-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-4658 2007-12-20 00:53:48 --------------------------------------------------------------------------------
Name : bind Product : Fedora 7 Version : 9.4.2 Release : 2.fc7 URL : http://www.isc.org/products/BIND/ Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server. Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. -------------------------------------------------------------------------------- Update Information: - fixed address of L.ROOT-SERVERS.NET (#411141) - CVE-2007-6283 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 19 2007 Adam Tkac <atkac redhat com> 31:9.4.2-2 - CVE-2007-6283 * Wed Dec 5 2007 Adam Tkac <atkac redhat com> 31:9.4.2-1.1 - update named.ca file (new L.ROOT-SERVERS.NET, #411141) * Thu Nov 29 2007 Adam Tkac <atkac redhat com> 31:9.4.2-1 - final 9.4.2 * Thu Nov 15 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.5.rc1 - updated to 9.4.2-rc2 * Mon Nov 12 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.4.1.rc1 - new L.ROOT-SERVERS.NET address * Tue Oct 9 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.4.rc1 - updated to 9.4.2rc1 - patches merged to upstream - bind-9.4-update.patch - bind-9.4-_res_errno.patch * Mon Sep 17 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.3.1.b1 - moved caching-nameserver chroot files to bind-chroot (#287321) * Thu Sep 6 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.3.b1 - patches bind-9.4-2119_revert.patch and libbind-9.3.1rc1-fix_h_errno.patch are obsoleted by bind-9.4-_res_errno.patch * Fri Aug 31 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.2.b1 - temporary revert ISC 2119 change which conflicts with our "libbind-errno" patch (#254501) * Tue Aug 21 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.1.b1 - updated to 9.4.2b1 - dropped patches - bind-bsdcompat (upstream) - bind-9.4-tsig-init (upstream) - bind-9.3.3rc2-dbus (obsoleted by bind-9.4-dbus.patch) - bind-9.4.0-dbus-race-condition.patch (upstream) - bind-9.3.4-sdb-sqlite-src.patch (upstream) * Tue Aug 14 2007 Adam Tkac <atkac redhat com> 31:9.4.1-9.P1 - named could crash when deleting SRV record with UPDATE (#251336) * Thu Jul 26 2007 Adam Tkac <atkac redhat com> 31:9.4.1-8.P1 - backported patch to #249701 from BIND's HEAD * Tue Jul 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-7.P1 - updated to latest upstream (contains fixes for CVE-2007-2925 and CVE-2007-2926) * Thu Jun 21 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6.1 - minor changes in caching-nameserver configuration * Mon Jun 18 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6 - major changes in default caching-nameserver configuration (configuration could now honor RFCs, #243565) * Tue Jun 5 2007 Adam Tkac <atkac redhat com> 31:9.4.1-5 - added /var/named/dynamic directory. This directory is primary designed for dynamic DNS zones. In future releases named could write only into dynamic, data and slaves directories * Thu May 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-4 - start using deprecated ldap API - fix minor bug in bind-chroot-admin (#241103) * Tue May 15 2007 Adam Tkac <atkac redhat com> 31:9.4.1-3 - fixed bind-chroot-admin dynamic DNS handling (#239149) - rewrited ldap backend to latest API (#239802) - updated zone-freeze patch to latest upstream * Mon May 7 2007 Adam Tkac <atkac redhat com> 31:9.4.1-2 - test build on new build system * Wed