diff options
| author | Adam Tkac <atkac@fedoraproject.org> | 2008-01-21 10:17:28 +0000 |
|---|---|---|
| committer | Adam Tkac <atkac@fedoraproject.org> | 2008-01-21 10:17:28 +0000 |
| commit | 28aedcff22a6ba64b4fe87d7ab98102a69eb96c4 (patch) | |
| tree | a9c170e9e0170a7de82b7c19f30559ff3d8dfa5e | |
| parent | b8ae19d8aee31e2475f986d60373be586e5f3809 (diff) | |
- CVE-2008-0122bind-9_4_2-3_fc7
| -rw-r--r-- | bind-9.5-CVE-2008-0122.patch | 20 | ||||
| -rw-r--r-- | bind.spec | 9 |
2 files changed, 27 insertions, 2 deletions
diff --git a/bind-9.5-CVE-2008-0122.patch b/bind-9.5-CVE-2008-0122.patch new file mode 100644 index 0000000..38e0a4b --- /dev/null +++ b/bind-9.5-CVE-2008-0122.patch @@ -0,0 +1,20 @@ +Index: lib/bind/inet/inet_network.c +=================================================================== +RCS file: /var/snap/bind9/lib/bind/inet/inet_network.c,v +retrieving revision 1.5 +retrieving revision 1.6 +diff -u -r1.5 -r1.6 +--- lib/bind/inet/inet_network.c 27 Apr 2005 04:56:21 -0000 1.5 ++++ lib/bind/inet/inet_network.c 15 Jan 2008 04:02:01 -0000 1.6 +@@ -84,9 +84,9 @@ + } + if (!digit) + return (INADDR_NONE); ++ if (pp >= parts + 4 || val > 0xffU) ++ return (INADDR_NONE); + if (*cp == '.') { +- if (pp >= parts + 4 || val > 0xffU) +- return (INADDR_NONE); + *pp++ = val, cp++; + goto again; + } @@ -18,7 +18,7 @@ Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv Name: bind License: BSD-like Version: 9.4.2 -Release: 2%{?dist} +Release: 3%{?dist} Epoch: 31 Url: http://www.isc.org/products/BIND/ Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -69,6 +69,7 @@ Patch65: bind-9.4.0-dig-idn.patch Patch66: bind-9.4.0-zone-freeze.patch Patch68: bind-9.4.1-ldap-api.patch Patch71: bind-9.4-dbus.patch +Patch72: bind-9.5-CVE-2008-0122.patch # Requires: bind-libs = %{epoch}:%{version}-%{release}, glibc >= 2.2, mktemp Requires(post): grep, chkconfig >= 1.3.26 @@ -292,6 +293,7 @@ popd %patch65 -p1 -b .idn %endif %patch66 -p1 -b .freeze +%patch72 -p0 -b .CVE-2008-0122 :; @@ -453,7 +455,7 @@ for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.int echo '@ in soa localhost. root 1 3H 15M 1W 1D ns localhost.' > sample/var/named/$f; done -/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.200 2007/12/19 17:11:16 atkac Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\ +/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.201 2008/01/21 10:17:28 atkac Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\ *\ * NOTE: you only need to create this file if it is to\ * differ from the following default contents: @@ -786,6 +788,9 @@ rm -rf ${RPM_BUILD_ROOT} %changelog +* Mon Jan 21 2008 Adam Tkac <atkac redhat com> 31:9.4.2-3 +- CVE-2008-0122 + * Wed Dec 19 2007 Adam Tkac <atkac redhat com> 31:9.4.2-2 - CVE-2007-6283 |