12 years ago
45		[Zlatan Todoric] [Zlatan Todoric] * fixed Serbian latin translation of debconf template.  Closes: #634951 [Peter Eisentraut] * Add support for "status" action to lwresd init script.  Closes: #651540 [Bjørn Steensrud] * NB Translations.  Closes: #654454 [LaMont Jones] * Default to run_resolvconf=false.  LP: #933723 * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202 * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb.    Closes: #620007  LP: #681536 * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.   LP: #929563	LaMont Jones	1:9.8.1.dfsg.P1-3	12 years ago
44		Deliver named.conf.options on fresh install. Closes: #65704... Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202	LaMont Jones	1:9.8.1.dfsg.P1-2	12 years ago
43		[Internet Software Consortium, Inc] [Internet Software Consortium, Inc] * 9.8.1-P1   -  Cache lookup could return RRSIG data associated with nonexistent      records, leading to an assertion failure. [LaMont Jones] * add a readme entry for DNSSEC-by-default * Failed to install due to chgrp on non-existant directory.  Closes: #647598 * ack NMU: l10n issues	LaMont Jones	1:9.8.1.dfsg.P1-1	12 years ago
42		precise upload precise upload	LaMont Jones	1:9.8.1.dfsg.P1-1~build1	12 years ago
41		* SECURITY UPDATE: denial of service via specially crafted p... * SECURITY UPDATE: denial of service via specially crafted packet   - bin/named/query.c,lib/dns/rbtdb.c: correctly handle cache lookups     that return RRSIG data associated with nonexistent records.   - Patch backported from 9.7.4-P1.   - CVE-2011-4313	Marc Deslauriers	1:9.7.3.dfsg-1ubuntu5	12 years ago
40		debian/apparmor-profile: Allow /var/run and /run. (LP: #8102... debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)	Martin Pitt	1:9.7.3.dfsg-1ubuntu4	12 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1