From d0847e119f6620c603c3534b564e5a5d9ed95746e712aea4843e50fd0388f5e1 Mon Sep 17 00:00:00 2001 From: OBS User buildservice-autocommit Date: Tue, 23 Nov 2010 13:54:25 +0000 Subject: [PATCH 1/2] Updating link to change in openSUSE:Factory/bind revision 55.0 OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=5b2e2b251d8fa363febbaa9e4c505cd1 --- bind.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bind.spec b/bind.spec index 8462b2d..bd9fb2e 100644 --- a/bind.spec +++ b/bind.spec @@ -26,7 +26,7 @@ BuildRequires: libcap libcap-devel libmysqlclient-devel libxml2-devel openssl o BuildRequires: krb5-devel Summary: Domain Name System (DNS) Server (named) Version: 9.7.2P2 -Release: 1 +Release: 2 License: BSD3c(or similar) ; MIT License (or similar) Group: Productivity/Networking/DNS/Servers Provides: dns_daemon bind8 bind9 From 35409ae5b9391196200b5019b8995a279f0e5127b6ce0b11ec02a8144f673d85 Mon Sep 17 00:00:00 2001 From: Uwe Gansert Date: Thu, 2 Dec 2010 16:48:21 +0000 Subject: [PATCH 2/2] security fixes OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=41 --- bind-9.7.2P2.tar.gz | 3 --- bind-9.7.2P3.tar.gz | 3 +++ bind.changes | 10 ++++++++++ bind.spec | 4 ++-- 4 files changed, 15 insertions(+), 5 deletions(-) delete mode 100644 bind-9.7.2P2.tar.gz create mode 100644 bind-9.7.2P3.tar.gz diff --git a/bind-9.7.2P2.tar.gz b/bind-9.7.2P2.tar.gz deleted file mode 100644 index 6d91d9c..0000000 --- a/bind-9.7.2P2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:18e3a1607ae7f7ef49ab43663073d30318ed3713da62d96bc1537f4520fe11bd -size 7697012 diff --git a/bind-9.7.2P3.tar.gz b/bind-9.7.2P3.tar.gz new file mode 100644 index 0000000..509135b --- /dev/null +++ b/bind-9.7.2P3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2a2aae1894de059dda3a07fcb5002dd83a95eaa7131419dff5d2b07f6d5a6a83 +size 7769100 diff --git a/bind.changes b/bind.changes index 94a61ee..8432b35 100644 --- a/bind.changes +++ b/bind.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Thu Dec 2 17:38:44 CET 2010 - ug@suse.de + +- fixed VUL-0: bind: Key algorithm rollover bug + bnc#657102, CVE-2010-3614 +- fixed VUL-0: bind: allow-query processed incorrectly + bnc#657120, CVE-2010-3615 +- fixed VUL-0: bind: cache incorrectly allows a ncache entry and a rrsig for the same type + bnc#657129, CVE-2010-3613 + ------------------------------------------------------------------- Tue Nov 23 14:38:49 CET 2010 - ug@suse.de diff --git a/bind.spec b/bind.spec index bd9fb2e..1e4f6f1 100644 --- a/bind.spec +++ b/bind.spec @@ -20,12 +20,12 @@ Name: bind %define pkg_name bind -%define pkg_vers 9.7.2P2 +%define pkg_vers 9.7.2P3 BuildRequires: openldap2-devel BuildRequires: libcap libcap-devel libmysqlclient-devel libxml2-devel openssl openssl-devel BuildRequires: krb5-devel Summary: Domain Name System (DNS) Server (named) -Version: 9.7.2P2 +Version: 9.7.2P3 Release: 2 License: BSD3c(or similar) ; MIT License (or similar) Group: Productivity/Networking/DNS/Servers