Hello community, here is the log from the commit of package bind for openSUSE:Factory checked in at 2013-07-02 06:44:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bind (Old) and /work/SRC/openSUSE:Factory/.bind.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bind" Changes: -------- --- /work/SRC/openSUSE:Factory/bind/bind.changes 2013-05-13 14:43:12.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.bind.new/bind.changes 2013-07-02 06:44:26.000000000 +0200 @@ -1,0 +2,29 @@ +Mon Jun 24 13:17:11 UTC 2013 - [email protected] + +- Updated to 9.9.3-P1 + Various bugfixes and some feature fixes. (see CHANGES files) + Security and maintenance issues: + + - [security] Caching data from an incompletely signed zone could + trigger an assertion failure in resolver.c [RT #33690] + - [security] Support NAPTR regular expression validation on + all platforms without using libregex, which + can be vulnerable to memory exhaustion attack + (CVE-2013-2266). [RT #32688] + - [security] RPZ rules to generate A records (but not AAAA records) + could trigger an assertion failure when used in + conjunction with DNS64 (CVE-2012-5689). [RT #32141] + - [bug] Fixed several Coverity warnings. + Note: This change includes a fix for a bug that + was subsequently determined to be an exploitable + security vulnerability, CVE-2012-5688: named could + die on specific queries with dns64 enabled. + [RT #30996] + + - [maint] Added AAAA for D.ROOT-SERVERS.NET. + - [maint] D.ROOT-SERVERS.NET is now 199.7.91.13. +- Updated to current rate limiting + rpz patch from + http://ss.vix.su/~vjs/rrlrpz.html +- moved dnssec-* helpers to bind-utils package. bnc#813911 + +------------------------------------------------------------------- Old: ---- bind-9.9.2-P2.tar.gz bind-9.9.2-P2.tar.gz.asc rl-9.9.2p1.patch New: ---- bind-9.9.3-P1.tar.gz bind-9.9.3-P1.tar.gz.asc rpz2+rl-9.9.3-P1.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.spec ++++++ --- /var/tmp/diff_new_pack.Ux9atu/_old 2013-07-02 06:44:28.000000000 +0200 +++ /var/tmp/diff_new_pack.Ux9atu/_new 2013-07-02 06:44:28.000000000 +0200 @@ -18,7 +18,7 @@ Name: bind %define pkg_name bind -%define pkg_vers 9.9.2-P2 +%define pkg_vers 9.9.3-P1 BuildRequires: krb5-devel BuildRequires: libcap BuildRequires: libcap-devel @@ -32,7 +32,7 @@ Summary: Domain Name System (DNS) Server (named) License: ISC Group: Productivity/Networking/DNS/Servers -Version: 9.9.2P1 +Version: 9.9.3P1 Release: 0 Provides: bind8 Provides: bind9 @@ -65,8 +65,8 @@ # Rate limiting patch by Paul Vixie et.al. for reflection DoS protection # see http://www.redbarn.org/dns/ratelimits -#Patch200: http://ss.vix.com/~vixie/rl-9.9.2.patch -Patch200: rl-9.9.2p1.patch +#Patch200: http://ss.vix.su/~vjs/rpz2+rl-9.9.3-P1.patch +Patch200: rpz2+rl-9.9.3-P1.patch Source60: dlz-schema.txt %if %ul_version >= 1 @@ -576,18 +576,12 @@ %{_sbindir}/named %{_sbindir}/named-checkconf %{_sbindir}/named-checkzone -%{_sbindir}/dnssec-keygen -%{_sbindir}/dnssec-signzone %{_sbindir}/named-compilezone %doc %{_mandir}/man5/named.conf.5.gz -%doc %{_mandir}/man8/dnssec-keygen.8.gz -%doc %{_mandir}/man8/dnssec-signzone.8.gz %doc %{_mandir}/man8/named-checkconf.8.gz %doc %{_mandir}/man8/named-checkzone.8.gz %doc %{_mandir}/man8/named.8.gz %doc %{_mandir}/man8/named-compilezone.8.gz -%doc %{_mandir}/man8/dnssec-dsfromkey.8.gz -%doc %{_mandir}/man8/dnssec-keyfromlabel.8.gz %dir %{_datadir}/bind %{_datadir}/bind/createNamedConfInclude %{_datadir}/bind/ldapdump @@ -675,40 +669,46 @@ %{_bindir}/nsupdate %{_bindir}/genDDNSkey %{_bindir}/runidn -%{_sbindir}/dnssec-dsfromkey -%{_sbindir}/dnssec-keyfromlabel -%{_sbindir}/rndc -%{_sbindir}/rndc-confgen %{_sbindir}/arpaname %{_sbindir}/ddns-confgen +%{_sbindir}/dnssec-dsfromkey +%{_sbindir}/dnssec-keyfromlabel +%{_sbindir}/dnssec-keygen %{_sbindir}/dnssec-revoke -%{_sbindir}/dnssec-verify %{_sbindir}/dnssec-settime +%{_sbindir}/dnssec-signzone +%{_sbindir}/dnssec-verify %{_sbindir}/genrandom %{_sbindir}/isc-hmac-fixup %{_sbindir}/named-journalprint %{_sbindir}/nsec3hash +%{_sbindir}/rndc +%{_sbindir}/rndc-confgen %dir %{_datadir}/idnkit %{_datadir}/idnkit/jp.map %dir %doc %{_defaultdocdir}/bind %dir %{_defaultdocdir}/bind/README.%{VENDOR} +%doc %{_mandir}/man1/arpaname.1.gz %doc %{_mandir}/man1/dig.1.gz %doc %{_mandir}/man1/host.1.gz -%doc %{_mandir}/man1/nslookup.1.gz %doc %{_mandir}/man1/isc-config.sh.1.gz -%doc %{_mandir}/man5/rndc.conf.5.gz +%doc %{_mandir}/man1/nslookup.1.gz %doc %{_mandir}/man1/nsupdate.1.gz -%doc %{_mandir}/man8/rndc-confgen.8.gz -%doc %{_mandir}/man8/rndc.8.gz -%doc %{_mandir}/man1/arpaname.1.gz +%doc %{_mandir}/man5/rndc.conf.5.gz %doc %{_mandir}/man8/ddns-confgen.8.gz +%doc %{_mandir}/man8/dnssec-dsfromkey.8.gz +%doc %{_mandir}/man8/dnssec-keyfromlabel.8.gz +%doc %{_mandir}/man8/dnssec-keygen.8.gz %doc %{_mandir}/man8/dnssec-revoke.8.gz -%doc %{_mandir}/man8/dnssec-verify.8.gz %doc %{_mandir}/man8/dnssec-settime.8.gz +%doc %{_mandir}/man8/dnssec-signzone.8.gz +%doc %{_mandir}/man8/dnssec-verify.8.gz %doc %{_mandir}/man8/genrandom.8.gz %doc %{_mandir}/man8/isc-hmac-fixup.8.gz %doc %{_mandir}/man8/named-journalprint.8.gz %doc %{_mandir}/man8/nsec3hash.8.gz +%doc %{_mandir}/man8/rndc.8.gz +%doc %{_mandir}/man8/rndc-confgen.8.gz # idn kit %doc %{_mandir}/man1/idnconv.1.gz %doc %{_mandir}/man1/runidn.1.gz ++++++ Makefile.in.diff ++++++ --- /var/tmp/diff_new_pack.Ux9atu/_old 2013-07-02 06:44:28.000000000 +0200 +++ /var/tmp/diff_new_pack.Ux9atu/_new 2013-07-02 06:44:28.000000000 +0200 @@ -1,8 +1,8 @@ -Index: bind-9.8.1-P1/bin/named/Makefile.in +Index: bind-9.9.3-P1/bin/named/Makefile.in =================================================================== ---- bind-9.8.1-P1.orig/bin/named/Makefile.in -+++ bind-9.8.1-P1/bin/named/Makefile.in -@@ -162,8 +162,6 @@ installdirs: +--- bind-9.9.3-P1.orig/bin/named/Makefile.in ++++ bind-9.9.3-P1/bin/named/Makefile.in +@@ -175,9 +175,7 @@ installdirs: install:: named@EXEEXT@ lwresd@EXEEXT@ installdirs ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named@EXEEXT@ ${DESTDIR}${sbindir} (cd ${DESTDIR}${sbindir}; rm -f lwresd@EXEEXT@; @LN@ named@EXEEXT@ lwresd@EXEEXT@) @@ -12,3 +12,4 @@ + for m in ${MANPAGES}; do ${INSTALL_DATA} ${srcdir}/$$m ${DESTDIR}${mandir}/man$${m##*.}; done @DLZ_DRIVER_RULES@ + ++++++ bind-9.9.2-P2.tar.gz -> bind-9.9.3-P1.tar.gz ++++++ /work/SRC/openSUSE:Factory/bind/bind-9.9.2-P2.tar.gz /work/SRC/openSUSE:Factory/.bind.new/bind-9.9.3-P1.tar.gz differ: char 5, line 1 ++++++ configure.in.diff ++++++ --- /var/tmp/diff_new_pack.Ux9atu/_old 2013-07-02 06:44:28.000000000 +0200 +++ /var/tmp/diff_new_pack.Ux9atu/_new 2013-07-02 06:44:28.000000000 +0200 @@ -1,10 +1,8 @@ -Index: bind-9.8.1-P1/configure.in -=================================================================== ---- bind-9.8.1-P1.orig/configure.in -+++ bind-9.8.1-P1/configure.in -@@ -2907,7 +2907,7 @@ AC_SUBST(DOXYGEN) +--- bind-9.9.3-P1/configure.in.xx 2013-06-26 14:23:25.536177163 +0200 ++++ bind-9.9.3-P1/configure.in 2013-06-26 14:23:26.401175186 +0200 +@@ -3099,7 +3099,7 @@ # empty). The variable VARIABLE will be substituted into output files. - # + # -AC_DEFUN(NOM_PATH_FILE, [ +AC_DEFUN([NOM_PATH_FILE], [ ++++++ rpz2+rl-9.9.3-P1.patch ++++++ ++++ 10452 lines (skipped) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
