------------------------------------------------------------------- Wed Nov 3 11:34:43 UTC 2021 - Josef Möllers - * Correct a glitch in bind-CVE-2020-8616.patch: patch has context "(res->dispatches6 == NULL &&" file has "(res->dispatchv6 == NULL &&" * Added option "-r" to "xargs" invocation to handle case where "find" does not find anything. * Fixed CVE-2021-25219: The lame-ttl option controls how long named caches certain types of broken responses from authoritative servers (see the security advisory for details). This caching mechanism could be abused by an attacker to significantly degrade resolver performance. The vulnerability has been mitigated by changing the default value of lame-ttl to 0 and overriding any explicitly set value with 0, effectively disabling this mechanism altogether. ISC's testing has determined that doing that has a negligible impact on resolver performance while also preventing abuse. Administrators may observe more traffic towards servers issuing certain types of broken responses than in previous BIND 9 releases. [bsc#1192146, CVE-2021-25219, bind.spec, bind-CVE-2021-25219.patch] ------------------------------------------------------------------- Fri Apr 30 08:00:45 UTC 2021 - Josef Möllers - * A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly [CVE-2021-25214, bind-CVE-2021-25214.patch] * An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself [CVE-2021-25215, bind-CVE-2021-25215.patch] * A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack This is fixed by switching from ISC's implementation to the use of gssapi. [CVE-2021-25216] [bsc#1185345] ------------------------------------------------------------------- Mon Feb 15 13:00:43 UTC 2021 - Josef Möllers - CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch] ------------------------------------------------------------------- Wed Jun 10 07:46:43 UTC 2020 - Josef Möllers - Amended documentation referring to rule types "krb5-subdomain" and "ms-subdomain". This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. [CVE-2018-5741] - Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. [CVE-2020-8616] - Replaying a TSIG BADTIME response as a request could trigger an assertion failure. [CVE-2020-8617] [bsc#1109160, bsc#1171740, CVE-2018-5741, bind-CVE-2018-5741.patch, CVE-2020-8616, bind-CVE-2020-8616.patch, CVE-2020-8617, bind-CVE-2020-8617.patch] ------------------------------------------------------------------- Wed May 29 09:35:07 UTC 2019 - Reinhard Max - CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch: Limiting simultaneous TCP clients is ineffective. ------------------------------------------------------------------- Mon May 20 12:08:35 UTC 2019 - Reinhard Max - CVE-2016-2775, bsc#989528, bind-CVE-2016-2775.patch: A query name which is too long can cause a segmentation fault in lwresd. ------------------------------------------------------------------- Fri Jan 26 14:25:50 UTC 2018 - navin.kukreja@suse.com - Update bind.keys for DNSSEC root KSK rollover (bsc#1047184) ------------------------------------------------------------------- Fri Jan 26 11:30:46 UTC 2018 - navin.kukreja@suse.com - Update named.root file (bsc#1040039) ------------------------------------------------------------------- Wed Jan 24 10:29:15 UTC 2018 - navin.kukreja@suse.com - Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118) ------------------------------------------------------------------- Thu Jun 29 08:14:24 UTC 2017 - psimons@suse.com - Added bind-CVE-2017-3142-and-3143.patch to fix a security issue where an attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143] ------------------------------------------------------------------- Mon Jan 9 15:01:12 UTC 2017 - navin.kukreja@suse.com - Apply "bind-CVE-2016-9131.patch" to fix a potential assertion failure that could have been triggered by a malformed response to an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699] - Apply "bind-CVE-2016-9147.patch" to fix a potential assertion failure that could have been triggered by responding to a query with inconsistent DNSSEC information. [CVE-2016-9147, bsc#1018701, bsc#1018699] - Apply "bind-CVE-2016-9444.patch" to fix potential assertion failure that could have been triggered by DNS responses that contain unusually-formed DS resource records. [CVE-2016-9444, bsc#1018702, bsc#1018699] ------------------------------------------------------------------- Mon Oct 31 20:55:55 UTC 2016 - sflees@suse.de - Fix an assertion failure that can lead to remote DoS: * CVE-2016-8864, bsc#1007829 * bind-CVE-2016-8864.patch ------------------------------------------------------------------ Fri Sep 23 08:01:00 UTC 2016 - sflees@suse.de - Fix an assertion failure that can lead to remote DoS: * CVE-2016-2776, bsc#1000362 * bind-CVE-2016-2776.patch ------------------------------------------------------------------- Thu Mar 10 15:07:51 UTC 2016 - max@suse.com - Fix two assertion failures that can lead to remote DoS: * CVE-2016-1285, bsc#970072 * CVE-2016-1286, bsc#970073 * bind-CVE-2016-1285.patch contains both fixes. ------------------------------------------------------------------- Mon Jan 18 16:57:59 UTC 2016 - max@suse.com - Fix Specific APL data could trigger an INSIST (CVE-2015-8704, bsc#962189). ------------------------------------------------------------------- Wed Dec 16 11:16:53 UTC 2015 - max@suse.com - Fix remote denial of service by misparsing incoming responses (CVE-2015-8000, bsc#958861). ------------------------------------------------------------------- Wed Nov 18 14:20:14 UTC 2015 - max@suse.com - Fix a regression in caching entries with a TTL of 0 (bsc#923281). ------------------------------------------------------------------- Wed Sep 2 09:30:27 UTC 2015 - max@suse.com - Fix DoS against servers performing validation on DNSSEC-signed records (CVE-2015-5722, bsc#944066). ------------------------------------------------------------------- Tue Jul 28 13:09:04 UTC 2015 - max@suse.com - Fix bind-CVE-2015-5477.patch. ------------------------------------------------------------------- Mon Jul 27 16:16:46 UTC 2015 - max@suse.com - Fix DoS against authoritative and recursive servers. bnc#939567, CVE-2015-5477 ------------------------------------------------------------------- Tue Dec 16 13:44:11 UTC 2014 - max@suse.com - Update to version 9.6-ESV-R11-W1, which is the final release of bind 9.6. - idns.96esv11.patch: A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive + query (CVE-2014-8500, bnc#908994) ------------------------------------------------------------------- Thu Aug 7 13:45:29 UTC 2014 - max@suse.com - Fix handling of TXT records in ldapdump (bnc#743758). ------------------------------------------------------------------- Wed Jan 22 15:25:53 UTC 2014 - max@suse.com - Update to version 9.6-ESV-R10-P2 to fix named crash when handling malformed NSEC3-signed zones (CVE-2014-0591, bnc#858639). ------------------------------------------------------------------- Wed Jan 9 16:42:41 UTC 2013 - max@suse.com - Update the IPv4 address of the D-root name server (bnc#796112). - Refetch named.root. ------------------------------------------------------------------- Thu Oct 11 14:27:25 UTC 2012 - max@suse.com - Specially crafted DNS data can cause a lockup in named. CVE-2012-5166, bnc#784602. - 9.6-ESV-R7-P4 ------------------------------------------------------------------- Sat Sep 15 15:39:58 UTC 2012 - meissner@suse.com - A nameserver can be caused to exit with a REQUIRE exception if it can be induced to load a specially crafted resource record. CVE-2012-4244 bnc#780157 - 9.6-ESV-R7-P3 - fetched current named.root and dnszone-schema.txt from upstream. - named.root: D has ipv6 record now ------------------------------------------------------------------- Mon Jul 30 10:22:02 CEST 2012 - ug@suse.de - Heavy DNSSEC Validation Load Can Cause a "Bad Cache"· Assertion Failure CVE-2012-3817 bnc#772945 - 9.6-ESV-R7-P2 ------------------------------------------------------------------- Tue Jun 5 15:05:15 CEST 2012 - ug@suse.de - VUL-0: bind remote DoS via zero length rdata field CVE-2012-1667 bnc#765315 - fixed some smaller bugs that could make bind crash (see CHANGES file for more details) - 9.6-ESV-R7-P1 ------------------------------------------------------------------- Fri Nov 18 16:21:59 CET 2011 - ug@suse.de - in case of a broken config, don't stop bind when doing a try-restart (bnc#727495) ------------------------------------------------------------------- Thu Nov 17 15:18:41 CET 2011 - ug@suse.de - Cache lookup could return RRSIG data associated with nonexistent records, leading to an assertion failure. (bnc#730995) CVE-2011-4313 ------------------------------------------------------------------- Thu Nov 3 15:02:19 CET 2011 - ug@suse.de - removed broken check function that can trigger false alerts during starts (bnc#567593, bnc#727495) ------------------------------------------------------------------- Fri Sep 16 15:46:37 CEST 2011 - ug@suse.de - very first "restart" can create broken configin chroot (bnc#718441) ------------------------------------------------------------------- Wed Aug 31 09:32:10 UTC 2011 - rhafer@suse.de - Fixed the ldapdump tool to also respect the "uri" setting in /etc/openldap/ldap.conf (bnc#715180) ------------------------------------------------------------------- Tue Jul 5 17:49:21 CEST 2011 - ug@suse.de - Change #2912 (see CHANGES) exposed a latent bug in the DNS message processing code that could allow certain UPDATE requests to crash named. This was fixed by disambiguating internal database representation vs DNS wire format data. [RT #24777] [CVE-2011-2464] (bnc#703907) ------------------------------------------------------------------- Tue May 31 15:11:16 CEST 2011 - meissner@suse.de - Updated to 9.6-ESV-R4-P1 for security fixes - fixed a denial of service in RRSIG (CVE-2011-1910 / bnc#696585) - build and package zkt (zone key tool) - remove manpages that overlap with pages from the man-pages package. - updated named.root from the internic ftp site. ------------------------------------------------------------------- Tue May 10 14:15:23 CEST 2011 - ug@suse.de - added libbind for bind8 compat libs (bnc#684163) ------------------------------------------------------------------- Tue Apr 12 13:02:30 CEST 2011 - ug@suse.de - Full NSEC3 support - Automatic zone re-signing - New update-policy methods tcp-self and 6to4-self - chrooted named /etc/named.keys: file not found fixed (bnc#657015) - 'rcnamed status' corrupts return value from 'checkproc' (bnc#657510) - 'rcnamed status' returns wrong code when config file is missing (bnc#659785) - version to 9.6-ESV-R4 (fate#308859) ------------------------------------------------------------------- Wed Jan 20 12:02:26 CET 2010 - ug@suse.de - [security] Do not attempt to validate or cache out-of-bailiwick data returned with a secure answer; it must be re-fetched from its original source and validated in that context. [RT #20819] - [security] Cached CNAME or DNAME RR could be returned to clients without DNSSEC validation. [RT #20737] - [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] - bnc#570912 ------------------------------------------------------------------- Wed Nov 25 11:23:18 CET 2009 - ug@suse.de - Security fix When validating, track whether pending data was from the additional section or not and only return it if validates as secure. [RT #20438] CVE-2009-4022 bnc#558260 ------------------------------------------------------------------- Wed Jul 29 16:39:32 CEST 2009 - mt@suse.de - Security Vulnerability: Dynamic Update DoS (CVE-2009-0696, VU#725188, bnc#526185) ------------------------------------------------------------------- Wed Mar 25 11:46:09 CET 2009 - ug@suse.de - Security Vulnerability: DNSSEC Lookaside Validation problem (bnc#488599) - mount /proc into chroot environment to support multi CPU systems (bnc#470828) - key names with spaces are allowed by genDDNSkey now (bnc#459739) - a missing /etc/named.conf.include could lead to an error while "restart" (bnc#455888) - /etc/named.conf does not include /etc/named.d/forwarders.conf by default (bnc#480334) ------------------------------------------------------------------- Mon Feb 23 15:27:28 CET 2009 - ug@suse.de - bind XML stats did not work (bnc#474571) ------------------------------------------------------------------- Thu Jan 8 15:24:21 CET 2009 - ug@suse.de - Security Vulnerability: insecure usage of openssl, not checking return values (bnc#464462) ------------------------------------------------------------------- Wed Dec 10 12:34:56 CET 2008 - olh@suse.de - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) ------------------------------------------------------------------- Wed Nov 26 09:53:06 CET 2008 - ug@suse.de - fix for removed /etc/named.d directory (bnc#448995) ------------------------------------------------------------------- Tue Nov 11 16:54:01 CET 2008 - ro@suse.de - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf ------------------------------------------------------------------- Thu Oct 30 12:34:56 CET 2008 - olh@suse.de - obsolete old -XXbit packages (bnc#437293) ------------------------------------------------------------------- Wed Oct 1 14:34:21 CEST 2008 - ug@suse.de - should start/stop fixed (bnc#430901) ------------------------------------------------------------------- Fri Sep 5 15:33:27 CEST 2008 - mrueckert@suse.de - delete the static libraries aswell - added missiong requires to the baselibs.conf ------------------------------------------------------------------- Mon Sep 1 14:49:33 CEST 2008 - sschober@suse.de - Create and copy /etc/named.conf.include to change root jail. Fix by Frank Hollmann. ------------------------------------------------------------------- Mon Aug 18 10:20:31 CEST 2008 - ug@suse.de - "should-stop" in lwresd init script fixed ------------------------------------------------------------------- Wed Aug 13 15:46:00 CEST 2008 - sschober@suse.de - Copy complete /etc/named.d to change root jail (bnc#408145). ------------------------------------------------------------------- Tue Aug 12 16:39:27 CEST 2008 - ug@suse.de - performance improvement over the P1 releases, namely + significantly remedying the port allocation issues + allowing TCP queries and zone transfers while issuing as many outstanding UDP queries as possible + additional security of port randomization at the same level as P1 - also