Hello community, here is the log from the commit of package bind for openSUSE:11.3 checked in at Thu Feb 24 16:07:51 CET 2011. -------- --- old-versions/11.3/UPDATES/all/bind/bind.changes 2010-12-06 17:03:41.000000000 +0100 +++ 11.3/bind/bind.changes 2011-02-24 15:39:56.000000000 +0100 @@ -1,0 +2,9 @@ +Thu Feb 24 15:35:28 CET 2011 - ug@suse.de + +- fixed VUL-0: bind: IXFR or DDNS update combined with + high query rate DoS vulnerability + bnc#674431, CVE-2011-0414 +- version from 9.7.1-p2 to 9.7.3 + see CHANGES for details + +------------------------------------------------------------------- calling whatdependson for 11.3-i586 Old: ---- bind-9.7.1P2.tar.gz bind-9.7.2-P2_bind-9.7.2-P3.diff bind-9.7.2-P2_bind-9.7.2-P3_allow_query.diff New: ---- bind-9.7.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.spec ++++++ --- /var/tmp/diff_new_pack.zaPbly/_old 2011-02-24 16:07:17.000000000 +0100 +++ /var/tmp/diff_new_pack.zaPbly/_new 2011-02-24 16:07:17.000000000 +0100 @@ -1,7 +1,7 @@ # -# spec file for package bind (Version 9.7.1P2) +# spec file for package bind # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,12 +20,12 @@ Name: bind %define pkg_name bind -%define pkg_vers 9.7.1P2 +%define pkg_vers 9.7.3 BuildRequires: openldap2-devel BuildRequires: libcap libcap-devel libmysqlclient-devel libxml2-devel openssl openssl-devel Summary: Domain Name System (DNS) Server (named) -Version: 9.7.1P2 -Release: 0.<RELEASE3> +Version: 9.7.3 +Release: 1.<RELEASE2> License: BSD3c(or similar) ; MIT License (or similar) Group: Productivity/Networking/DNS/Servers Provides: dns_daemon bind8 bind9 @@ -46,8 +46,6 @@ Patch5: tmpfs.patch Patch51: pie_compile.diff Patch52: named-bootconf.diff -Patch60: bind-9.7.2-P2_bind-9.7.2-P3.diff -Patch61: bind-9.7.2-P2_bind-9.7.2-P3_allow_query.diff Source60: dlz-schema.txt %if %ul_version >= 1 %define VENDOR UL @@ -218,15 +216,13 @@ %patch -p1 %patch1 -p1 %patch2 -p0 -%patch4 -p1 +%patch4 -p0 %patch5 -p0 #%patch50 %if 0%{?suse_version} >= 1000 %patch51 %endif %patch52 -%patch60 -p1 -#%patch61 -p1 #%patch53 # modify settings of some files regarding to OS version and vendor function replaceStrings() ++++++ bind-9.7.1P2.tar.gz -> bind-9.7.3.tar.gz ++++++ old-versions/11.3/UPDATES/all/bind/bind-9.7.1P2.tar.gz 11.3/bind/bind-9.7.3.tar.gz differ: char 5, line 1 ++++++ perl-path.diff ++++++ --- /var/tmp/diff_new_pack.zaPbly/_old 2011-02-24 16:07:17.000000000 +0100 +++ /var/tmp/diff_new_pack.zaPbly/_new 2011-02-24 16:07:17.000000000 +0100 @@ -1,30 +1,24 @@ -Index: bind-9.6.1P1/bin/tests/t_api.pl -=================================================================== ---- bind-9.6.1P1.orig/bin/tests/t_api.pl -+++ bind-9.6.1P1/bin/tests/t_api.pl +--- bin/tests/t_api.pl ++++ bin/tests/t_api.pl 2011/02/24 08:53:35 @@ -1,4 +1,4 @@ -#!/usr/local/bin/perl +#!/usr/bin/perl # # Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1999-2001 Internet Software Consortium. -Index: bind-9.6.1P1/contrib/idn/idnkit-1.0-src/util/generate_normalize_data.pl -=================================================================== ---- bind-9.6.1P1.orig/contrib/idn/idnkit-1.0-src/util/generate_normalize_data.pl -+++ bind-9.6.1P1/contrib/idn/idnkit-1.0-src/util/generate_normalize_data.pl +--- contrib/idn/idnkit-1.0-src/util/generate_nameprep_data.pl ++++ contrib/idn/idnkit-1.0-src/util/generate_nameprep_data.pl 2011/02/24 08:53:13 @@ -1,4 +1,4 @@ -#! /usr/local/bin/perl -w +#! /usr/bin/perl -w - # $Id: generate_normalize_data.pl,v 1.1.1.1 2003/06/04 00:27:55 marka Exp $ + # $Id: generate_nameprep_data.pl,v 1.1.1.1 2003-06-04 00:27:54 marka Exp $ # - # Copyright (c) 2000,2001 Japan Network Information Center. -Index: bind-9.6.1P1/contrib/idn/idnkit-1.0-src/util/generate_nameprep_data.pl -=================================================================== ---- bind-9.6.1P1.orig/contrib/idn/idnkit-1.0-src/util/generate_nameprep_data.pl -+++ bind-9.6.1P1/contrib/idn/idnkit-1.0-src/util/generate_nameprep_data.pl + # Copyright (c) 2001 Japan Network Information Center. All rights reserved. +--- contrib/idn/idnkit-1.0-src/util/generate_normalize_data.pl ++++ contrib/idn/idnkit-1.0-src/util/generate_normalize_data.pl 2011/02/24 08:53:24 @@ -1,4 +1,4 @@ -#! /usr/local/bin/perl -w +#! /usr/bin/perl -w - # $Id: generate_nameprep_data.pl,v 1.1.1.1 2003/06/04 00:27:54 marka Exp $ + # $Id: generate_normalize_data.pl,v 1.1.1.1 2003-06-04 00:27:55 marka Exp $ # - # Copyright (c) 2001 Japan Network Information Center. All rights reserved. + # Copyright (c) 2000,2001 Japan Network Information Center. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org