Hello community,

here is the log from the commit of package pdns for openSUSE:11.4
checked in at Fri Feb 3 19:35:51 CET 2012.



--------
--- old-versions/11.4/all/pdns/pdns.changes     2010-04-28 12:30:04.000000000 
+0200
+++ 11.4/pdns/pdns.changes      2012-02-03 14:14:13.000000000 +0100
@@ -1,0 +2,5 @@
+Fri Feb  3 13:00:34 UTC 2012 - [email protected]
+
+- fixed CVE-2012-0206 (bnc#740255)
+
+-------------------------------------------------------------------

Package does not exist at destination yet. Using Fallback 
old-versions/11.4/all/pdns
Destination is old-versions/11.4/UPDATES/all/pdns
calling whatdependson for 11.4-i586


New:
----
  pdns-2.9.22-CVE-2012-0206.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ pdns.spec ++++++
--- /var/tmp/diff_new_pack.ec3YNB/_old  2012-02-03 19:34:34.000000000 +0100
+++ /var/tmp/diff_new_pack.ec3YNB/_new  2012-02-03 19:34:34.000000000 +0100
@@ -1,7 +1,7 @@
 #
-# spec file for package pdns (Version 2.9.22)
+# spec file for package pdns
 #
-# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
 
 Name:           pdns
 Version:        2.9.22
-Release:        1
+Release:        5.<RELEASE6>
 #
 Group:          Productivity/Networking/DNS/Servers
 License:        GPLv2+
@@ -70,6 +70,7 @@
 Patch1:         pdns-2.9.22_wrong_pgsql.patch
 Patch2:         pdns-2.9.22_warnings.patch
 Patch3:         pdns-2.9.22_missing_includes.patch
+Patch4:         pdns-2.9.22-CVE-2012-0206.patch
 #
 Summary:        Modern, advanced and high performance authoritative-only 
nameserver
 
@@ -267,7 +268,7 @@
 %patch1
 %patch2
 %patch3
-#patch4
+%patch4
 %if 0%{?with_pdns_opendbx}
 %{__cp} %{S:2} README.opendbx
 %endif

++++++ pdns-2.9.22-CVE-2012-0206.patch ++++++
--- pdns/common_startup.cc      2008-11-19 18:56:52.000000000 +0100
+++ pdns/common_startup.cc      2012-02-03 13:56:21.758483001 +0100
@@ -244,6 +244,8 @@
       numreceived4++;
     else
       numreceived6++;
+    if(P->d.qr)
+      continue;
 
     S.ringAccount("queries", P->qdomain+"/"+P->qtype.getName());
     S.ringAccount("remotes",P->getRemote());
continue with "q"...



Remember to have fun...

-- 
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to