lp://staging/~kernevil/ubuntu/precise/bind9/sdlz-hmac-keys

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

1 recipe using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

53. By Kernevil on 2014-03-31

Fix changelog

52. By Kernevil on 2012-12-06

* New upstream release
* SECURITY UPDATE: denial of service via DNS64 and crafted query
  - bin/named/query.c: init rdataset before cleanup.
  - Patch backported from 9.8.4-P1
  - CVE-2012-5688

51. By Kernevil on 2012-11-14

sdlz patch to also send hmac keys to dlz implementation

50. By Marc Deslauriers on 2012-10-05

* SECURITY UPDATE: denial of service via specific combinations of RDATA
  - bin/named/query.c: fix logic
  - Patch backported from 9.8.3-P4
  - CVE-2012-5166

49. By Marc Deslauriers on 2012-09-12

* SECURITY UPDATE: denial of service via large crafted resource record
  - check length in lib/dns/include/dns/rdata.h,
    lib/dns/{master,rdata,rdataslab}.c. Added tests to
    lib/dns/tests/Makefile.in, lib/dns/tests/{master,rdata}_test.c,
    lib/dns/tests/testdata/master/master1{5,6}.data.
  - Patch backported from 9.8.3-P3
  - CVE-2012-4244

48. By Marc Deslauriers on 2012-07-25

* SECURITY UPDATE: denial of service via dnssec validation load
  - lib/dns/resolver.c: don't use bad->expire before it has been set.
  - Patch backported from 9.8.3-P2.
  - CVE-2012-3817

47. By Marc Deslauriers on 2012-06-04

* SECURITY UPDATE: ghost domain names attack
  - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
    of the old NS RRset when replacing it.
  - Patch backported from 9.8.2.
  - CVE-2012-1033
* SECURITY UPDATE: denial of service via zero length rdata handling
  - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
    duplicate rdata.
  - Patch backported from 9.8.3-P1.
  - CVE-2012-1667

46. By LaMont Jones on 2012-04-13

[Christoph Egger]

* define _GNU_SOURCE on kfreebsd et al. Closes: #658201

[LaMont Jones]

* chmod typo in postinst. LP: #980798
* Correctly order debhelper bits in postrm. Closes: #661040

45. By LaMont Jones on 2012-02-17

[Zlatan Todoric]

* fixed Serbian latin translation of debconf template. Closes: #634951

[Peter Eisentraut]

* Add support for "status" action to lwresd init script. Closes: #651540

[Bjørn Steensrud]

* NB Translations. Closes: #654454

[LaMont Jones]

* Default to run_resolvconf=false. LP: #933723
* Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202
* Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb.
  Closes: #620007 LP: #681536
* Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.
  LP: #929563

44. By LaMont Jones on 2012-01-25

Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202