May 2 2007 Adam Tkac <atkac redhat com> 31:9.4.1-1 - updated to 9.4.1 which contains fix to CVE-2007-2241 * Fri Apr 27 2007 Adam Tkac <atkac redhat com> 31:9.4.0-8 - improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin * Tue Apr 17 2007 Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7 - removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) -------------------------------------------------------------------------------- References: [ 1 ] Bug #423061 - CVE-2007-6283 bind: /etc/rndc.key has 644 permissions by default [f7] https://bugzilla.redhat.com/show_bug.cgi?id=423061 [ 2 ] Bug #411141 - caching-nameserver 9.4.2-1 doesn't have new IP address for L.ROOT-SERVERS.NET https://bugzilla.redhat.com/show_bug.cgi?id=411141 -------------------------------------------------------------------------------- Updated packages: 28aa0cb1542e256567c44d647896b990a448b538 bind-debuginfo-9.4.2-2.fc7.ppc64.rpm f38a44e7deb3a51cb5d2aac2dee8b29041b575aa bind-sdb-9.4.2-2.fc7.ppc64.rpm 550dc2cce14a959ac835388d03d4b1f6a6020f99 bind-chroot-9.4.2-2.fc7.ppc64.rpm ef2c12d2b581d09888d872d839105e162e5b648c caching-nameserver-9.4.2-2.fc7.ppc64.rpm 2f68c806bb44e198709fb762a9168ab204cfdc9d bind-devel-9.4.2-2.fc7.ppc64.rpm b94bc818ceaa6cb99ddf06cb6e285503969c49ca bind-utils-9.4.2-2.fc7.ppc64.rpm 30a3f2c3fd4230fdda63c61f3854c96d3f62e4c1 bind-libs-9.4.2-2.fc7.ppc64.rpm 89f34527b435c866cb25c653feea60e43779308b bind-9.4.2-2.fc7.ppc64.rpm 8717315b3ef5aad2783706f46c225b0677e7d8a3 bind-debuginfo-9.4.2-2.fc7.i386.rpm 82bddaa83e1050a0428f07564fbefc5a5578d9d9 bind-sdb-9.4.2-2.fc7.i386.rpm fab36ba9bda8e68e8e7df80ea8314b425e5cf236 bind-chroot-9.4.2-2.fc7.i386.rpm 5ab240909b5b15efba07d582a80857857f03e700 caching-nameserver-9.4.2-2.fc7.i386.rpm d31ad35127346d4ffa36516c74397d68d41e3e54 bind-devel-9.4.2-2.fc7.i386.rpm 226f1011da3c6479deee69879dbbb1dd755bb3c0 bind-utils-9.4.2-2.fc7.i386.rpm 9a95c4f451f51124dc54c60069cf357a2a053871 bind-libs-9.4.2-2.fc7.i386.rpm b4e84407eae66da8504a69c06f5eff9559c6e7ee bind-9.4.2-2.fc7.i386.rpm bfbe66bb3397fc5ab4156c0d2883060e9434a5b2 bind-debuginfo-9.4.2-2.fc7.x86_64.rpm ae392890fe78fa9c0d3e62185bbf98450e58fc02 bind-sdb-9.4.2-2.fc7.x86_64.rpm 3620e07de93b09fb91ac1034b80c92340584fa84 bind-chroot-9.4.2-2.fc7.x86_64.rpm ec48d1ce52081d57a4376bc713e6b15b64163857 caching-nameserver-9.4.2-2.fc7.x86_64.rpm b049a47024bbd3f2bd8961256e1555cdd91639d2 bind-devel-9.4.2-2.fc7.x86_64.rpm 40359837bdd91d8c4d3bb16bb826566be9c0a570 bind-utils-9.4.2-2.fc7.x86_64.rpm a36c6ae65a6b553f447af070f888905fdf322778 bind-libs-9.4.2-2.fc7.x86_64.rpm 8f46f979da47966c58975cbd5b890a9db986db72 bind-9.4.2-2.fc7.x86_64.rpm 08b2c7747e77196c9574d73286f194e7bc23b190 bind-debuginfo-9.4.2-2.fc7.ppc.rpm 17c4028bc822f413e923559770e5a27193a4c17b bind-sdb-9.4.2-2.fc7.ppc.rpm d0ded87feb4c6c334960663dde0ac26e766b7624 bind-chroot-9.4.2-2.fc7.ppc.rpm 6296b2638170139ae2ae7fbfd959b938dedc91b4 caching-nameserver-9.4.2-2.fc7.ppc.rpm ce6b28ab008940a081592cd6e98812963d763b4e bind-devel-9.4.2-2.fc7.ppc.rpm 2bf42b996bb2721e7eee6b6e81b6e5c18a767bd9 bind-utils-9.4.2-2.fc7.ppc.rpm ea446d15fb1a872b0c71baa6227307fd78cb6817 bind-libs-9.4.2-2.fc7.ppc.rpm c344aebd68febf277a61f072f8fab594e171f095 bind-9.4.2-2.fc7.ppc.rpm 0d34235a42edea98d289c88167b9a7e714246f0d bind-9.4.2-2.fc7.src.rpm This update can be installed with the "yum" update program. Use su -c 'yum update bind' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce