pool/bind
SHA256
12
0
Fork 1
Code Issues Pull Requests Activity

Accepting request 264596 from home:lmuelle:bind

Browse Source 
- Update to version 9.10.1-P1
  - A flaw in delegation handling could be exploited to put named into an
    infinite loop.  This has been addressed by placing limits on the number of
    levels of recursion named will allow (default 7), and the number of
    iterative queries that it will send (default 50) before terminating a
    recursive query (CVE-2014-8500); (bnc#908994).
    The recursion depth limit is configured via the "max-recursion-depth"
    option, and the query limit via the "max-recursion-queries" option.
    [RT #37580]
  - When geoip-directory was reconfigured during named run-time, the
    previously loaded GeoIP data could remain, potentially causing wrong ACLs
    to be used or wrong results to be served based on geolocation
    (CVE-2014-8680). [RT #37720]; (bnc#908995).
  - Lookups in GeoIP databases that were not loaded could cause an assertion
    failure (CVE-2014-8680). [RT #37679]; (bnc#908995).
  - The caching of GeoIP lookups did not always handle address families
    correctly, potentially resulting in an assertion failure (CVE-2014-8680).
    [RT #37672]; (bnc#908995).

OBS-URL: https://build.opensuse.org/request/show/264596
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=156
This commit is contained in:
Lars Müller
2014-12-09 22:47:11 +00:00
committed by Git OBS Bridge
parent c38019450e
commit 24da4f54fa
6 changed files with 39 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
bind.spec
View File

@@ -18,8 +18,8 @@
Name: bind
%define pkg_name bind
%define pkg_vers 9.10.1
%define rpm_vers 9.10.1
%define pkg_vers 9.10.1-P1
%define rpm_vers 9.10.1P1
%define idn_vers 1.0
Summary: Domain Name System (DNS) Server (named)
License: ISC