includes fixes for several bugs in the 9.5.0 base code - 9.5.0-P2 ------------------------------------------------------------------- Sun Jul 27 11:51:38 CEST 2008 - aj@suse.de - Remove .la files, they only introduce more problems and require libxml2.la installation. ------------------------------------------------------------------- Wed Jul 16 12:50:46 CEST 2008 - ug@suse.de - BIND 9.5 offers many new features, including many behind-the-scenes improvements. For the most part, the non-visible features help ISC's customers who have run into the upper-end of what BIND 9.4 could handle. See CHANGES for details - Statistics Counters / server - Cache cleaning enhancements - GSS TSIG - DHCID Resource Record (RR) - Handling EDNS timeouts - version 9.5.0 ------------------------------------------------------------------- Mon Jun 9 14:18:10 CEST 2008 - ug@suse.de - VUL-0: spoofing made easier due to non-random UDP source port VU#800113 (bnc#396963) ------------------------------------------------------------------- Tue May 6 13:46:43 CEST 2008 - ug@suse.de - capset support fixed (bnc#386653) ------------------------------------------------------------------- Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de - added baselibs.conf file to build xxbit packages for multilib support ------------------------------------------------------------------- Tue Feb 26 16:51:13 CET 2008 - ug@suse.de - root.hint file updated (#361094) ------------------------------------------------------------------- Thu Dec 6 17:05:39 CET 2007 - ug@suse.de - version 9.4.2 (more than 50 bugs fixed. See changelog. for details) - root.hint file updated ------------------------------------------------------------------- Thu Jul 26 13:46:45 CEST 2007 - mt@suse.de - Bug #294403: updated to security release 9.4.1-P1 fixing: CVE-2007-2926: cryptographically weak query ids [RT #16915]. CVE-2007-2925: allow-query-cache/allow-recursion default acls not set [RT #16987], [RT #16960]. ------------------------------------------------------------------- Sat May 26 23:43:35 CEST 2007 - ro@suse.de - added ldconfig to postinstall script for bind-libs ------------------------------------------------------------------- Tue May 15 12:19:20 CEST 2007 - ug@suse.de - added apparmor profile ------------------------------------------------------------------- Wed May 2 10:30:56 CEST 2007 - ug@suse.de - version 9.4.1 - query_addsoa() was being called with a non zone db. [RT #16834] ------------------------------------------------------------------- Fri Mar 30 12:51:52 CEST 2007 - ug@suse.de - libidnkitres.la moved to bind-libs for runidn ------------------------------------------------------------------- Thu Mar 29 12:06:57 CEST 2007 - rguenther@suse.de - Package .la files in -devel subpackage. - Do not package useless .la files. - Make -devel package depend on -libs package, not -utils package. ------------------------------------------------------------------- Mon Mar 5 17:32:56 CET 2007 - ug@suse.de - SuSEFirewall service file added (#246920) fate #300687 ------------------------------------------------------------------- Tue Feb 27 14:53:22 CET 2007 - ug@suse.de - version 9.3.4 to 9.4.0 - too many changes to list them all here. Please see the CHANGELOG for details - LDAP backend dropped ------------------------------------------------------------------- Thu Jan 25 15:22:49 CET 2007 - ug@suse.de - Bug #238634 - [security] Serialise validation of type ANY responses. [RT #16555] - [security] It was possible to dereference a freed fetch context. [RT #16584] - version 9.3.3 to 9.3.4 ------------------------------------------------------------------- Fri Jan 19 10:38:46 CET 2007 - ug@suse.de - version 9.3.2 to 9.3.3 - lots of bugfixes (see changelog for details) ------------------------------------------------------------------- Tue Jan 2 15:50:59 CET 2007 - ug@suse.de - load of bind during boot fails if ip-up starts modify_resolvconf at the same time (#221948) ------------------------------------------------------------------- Fri Nov 10 12:07:56 CET 2006 - ug@suse.de - security fix (#218303) workarounds OpenSSL's recently discovered RSA signature verification issue (CVE-2006-4339) by using the exponent 65537 (0x10001) instead of the widely used 3. ------------------------------------------------------------------- Tue Oct 17 20:39:31 CEST 2006 - poeml@suse.de - there is no SuSEconfig.syslog script anymore, thus remove the YaST hint from the sysconfig template ------------------------------------------------------------------- Mon Oct 16 09:50:14 CEST 2006 - ug@suse.de - typo in sysconfig file fixed (#212337) ------------------------------------------------------------------- Fri Sep 1 14:58:28 CEST 2006 - ug@suse.de - security fix Bug #201424 VUL-0: bind: two denial-of-service