From 9aea24ec0b7a99239b6730cb2401e2471ff8d9aae8a27e4da4df41634678f923 Mon Sep 17 00:00:00 2001 From: Uwe Gansert Date: Thu, 12 Jul 2012 07:46:55 +0000 Subject: [PATCH 1/2] Accepting request 127699 from home:babelworx:ldig:branches:network license update: ISC ISC is generally seen as the correct license for bind OBS-URL: https://build.opensuse.org/request/show/127699 OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=93 --- bind.changes | 6 ++++++ bind.spec | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/bind.changes b/bind.changes index 754ed59..cf1a893 100644 --- a/bind.changes +++ b/bind.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Thu Jul 12 07:34:11 UTC 2012 - cfarrell@suse.com + +- license update: ISC + ISC is generally seen as the correct license for bind + ------------------------------------------------------------------- Tue Jun 5 16:30:32 CEST 2012 - ug@suse.de diff --git a/bind.spec b/bind.spec index 447ca3e..2e2985b 100644 --- a/bind.spec +++ b/bind.spec @@ -31,7 +31,7 @@ BuildRequires: openssl BuildRequires: openssl-devel BuildRequires: update-desktop-files Summary: Domain Name System (DNS) Server (named) -License: BSD-3-Clause ; MIT +License: ISC Group: Productivity/Networking/DNS/Servers Version: 9.9.1P1 Release: 0 From 9d3afd5a9eb0ca0167b141693b4868553d75283c8020ccb267166e4336e633ad Mon Sep 17 00:00:00 2001 From: Uwe Gansert Date: Thu, 26 Jul 2012 09:55:26 +0000 Subject: [PATCH 2/2] security fix OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=94 --- bind-9.9.1-P1.tar.gz | 3 --- bind-9.9.1-P2.tar.gz | 3 +++ bind.changes | 23 +++++++++++++++++++++++ bind.spec | 28 ++++++++++++++++++---------- 4 files changed, 44 insertions(+), 13 deletions(-) delete mode 100644 bind-9.9.1-P1.tar.gz create mode 100644 bind-9.9.1-P2.tar.gz diff --git a/bind-9.9.1-P1.tar.gz b/bind-9.9.1-P1.tar.gz deleted file mode 100644 index 8f46d44..0000000 --- a/bind-9.9.1-P1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:2dc5886b3eb6768d312b43dbe1e23a5b67b4f4dcfa1a65b1017e7710bb764627 -size 7223197 diff --git a/bind-9.9.1-P2.tar.gz b/bind-9.9.1-P2.tar.gz new file mode 100644 index 0000000..23c516e --- /dev/null +++ b/bind-9.9.1-P2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a46ecf6177b69d6e9a83a15f792d0594adcc8e800086208dd9b84452afb84d0e +size 7223896 diff --git a/bind.changes b/bind.changes index cf1a893..199aaa1 100644 --- a/bind.changes +++ b/bind.changes @@ -1,3 +1,26 @@ +------------------------------------------------------------------- +Thu Jul 26 11:08:11 CEST 2012 - ug@suse.de + +- Prevents a named assert (crash) when validating caused by using + "Bad cache" data before it has been initialized. [RT #30025] + (bnc#772945) + +- ISC_QUEUE handling for recursive clients was updated to address a + race condition that could cause a memory leak. This rarely occurred + with UDP clients, but could be a significant problem for a server + handling a steady rate of TCP queries. [RT #29539 & #30233] + +- Under heavy incoming TCP query loads named could experience a + memory leak which could lead to significant reductions in query + response or cause the server to be terminated on systems with + "out of memory" killers. [RT #29539] + (bnc#772946) + +- A condition has been corrected where improper handling of zero-length + RDATA could cause undesirable behavior, including termination of + the named process. [RT #29644] +- 9.9.1-P2 + ------------------------------------------------------------------- Thu Jul 12 07:34:11 UTC 2012 - cfarrell@suse.com diff --git a/bind.spec b/bind.spec index 2e2985b..66257b6 100644 --- a/bind.spec +++ b/bind.spec @@ -16,10 +16,9 @@ # - Name: bind %define pkg_name bind -%define pkg_vers 9.9.1-P1 +%define pkg_vers 9.9.1-P2 BuildRequires: krb5-devel BuildRequires: libcap BuildRequires: libcap-devel @@ -33,11 +32,15 @@ BuildRequires: update-desktop-files Summary: Domain Name System (DNS) Server (named) License: ISC Group: Productivity/Networking/DNS/Servers -Version: 9.9.1P1 +Version: 9.9.1P2 Release: 0 -Provides: dns_daemon bind8 bind9 -Obsoletes: bind8 bind9 -Requires: %{name}-utils %{name}-chrootenv +Provides: bind8 +Provides: bind9 +Provides: dns_daemon +Obsoletes: bind8 +Obsoletes: bind9 +Requires: %{name}-chrootenv +Requires: %{name}-utils PreReq: %fillup_prereq %insserv_prereq bind-utils /bin/grep /bin/sed /bin/mkdir /usr/bin/tee /bin/chmod /bin/chown /bin/mv /bin/cat /usr/bin/dirname /usr/bin/diff /usr/bin/old /usr/sbin/groupadd /usr/sbin/useradd /usr/sbin/usermod Url: http://isc.org/sw/bind/ Source: ftp://ftp.isc.org/isc/bind9/%{pkg_vers}/bind-%{pkg_vers}.tar.gz @@ -96,8 +99,10 @@ structure below /var/lib/named. Summary: Development Libraries and Header Files of BIND Group: Development/Libraries/C and C++ Requires: %{name}-libs = %{version} -Provides: bind8-devel bind9-devel -Obsoletes: bind8-devel bind9-devel +Provides: bind8-devel +Provides: bind9-devel +Obsoletes: bind8-devel +Obsoletes: bind9-devel # bug437293 %ifarch ppc64 Obsoletes: bind-devel-64bit @@ -157,8 +162,11 @@ protocol. %package utils Summary: Utilities to query and test DNS Group: Productivity/Networking/DNS/Utilities -Provides: dns_utils bindutil bind9-utils -Obsoletes: bindutil bind9-utils +Provides: bind9-utils +Provides: bindutil +Provides: dns_utils +Obsoletes: bind9-utils +Obsoletes: bindutil # bug437293 %ifarch ppc64 Obsoletes: bind-utils-64bit