Package: bind9
Version: 9.3.4-1
Severity: normal
Tags: security

When I take a closer look at bind9 9.3.4-1, it looks to me like the
last packaged 9.3.3 version. The daemon also reports itself as 9.3.3.

Otoh, the differences between ISC 9.3.4 and Debian 9.3.4-1 are much
more than only RFCs and other non-free stuff removed and the debian/
directory.

$ debdiff bind9_9.3.3-1.dsc bind9_9.3.4-1.dsc
diff -Nru /tmp/GVYoTmAggh/bind9-9.3.3/debian/arch-version 
/tmp/KeX88zsRLM/bind9-9.3.4/debian/arch-version
--- /tmp/GVYoTmAggh/bind9-9.3.3/debian/arch-version     2007-01-29 
11:21:35.000000000 +0100
+++ /tmp/KeX88zsRLM/bind9-9.3.4/debian/arch-version     2007-01-29 
11:21:37.000000000 +0100
@@ -1 +1 @@
[EMAIL PROTECTED]/bind9--merged--9.3.3--patch-7
[EMAIL PROTECTED]/bind9--merged--9.3.4--patch-2
diff -Nru /tmp/GVYoTmAggh/bind9-9.3.3/debian/changelog 
/tmp/KeX88zsRLM/bind9-9.3.4/debian/changelog
--- /tmp/GVYoTmAggh/bind9-9.3.3/debian/changelog        2007-01-29 
11:21:35.000000000 +0100
+++ /tmp/KeX88zsRLM/bind9-9.3.4/debian/changelog        2007-01-29 
11:21:37.000000000 +0100
@@ -1,3 +1,9 @@
+bind9 (1:9.3.4-1) unstable; urgency=high
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <[EMAIL PROTECTED]>  Thu, 25 Jan 2007 14:31:09 -0700
+
 bind9 (1:9.3.3-1) unstable; urgency=low

   * New upstream version

$ diff -urN bind-9.3.4 bind9-9.3.4 | diffstat | grep -v '\(doc\|debian\)'
 CHANGES                                                             |    8
 FAQ                                                                 |   43
 FAQ.xml                                                             |   83
 README                                                              |    8
 aclocal.m4                                                          | 6382 +++
 bin/named/named.8                                                   |    6
 bin/named/unix/os.c                                                 |    5
 bin/rndc/rndc.8                                                     |    2
 config.guess                                                        |  590
 config.h.in                                                         |    4
 config.sub                                                          |  121
 configure                                                           |18306 
+++++-----
 contrib/idn/idnkit-1.0-src/config.guess                             |  980
 contrib/idn/idnkit-1.0-src/config.sub                               |  445
 lib/dns/Makefile.in                                                 |    4
 lib/dns/api                                                         |    6
 lib/dns/include/dns/validator.h                                     |   12
 lib/dns/resolver.c                                                  |   51
 lib/dns/validator.c                                                 |   26
 lib/isc/Makefile.in                                                 |    3
 lib/isc/unix/socket.c                                               |    4
 lib/isc/win32/socket.c                                              |    2
 lib/isccc/Makefile.in                                               |    5
 lib/isccfg/Makefile.in                                              |    2
 ltmain.sh                                                           | 1045
 version                                                             |    4
 217 files changed, 20538 insertions(+), 141494 deletions(-)

Can you please take a look at this and confirm what was going on?

Greetings
Marc

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.19.2-zgsrv
Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to