Mailinglist Archive: opensuse-commit (2092 mails)

< Previous Next >
commit bind
  • From: root@xxxxxxxxxxxxxxx (h_root)
  • Date: Thu, 09 Aug 2007 18:01:13 +0200
  • Message-id: <20070809160113.78591678182@xxxxxxxxxxxxxxx>

Hello community,

here is the log from the commit of package bind
checked in at Thu Aug 9 18:01:13 CEST 2007.

--------
--- bind/bind.changes   2007-05-26 23:43:55.000000000 +0200
+++ /mounts/work_src_done/STABLE/bind/bind.changes      2007-07-26 13:46:51.000000000 +0200
@@ -1,0 +2,8 @@
+Thu Jul 26 13:46:45 CEST 2007 - mt@xxxxxxx
+
+- Bug #294403: updated to security release 9.4.1-P1 fixing:
+  CVE-2007-2926: cryptographically weak query ids [RT #16915].
+  CVE-2007-2925: allow-query-cache/allow-recursion default
+                 acls not set [RT #16987], [RT #16960].
+
+-------------------------------------------------------------------

Old:
----
  bind-9.4.1.tar.gz

New:
----
  bind-9.4.1-P1.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ bind.spec ++++++
--- /var/tmp/diff_new_pack.O11108/_old  2007-08-09 18:00:33.000000000 +0200
+++ /var/tmp/diff_new_pack.O11108/_new  2007-08-09 18:00:33.000000000 +0200
@@ -1,5 +1,5 @@
 #
-# spec file for package bind (Version 9.4.1)
+# spec file for package bind (Version 9.4.1.P1)
 #
 # Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany.
 # This file and all modifications and additions to the pristine
@@ -12,13 +12,14 @@
 
 Name:           bind
 %define pkg_name bind
+%define pkg_vers 9.4.1-P1
 #BuildRequires:  openldap2 openldap2-devel
 BuildRequires:  openssl openssl-devel
 Summary:        Domain Name System (DNS) Server (named)
-Version:        9.4.1
-Release:        5
+Version:        9.4.1.P1
+Release:        1
 %define       SDB_LDAP_VERSION      1.0-beta
-License:        BSD License and BSD-like, X11/MIT
+License:        BSD 3-Clause, X11/MIT
 Group:          Productivity/Networking/DNS/Servers
 Provides:       dns_daemon bind8 bind9
 Obsoletes:      bind8 bind9
@@ -26,7 +27,7 @@
 PreReq:         %fillup_prereq %insserv_prereq bind-utils /bin/grep /bin/sed /bin/mkdir /usr/bin/tee /bin/chmod /bin/chown /bin/mv /bin/cat /usr/bin/dirname /usr/bin/diff /usr/bin/old /usr/sbin/groupadd /usr/sbin/useradd /usr/sbin/usermod
 Autoreqprov:    on
 URL:            http://isc.org/sw/bind/
-Source:         ftp://ftp.isc.org/isc/bind9/%{version}/bind-%{version}.tar.gz
+Source:         ftp://ftp.isc.org/isc/bind9/%{pkg_vers}/bind-%{pkg_vers}.tar.gz
 Source1:        vendor-files.tar.bz2
 Source9:        ftp://ftp.internic.net/domain/named.root
 Source40:       http://www.venaas.no/ldap/bind-sdb/dnszone-schema.txt
@@ -176,10 +177,10 @@
     ISC Software <bind@xxxxxxx>
 
 %prep
-[ "${RPM_BUILD_DIR}/%{pkg_name}-%{version}" != "/" -a -d "${RPM_BUILD_DIR}/%{pkg_name}-%{version}" ] && rm -rf "${RPM_BUILD_DIR}/%{pkg_name}-%{version}"
-%setup -n %{pkg_name}-%{version}
+[ "${RPM_BUILD_DIR}/%{pkg_name}-%{pkg_vers}" != "/" -a -d "${RPM_BUILD_DIR}/%{pkg_name}-%{pkg_vers}" ] && rm -rf "${RPM_BUILD_DIR}/%{pkg_name}-%{pkg_vers}"
+%setup -n %{pkg_name}-%{pkg_vers}
 #%setup -n %{pkg_name}-%{version} -T -D -a1 -a50
-%setup -n %{pkg_name}-%{version} -T -D -a1
+%setup -n %{pkg_name}-%{pkg_vers} -T -D -a1
 %patch -p1
 %patch1 -p1
 %patch2 -p1
@@ -676,6 +677,11 @@
 %doc %{_mandir}/man5/idnrc.5.gz
 
 %changelog
+* Thu Jul 26 2007 - mt@xxxxxxx
+- Bug #294403: updated to security release 9.4.1-P1 fixing:
+  CVE-2007-2926: cryptographically weak query ids [RT #16915].
+  CVE-2007-2925: allow-query-cache/allow-recursion default
+  acls not set [RT #16987], [RT #16960].
 * Sat May 26 2007 - ro@xxxxxxx
 - added ldconfig to postinstall script for bind-libs
 * Tue May 15 2007 - ug@xxxxxxx




++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Remember to have fun...

---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-commit+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-commit+help@xxxxxxxxxxxx

< Previous Next >
This Thread
  • No further messages