Hello community, here is the log from the commit of package bind for openSUSE:Factory checked in at Thu Jan 21 10:45:06 CET 2010. -------- --- bind/bind.changes 2010-01-04 14:30:41.000000000 +0100 +++ /mounts/work_src_done/STABLE/bind/bind.changes 2010-01-20 10:05:37.000000000 +0100 @@ -1,0 +2,14 @@ +Wed Jan 20 10:06:22 CET 2010 - ug@suse.de + +- [security] Do not attempt to validate or cache + out-of-bailiwick data returned with a secure + answer; it must be re-fetched from its original + source and validated in that context. [RT #20819] + +- [security] Cached CNAME or DNAME RR could be returned to clients + without DNSSEC validation. [RT #20737] + +- [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] +- version 9.6.1-P3 + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- bind-9.6.1P2.tar.gz New: ---- bind-9.6.1P3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.spec ++++++ --- /var/tmp/diff_new_pack.9pCIok/_old 2010-01-21 10:39:50.000000000 +0100 +++ /var/tmp/diff_new_pack.9pCIok/_new 2010-01-21 10:39:50.000000000 +0100 @@ -1,5 +1,5 @@ # -# spec file for package bind (Version 9.6.1P2) +# spec file for package bind (Version 9.6.1P3) # # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -20,12 +20,12 @@ Name: bind %define pkg_name bind -%define pkg_vers 9.6.1P2 +%define pkg_vers 9.6.1P3 #BuildRequires: openldap2 openldap2-devel BuildRequires: libcap libcap-devel libmysqlclient-devel libxml2-devel openssl openssl-devel Summary: Domain Name System (DNS) Server (named) -Version: 9.6.1P2 -Release: 2 +Version: 9.6.1P3 +Release: 1 %define SDB_LDAP_VERSION 1.0-beta License: BSD3c(or similar) ; MIT License (or similar) Group: Productivity/Networking/DNS/Servers ++++++ bind-9.6.1P2.tar.gz -> bind-9.6.1P3.tar.gz ++++++ bind/bind-9.6.1P2.tar.gz /mounts/work_src_done/STABLE/bind/bind-9.6.1P3.tar.gz differ: byte 5, line 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org