[SECURITY] Fedora 7 Update: bind-9.4.2-2.fc7

updates at fedoraproject.org updates at fedoraproject.org
Thu Dec 20 20:14:27 UTC 2007


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-4658
2007-12-20 00:53:48
--------------------------------------------------------------------------------

Name        : bind
Product     : Fedora 7
Version     : 9.4.2
Release     : 2.fc7
URL         : http://www.isc.org/products/BIND/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server.
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

- fixed address of L.ROOT-SERVERS.NET (#411141)
- CVE-2007-6283
--------------------------------------------------------------------------------
ChangeLog:

* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 31:9.4.2-2
- CVE-2007-6283
* Wed Dec  5 2007 Adam Tkac <atkac redhat com> 31:9.4.2-1.1
- update named.ca file (new L.ROOT-SERVERS.NET, #411141)
* Thu Nov 29 2007 Adam Tkac <atkac redhat com> 31:9.4.2-1
- final 9.4.2
* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.5.rc1
- updated to 9.4.2-rc2
* Mon Nov 12 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.4.1.rc1
- new L.ROOT-SERVERS.NET address
* Tue Oct  9 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.4.rc1
- updated to 9.4.2rc1
- patches merged to upstream
  - bind-9.4-update.patch
  - bind-9.4-_res_errno.patch
* Mon Sep 17 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.3.1.b1
- moved caching-nameserver chroot files to bind-chroot (#287321)
* Thu Sep  6 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.3.b1
- patches bind-9.4-2119_revert.patch and
  libbind-9.3.1rc1-fix_h_errno.patch are obsoleted by
  bind-9.4-_res_errno.patch
* Fri Aug 31 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.2.b1
- temporary revert ISC 2119 change which conflicts with our
  "libbind-errno" patch (#254501)
* Tue Aug 21 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.1.b1
- updated to 9.4.2b1
- dropped patches
  - bind-bsdcompat (upstream)
  - bind-9.4-tsig-init (upstream)
  - bind-9.3.3rc2-dbus (obsoleted by bind-9.4-dbus.patch)
  - bind-9.4.0-dbus-race-condition.patch (upstream)
  - bind-9.3.4-sdb-sqlite-src.patch (upstream)
* Tue Aug 14 2007 Adam Tkac <atkac redhat com> 31:9.4.1-9.P1
- named could crash when deleting SRV record with UPDATE (#251336)
* Thu Jul 26 2007 Adam Tkac <atkac redhat com> 31:9.4.1-8.P1
- backported patch to #249701 from BIND's HEAD
* Tue Jul 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-7.P1
- updated to latest upstream (contains fixes for CVE-2007-2925 and
  CVE-2007-2926)
* Thu Jun 21 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6.1
- minor changes in caching-nameserver configuration
* Mon Jun 18 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6
- major changes in default caching-nameserver configuration (configuration
  could now honor RFCs, #243565)
* Tue Jun  5 2007 Adam Tkac <atkac redhat com> 31:9.4.1-5
- added /var/named/dynamic directory. This directory is primary designed
  for dynamic DNS zones. In future releases named could write only into
  dynamic, data and slaves directories
* Thu May 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-4
- start using deprecated ldap API
- fix minor bug in bind-chroot-admin (#241103)
* Tue May 15 2007 Adam Tkac <atkac redhat com> 31:9.4.1-3
- fixed bind-chroot-admin dynamic DNS handling (#239149)
- rewrited ldap backend to latest API (#239802)
- updated zone-freeze patch to latest upstream
* Mon May  7 2007 Adam Tkac <atkac redhat com> 31:9.4.1-2
- test build on new build system
* Wed May  2 2007 Adam Tkac <atkac redhat com> 31:9.4.1-1
- updated to 9.4.1 which contains fix to CVE-2007-2241
* Fri Apr 27 2007 Adam Tkac <atkac redhat com> 31:9.4.0-8
- improved "zone freeze patch" - if multiple zone with same name exists
  no zone is freezed
- minor cleanup in caching-nameserver's config file
- fixed race-condition in dbus code (#235809)
- added forgotten restorecon statement in bind-chroot-admin
* Tue Apr 17 2007 Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
- removed DEBUGINFO option because with this option (default) was bind
  builded with -O0 and without this flag no debuginfo package was produced.
  (I want faster bind => -O2 + debuginfo)
- fixed zone finding (#236426)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #423061 - CVE-2007-6283 bind: /etc/rndc.key has 644 permissions by default [f7]
        https://bugzilla.redhat.com/show_bug.cgi?id=423061
  [ 2 ] Bug #411141 - caching-nameserver 9.4.2-1 doesn't have new IP address for L.ROOT-SERVERS.NET
        https://bugzilla.redhat.com/show_bug.cgi?id=411141
--------------------------------------------------------------------------------
Updated packages:

