OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=17

bind.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Jun  9 14:18:10 CEST 2008 - ug@suse.de
+
+- VUL-0: spoofing made easier due to non-random UDP
+  source port VU#800113 (bnc#396963)
+
 -------------------------------------------------------------------
 Tue May  6 13:46:43 CEST 2008 - ug@suse.de
 

bind.spec

@@ -18,7 +18,7 @@ Name:           bind
 BuildRequires:  libcap libcap-devel openssl openssl-devel
 Summary:        Domain Name System (DNS) Server (named)
 Version:        9.4.2
-Release:        33
+Release:        45
 %define       SDB_LDAP_VERSION      1.0-beta
 License:        BSD 3-Clause; X11/MIT
 Group:          Productivity/Networking/DNS/Servers
@@ -41,6 +41,7 @@ Patch4:         perl-path.diff
 Patch51:        pie_compile.diff
 Patch52:        named-bootconf.diff
 Patch53:        capset.diff
+Patch54:        random-generator-fix.diff
 %if %ul_version >= 1
 %define	VENDOR UL
 %else
@@ -199,6 +200,7 @@ Authors:
 %endif
 %patch52
 %patch53
+%patch54 -p1
 # modify settings of some files regarding to OS version and vendor
 function replaceStrings()
 {
@@ -680,6 +682,9 @@ fi
 %doc %{_mandir}/man5/idnrc.5.gz
 
 %changelog
+* Mon Jun 09 2008 ug@suse.de
+- VUL-0: spoofing made easier due to non-random UDP
+  source port VU#800113 (bnc#396963)
 * Tue May 06 2008 ug@suse.de
 - capset support fixed (bnc#386653)
 * Thu Apr 10 2008 ro@suse.de