attacks VU#697164 BIND INSIST failure due to excessive recursive queries VU#915404 BIND assertion failure during SIG query processing ------------------------------------------------------------------- Tue Aug 15 14:28:09 CEST 2006 - ug@suse.de - update messages removed ------------------------------------------------------------------- Fri Aug 4 13:48:56 CEST 2006 - ug@suse.de - moved the la files to bind-utils (#182448) ------------------------------------------------------------------- Thu Jul 6 12:11:11 CEST 2006 - ug@suse.de - fix for the nsupdate man page (#92730) thanx to Werner ------------------------------------------------------------------- Wed May 17 13:00:02 CEST 2006 - ug@suse.de - fix for ldapdump script (#175587) ------------------------------------------------------------------- Mon Mar 13 16:57:01 CET 2006 - ug@suse.de - typos fixed (#157611) ------------------------------------------------------------------- Wed Feb 8 14:59:58 CET 2006 - ug@suse.de - fixed #148527 a broken symlink in the chroot jail is in the way ------------------------------------------------------------------- Fri Jan 27 00:49:18 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Wed Jan 25 14:27:11 CET 2006 - ug@suse.de - fixed #145169 (follow symlinks during chroot jail creation) ------------------------------------------------------------------- Sat Jan 14 22:13:30 CET 2006 - schwab@suse.de - Don't remove sources. ------------------------------------------------------------------- Mon Jan 2 11:05:18 CET 2006 - ug@suse.de - version update from 9.3.1 to 9.3.2 ------------------------------------------------------------------- Mon Nov 21 12:16:32 CET 2005 - ug@suse.de - fixed an insecure tmp file bug in the named-bootconf.sh contrib script ------------------------------------------------------------------- Mon Sep 26 01:27:01 CEST 2005 - ro@suse.de - added LDAP_DEPRECATED to CFLAGS ------------------------------------------------------------------- Fri Jul 22 16:50:27 CEST 2005 - lmuelle@suse.de - Copy the right default file if /etc/sysconfig/named is missing while calling the lwresd init script; [#97187]. ------------------------------------------------------------------- Fri Jun 17 15:14:52 CEST 2005 - ug@suse.de - compilation with -fpie and -pie now which makes it harder to use exploits with fixed memory addresses. ------------------------------------------------------------------- Wed Apr 13 14:06:42 CEST 2005 - mls@suse.de - fix SLP registration ------------------------------------------------------------------- Fri Mar 25 18:29:09 CET 2005 - schwab@suse.de - Fix leak in lwres library [#74529]. ------------------------------------------------------------------- Fri Mar 11 18:28:37 CET 2005 - ug@suse.de - version update from 9.3.0 to 9.3.1 - fixed bug #72153 lwresd doesn't notice if name server is unreachable and times out ------------------------------------------------------------------- Fri Mar 11 16:41:26 CET 2005 - ug@suse.de - rndc dropped from the lwresd init script it conflicts with a running bind ------------------------------------------------------------------- Mon Mar 7 14:34:28 CET 2005 - ug@suse.de - lwresd init script "status" changed. rndc is not used anymore ------------------------------------------------------------------- Wed Feb 16 11:16:40 CET 2005 - ug@suse.de - lwresd name string changed (just beautify) ------------------------------------------------------------------- Fri Feb 4 11:23:14 CET 2005 - ug@suse.de - changed the "insserv" behaviour on updates - fixed empty lwresd.conf file in chroot env. ------------------------------------------------------------------- Thu Feb 3 17:48:21 CET 2005 - ug@suse.de - empty lwresd.conf file fix (Bug #49081) - lwresd is on by default now during boot ------------------------------------------------------------------- Fri Jan 21 14:46:24 CET 2005 - ug@suse.de - sdb-ldap activated (ldapdb.c version from 16.01.2005) - fixed security problem bug #49927 - remote denial-of-service An incorrect assumption in the validator (authvalidated) can result in a REQUIRE (internal consistancy) test failing and named exiting. ------------------------------------------------------------------- Tue Nov 30 11:39:04 CET 2004 - ug@suse.de - fixed #48659 "rclwresd status" answered with OKAY even if only bind was running "rcnamed status" answered with OKAY even if only lwresd was running ------------------------------------------------------------------- Fri Nov 19 14:41:32 CET 2004 - ug@suse.de - SLP support via /etc/slp.reg.d/bind.reg file added ------------------------------------------------------------------- Thu Nov 4 14:52:17 CET 2004 - ug@suse.de - version update to 9.3.0 - ldapdump script bug fixed (#44452) - dnssec-makekeyset and dnssec-signkey activated in Makefile of bin/dnssec/ ------------------------------------------------------------------- Wed Oct 13 14:30:07 CEST 2004 - lmuelle@suse.de - Add condrestart to the named init script and use same code as in skeleton to restart. - Enhance check if named or lwresd are still running if the init script is called with stop. ------------------------------------------------------------------- Mon Sep 27 17:03:38 CEST 2004 - lmuelle@suse.de - Update to version 9.2.4. - Use defines for named user and group settings. - Add PreReq groupadd and useradd to the chrootenv and lwresd package, [#46050]. - Ensure to remove temp sysconfig file in %post. - Remove warning from createNamedConfInclude script if a file is already included in /etc/named.conf as we take care of such include statements in the named init script anyway. - Remove NAMED_CONF_INCLUDE_FILES fillup from include statements of /etc/named.conf in the %post of the bind package by the same reason. ------------------------------------------------------------------- Sat Sep 18 18:29:40 CEST 2004 - lmuelle@suse.de - Add all filenames from include statements of named.conf to NAMED_CONF_INCLUDE_FILES in the named init script, [#40610]. ------------------------------------------------------------------- Thu Sep 16 12:16:14 CEST 2004 - lmuelle@suse.de - Add $remote_fs to Required-Start and Required-Stop of lwresd init script. - Add Provides: dns_daemon to the lwresd package. - Remove $time from Should-Start and Should-Stop, [#45433]. ------------------------------------------------------------------- Wed Sep 15 14:14:53 CEST 2004 - lmuelle@suse.de - Remove conflicts from bind and bind-lwrewsd package, [#45335]. - Use rndc in lwresd init script if rndc is available. ------------------------------------------------------------------- Thu Sep 9 17:02:25 CEST 2004 - lmuelle@suse.de - Create /etc/rndc.key if bind-lwresd is installed and we install bind-utils or if bind-utils is installed and we install bind-lwresd. - Use 0644 instead of 0640 for the named.conf file. - Split bind-doc from bind-utils. - Use one sysconfig file for lwresd and named. - Split common named and lwresd sysconfig settings from them unique to named. - Rename lwres to bind-lwresd and lwres-devel to bind-libs. - Ensure to create user and group 'named' in the %pre of bind-lwresd and bind-chrootenv. ------------------------------------------------------------------- Tue Sep 7 02:17:05 CEST 2004 - lmuelle@suse.de - Remove %run_ldconfig from %post of the bind package. - Move vendor files to an own tar ball. - Create new sub packages lwres, lwres-devel, and bind-chrootenv, [#44711]. - Use new update message mechanism, [#44344]. ------------------------------------------------------------------- Sun Jun 20 10:21:37 CEST 2004 - lmuelle@suse.de - Quote definition of NOM_PATH_FILE in configure.in. ------------------------------------------------------------------- Mon May 31 15:47:51 CEST 2004 - lmuelle@suse.de - Add BIND.desktop file for SuSEhelp. ------------------------------------------------------------------- Wed May 19 14:30:07 CEST 2004 - lmuelle@suse.de - Add -d, directroy option to genDDNSkey [#40786]. - Update ldapdump to version 1.1. This Version has better keyfile checks and throws an error message if a keyfile can't be found, instead of just barfing perl errors. ------------------------------------------------------------------- Wed May 12 12:43:37 CEST 2004 - lmuelle@suse.de - Update ldapdump; don't use .zone suffix for zone files. ------------------------------------------------------------------- Wed Apr 28 15:18:40 CEST 2004 - lmuelle@suse.de - Add /etc/openldap/schema/dnszone.schema to the bind-utils package. - Add /usr/share/bind/ldapdump to the bind package. - Add idnkit programs and libraries. - Add idn patches for dig, host, and nslookup. - Ensure to call functions initializeNamed, checkAndCopyConfigFiles, and namedCheckConf in the named init script only one time. Let namedCheckConf check the configuration inside the chroot. - Check all configuration files in named init script while called with probe. - Add NAMED_INITIALIZE_SCRIPTS to sysconfig.named. This allows to call arbitrary scripts before named is started, restarted, or reloaded. Therewith it's also possible to disable createNamedConfInclude entirely. - createNamedConfInclude always overwrite .SuSEconfig file [#33768]. - Rename SuSEconfig.named to createNamedConfInclude and move it to /usr/share/bind. ------------------------------------------------------------------- Sat Mar 13 21:06:48 CET 2004 - schwab@suse.de - Fix path to docs in sample named.conf. ------------------------------------------------------------------- Tue Feb 24 18:47:38 CET 2004 - poeml@suse.de - add genDDNSkey to bind-utils (formerly in dhcp-server package) - allow --keyfile and --keyname to be used