28aa0cb1542e256567c44d647896b990a448b538 bind-debuginfo-9.4.2-2.fc7.ppc64.rpm
f38a44e7deb3a51cb5d2aac2dee8b29041b575aa bind-sdb-9.4.2-2.fc7.ppc64.rpm
550dc2cce14a959ac835388d03d4b1f6a6020f99 bind-chroot-9.4.2-2.fc7.ppc64.rpm
ef2c12d2b581d09888d872d839105e162e5b648c caching-nameserver-9.4.2-2.fc7.ppc64.rpm
2f68c806bb44e198709fb762a9168ab204cfdc9d bind-devel-9.4.2-2.fc7.ppc64.rpm
b94bc818ceaa6cb99ddf06cb6e285503969c49ca bind-utils-9.4.2-2.fc7.ppc64.rpm
30a3f2c3fd4230fdda63c61f3854c96d3f62e4c1 bind-libs-9.4.2-2.fc7.ppc64.rpm
89f34527b435c866cb25c653feea60e43779308b bind-9.4.2-2.fc7.ppc64.rpm
8717315b3ef5aad2783706f46c225b0677e7d8a3 bind-debuginfo-9.4.2-2.fc7.i386.rpm
82bddaa83e1050a0428f07564fbefc5a5578d9d9 bind-sdb-9.4.2-2.fc7.i386.rpm
fab36ba9bda8e68e8e7df80ea8314b425e5cf236 bind-chroot-9.4.2-2.fc7.i386.rpm
5ab240909b5b15efba07d582a80857857f03e700 caching-nameserver-9.4.2-2.fc7.i386.rpm
d31ad35127346d4ffa36516c74397d68d41e3e54 bind-devel-9.4.2-2.fc7.i386.rpm
226f1011da3c6479deee69879dbbb1dd755bb3c0 bind-utils-9.4.2-2.fc7.i386.rpm
9a95c4f451f51124dc54c60069cf357a2a053871 bind-libs-9.4.2-2.fc7.i386.rpm
b4e84407eae66da8504a69c06f5eff9559c6e7ee bind-9.4.2-2.fc7.i386.rpm
bfbe66bb3397fc5ab4156c0d2883060e9434a5b2 bind-debuginfo-9.4.2-2.fc7.x86_64.rpm
ae392890fe78fa9c0d3e62185bbf98450e58fc02 bind-sdb-9.4.2-2.fc7.x86_64.rpm
3620e07de93b09fb91ac1034b80c92340584fa84 bind-chroot-9.4.2-2.fc7.x86_64.rpm
ec48d1ce52081d57a4376bc713e6b15b64163857 caching-nameserver-9.4.2-2.fc7.x86_64.rpm
b049a47024bbd3f2bd8961256e1555cdd91639d2 bind-devel-9.4.2-2.fc7.x86_64.rpm
40359837bdd91d8c4d3bb16bb826566be9c0a570 bind-utils-9.4.2-2.fc7.x86_64.rpm
a36c6ae65a6b553f447af070f888905fdf322778 bind-libs-9.4.2-2.fc7.x86_64.rpm
8f46f979da47966c58975cbd5b890a9db986db72 bind-9.4.2-2.fc7.x86_64.rpm
08b2c7747e77196c9574d73286f194e7bc23b190 bind-debuginfo-9.4.2-2.fc7.ppc.rpm
17c4028bc822f413e923559770e5a27193a4c17b bind-sdb-9.4.2-2.fc7.ppc.rpm
d0ded87feb4c6c334960663dde0ac26e766b7624 bind-chroot-9.4.2-2.fc7.ppc.rpm
6296b2638170139ae2ae7fbfd959b938dedc91b4 caching-nameserver-9.4.2-2.fc7.ppc.rpm
ce6b28ab008940a081592cd6e98812963d763b4e bind-devel-9.4.2-2.fc7.ppc.rpm
2bf42b996bb2721e7eee6b6e81b6e5c18a767bd9 bind-utils-9.4.2-2.fc7.ppc.rpm
ea446d15fb1a872b0c71baa6227307fd78cb6817 bind-libs-9.4.2-2.fc7.ppc.rpm
c344aebd68febf277a61f072f8fab594e171f095 bind-9.4.2-2.fc7.ppc.rpm
0d34235a42edea98d289c88167b9a7e714246f0d bind-9.4.2-2.fc7.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update bind' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------




More information about the package-announce mailing list