Hello community, here is the log from the commit of package pdns for openSUSE:Factory checked in at 2017-01-17 14:36:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pdns (Old) and /work/SRC/openSUSE:Factory/.pdns.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pdns" Changes: -------- --- /work/SRC/openSUSE:Factory/pdns/pdns.changes 2017-01-09 10:48:52.254036427 +0100 +++ /work/SRC/openSUSE:Factory/.pdns.new/pdns.changes 2017-01-17 14:36:46.465944732 +0100 @@ -1,0 +2,22 @@ +Fri Jan 13 16:42:26 UTC 2017 - [email protected] + +- b854d9f.diff: revert upstream change that caused a regression + with multiple-backends + +------------------------------------------------------------------- +Fri Jan 13 12:16:03 UTC 2017 - [email protected] + +- update to 4.0.2: + The following security issues were fixed: + - 2016-02: Crafted queries can cause abnormal CPU usage + (CVE-2016-7068, boo#1018326) + - 2016-03: Denial of service via the web server + (CVE-2016-7072, boo#1018327) + - 2016-04: Insufficient validation of TSIG signatures + (CVE-2016-7073, CVE-2016-7074, boo#1018328) + - 2016-05: Crafted zone record can cause a denial of service + (CVE-2016-2120, boo#1018329) + For complete changelog, see + https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402 + +------------------------------------------------------------------- Old: ---- pdns-4.0.1.tar.bz2 New: ---- b854d9f.diff pdns-4.0.2.tar.bz2 pdns-4.0.2.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pdns.spec ++++++ --- /var/tmp/diff_new_pack.WY87Yc/_old 2017-01-17 14:36:47.089856285 +0100 +++ /var/tmp/diff_new_pack.WY87Yc/_new 2017-01-17 14:36:47.093855718 +0100 @@ -1,7 +1,7 @@ # # spec file for package pdns # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,11 +17,11 @@ Name: pdns -Version: 4.0.1 +Version: 4.0.2 Release: 0 # %define pkg_name pdns -%define pkg_version 4.0.1 +%define pkg_version 4.0.2 # %if 0%{?suse_version} > 1230 || 0%{?rhel_version} > 600 || 0%{?centos_version} > 600 || 0%{?fedora_version} >= 20 || 0%{?el7}%{?fc20}%{?fc21}%{?fc22}%{?fc23}%{?fc24}%{?fc25} %bcond_without systemd @@ -138,8 +138,10 @@ # Url: http://www.powerdns.com/ Source: http://downloads.powerdns.com/releases/pdns-%{pkg_version}.tar.bz2 +Source3: http://downloads.powerdns.com/releases/pdns-%{pkg_version}.tar.bz2.sig Source1: rcpdns Source2: README.opendbx +Patch: b854d9f.diff Summary: Modern, advanced and high performance authoritative-only nameserver License: GPL-2.0 Group: Productivity/Networking/DNS/Servers @@ -307,6 +309,7 @@ %prep %setup -n %{name}-%{pkg_version} +%patch -p1 -R %if %{with pdns_opendbx} cp %{S:2} README.opendbx %endif ++++++ b854d9f.diff ++++++ commit b854d9fec6f7e5636ab4742d716c7d848e0ce0d6 Author: Remi Gacogne <[email protected]> Date: Wed Oct 26 15:42:27 2016 +0200 auth: In `Bind2Backend::lookup()`, use the `zoneId` when we have it After the initial lookup corresponding to a `DNSBackend::getAuth()`, the subsequent ones already have the `zoneId`, so use it instead of looping on `chopOff()` again. This should be much more efficient. (cherry picked from commit 937a66255ff05f2e754ef113833e54cc4cf2004b) diff --git a/modules/bindbackend/bindbackend2.cc b/modules/bindbackend/bindbackend2.cc index 3baf25e..4f9b06f 100644 --- a/modules/bindbackend/bindbackend2.cc +++ b/modules/bindbackend/bindbackend2.cc @@ -1036,9 +1036,17 @@ void Bind2Backend::lookup(const QType &qtype, const DNSName &qname, DNSPacket *p bool found=false; BB2DomainInfo bbd; - do { - found = safeGetBBDomainInfo(domain, &bbd); - } while ((!found || (zoneId != (int)bbd.d_id && zoneId != -1)) && domain.chopOff()); + if (zoneId != -1) { + found = safeGetBBDomainInfo(zoneId, &bbd); + if (found) { + domain = bbd.d_name; + } + } + else { + do { + found = safeGetBBDomainInfo(domain, &bbd); + } while (!found && domain.chopOff()); + } if(!found) { if(mustlog) ++++++ pdns-4.0.1.tar.bz2 -> pdns-4.0.2.tar.bz2 ++++++ ++++ 13508 lines of diff (skipped)