with genDDNSkey, and allow using /dev/urandom to avoid blocking - in the init script, use rndc (if possible) in order to shut down, so named will flush pending changes to dynamical zones - when restarting named, make sure it is stopped before trying to start it again [#34937] - update root zone (dated Jan 29, 2004) ------------------------------------------------------------------- Thu Feb 12 09:32:30 CET 2004 - kukuk@suse.de - Fix group of named.conf.include in filelist - Build with -fno-strict-aliasing ------------------------------------------------------------------- Wed Oct 15 15:32:00 CEST 2003 - lmuelle@suse.de - update to version 9.2.3; includes the new zone type "delegation-only" to foil Verisign's sitefinder games - move root.hint to an extra source file, named.root - use /etc/named.d and /var/lib/named/master directory in the example configuration from the sample-config directory - supress superfluous warning in SuSEconfig.named if /etc/named.conf.include is empty - create /etc/rndc.key in the init script if it's missing - call namedCheckConf after checkAndCopyConfigFiles to allow us to start named after checkAndCopyConfigFiles fixed a problem - call SuSEconfig -module named not direct in the init script - add norootforbuild to the spec file - set owner of /etc/named.d and /etc/named.d/rndc-access.conf to root: - add additional x while testing strings in the init script - always include /etc/rndc.key in rndc-access.conf - remove absolet stdtime.diff - remove ip6rev.diff, as one part is included upstream and the other isn't possible any longer ------------------------------------------------------------------- Wed Oct 8 17:19:25 CEST 2003 - schwab@suse.de - Fix typo in last change. ------------------------------------------------------------------- Mon Sep 29 15:37:35 CEST 2003 - kukuk@suse.de - Create named.conf.include if it does not exist [Bug #31683] - Don't add rndc-access.conf at update [Bug #31696] ------------------------------------------------------------------- Fri Sep 19 13:01:53 CEST 2003 - kukuk@suse.de - Fix all useradd calls ------------------------------------------------------------------- Mon Sep 15 08:35:06 CEST 2003 - kukuk@suse.de - Fix Requires and Provides [Bug #30717] ------------------------------------------------------------------- Fri Aug 29 12:29:03 CEST 2003 - kukuk@suse.de - Call useradd with -r for system accounts [Bug #29611] ------------------------------------------------------------------- Thu Aug 28 20:06:46 CEST 2003 - lmuelle@suse.de - call sbin/SuSEconfig --module named and not directly the script in the %post section - check if rndc is accessible in the init script ------------------------------------------------------------------- Tue Aug 26 17:35:10 CEST 2003 - lmuelle@suse.de - add Config: syslog-ng to sysconfig.syslog-named ------------------------------------------------------------------- Sat Aug 23 01:29:39 CEST 2003 - lmuelle@suse.de - add NAMED_ARGS to sysconfig.named - use -r /dev/urandom while calling rndc-confgen in the post section ------------------------------------------------------------------- Thu Aug 21 16:46:12 CEST 2003 - lmuelle@suse.de - rename package from bind9 to bind - add stop_on_removal and restart_on_update macros to preun and postun section fix bug #29048 - add default /etc/named.d/rndc-access.conf - add SuSEconfig.named - add all included files to NAMED_CONF_INCLUDE_FILES of /etc/sysconfig/named while update if NAMED_CONF_INCLUDE_FILES is empty - add additional sysconfig meta data - remove -u from the copy in prepare_chroot() of the init script due to the rist of a wrong system time - unify init scripts; add one space at the end to all echos - document new features in the README.{SuSE,UnitedLinux} - fix bug #28585 ------------------------------------------------------------------- Mon May 26 15:52:42 CEST 2003 - lmuelle@suse.de - add -u to copy in prepare_chroot() of the init script, #25687 - fix output format in init script ------------------------------------------------------------------- Fri Apr 11 15:01:00 CEST 2003 - mludvig@suse.cz - Make nibble queries instead of bitstring ones for IPv6 addresses. - Differentiate between 6bone (3ffe::/16, .ip6.int) and other addresses (!3ffe::/16, ip6.arpa). ------------------------------------------------------------------- Wed Mar 12 13:58:35 CET 2003 - lmuelle@suse.de - fix try-restart part of init skript - set PATH to "/sbin:/usr/sbin:/bin:/usr/bin", #21295 ------------------------------------------------------------------- Mon Mar 10 18:40:40 CET 2003 - lmuelle@suse.de - remove %ghost from /var/lib/named/var/log ------------------------------------------------------------------- Mon Mar 10 18:03:36 CET 2003 - lmuelle@suse.de - add null logging for lame-servers to logging example in named.conf - fix file section - change /var/run/named to a sym link pointing to /var/lib/named/var/run/named, #24768 ------------------------------------------------------------------- Wed Mar 5 17:09:20 CET 2003 - lmuelle@suse.de - remove empty.zone due to possibility of CIDR addressing - remove rndc.conf; rndc also uses rndc.key, fix bug #17751 - create rndc.key with 512bit sized key in %post - remove %pre of utils package - create additional sub directories log, dyn and master in /var/lib/named - add a non active logging example to named.conf ------------------------------------------------------------------- Tue Mar 4 17:50:58 CET 2003 - lmuelle@suse.de - update to version 9.2.2; maintenance/ bugfix release ------------------------------------------------------------------- Sat Mar 1 17:41:47 CET 2003 - ro@suse.de - also create named user/group in utils preinstall ------------------------------------------------------------------- Thu Feb 27 23:53:01 CET 2003 - ro@suse.de - create named user/group in preinstall and install ------------------------------------------------------------------- Thu Feb 27 14:00:59 CET 2003 - lmuelle@suse.de - set /etc/named.conf to root:named and 0640 - add an example to additional info mail for dynamic updates - add more information to the README - add sysconfig file for chroot jail; default is yes - add chroot features to init script for start and reload ------------------------------------------------------------------- Mon Feb 24 16:56:17 CET 2003 - lmuelle@suse.de - add separate binaries to PreReq - add --localstatedir=/var to configure call - add and autocreate /etc/rndc.{conf,key} - move rndc binaries and man pages to utils package - fix %post in case of update - set ownership of /var/lib/named to root: - add a README - fix init script to return correspondig message to checkproc return code - remove umlauts from %post mail - add additional info mail about ownership of /var/lib/named if journal files are used ------------------------------------------------------------------- Mon Feb 17 22:48:21 CET 2003 - lmuelle@suse.de - update bind9 to version 9.2.1 - move /var/named to /var/lib/named - remove obsolete patches (bison, ltconfig_ppc64, manpages, security) ------------------------------------------------------------------- Wed Nov 13 01:43:18 CET 2002 - ro@suse.de - fix build with current bison (end all rules with ";") ------------------------------------------------------------------- Sat Sep 7 16:31:04 CEST 2002 - kukuk@suse.de - Fix running bind9 as user named [Bug #18417] ------------------------------------------------------------------- Mon Aug 19 15:22:43 CEST 2002 - ro@suse.de - added prereqs (#17807) ------------------------------------------------------------------- Mon Aug 19 12:50:37 CEST 2002 - okir@suse.de - Added patch to make named run as non-root user - added "-u named" option to init script invocation of named ------------------------------------------------------------------- Sun Jul 28 13:38:54 CEST 2002 - kukuk@suse.de - Remove yacc from neededforbuild ------------------------------------------------------------------- Sat Jul 27 18:17:13 CEST 2002 - adrian@suse.de - add %run_ldconfig ------------------------------------------------------------------- Mon Jul 22 09:57:32 CEST 2002 - kukuk@suse.de - Move .so symlinks to devel package - Move liblwres shared library to utils package - make lib64 clean ------------------------------------------------------------------- Wed Jul 10 22:29:04 CEST 2002 - olh@suse.de - hack ltconfig for ppc64 to build shared libs ------------------------------------------------------------------- Wed Jul 10 16:36:30 MEST 2002 - draht@suse.de - move /usr/bin/nsupdate to bindutil (#16944) ------------------------------------------------------------------- Mon Jun 3 10:59:07 CEST 2002 - okir@suse.de - Applied security fix for remote DoS (CERT VU#739123) ------------------------------------------------------------------- Fri Dec 14 17:55:36 CET 2001 - ro@suse.de - removed START_NAMED ------------------------------------------------------------------- Wed Sep 5 20:32:15 CEST 2001 - pthomas@suse.de - Fix incorrect .so references in lwres manpages. ------------------------------------------------------------------- Sun Aug 12 15:04:44 CEST 2001 - kukuk@suse.de - Fix path to perl interpreter ------------------------------------------------------------------- Wed Jul 4 09:06:38 CEST 2001 - bodammer@suse.de - Update to bind-9.1.3 (release) - Config-files moved away from bind-9.1.3.dif ------------------------------------------------------------------- Mon Jul 2 11:49:12 CEST 2001 - bodammer@suse.de - update to bind-9.1.3rc3 - "Implicit declaration of function time" in context.c fixed ------------------------------------------------------------------- Mon Jun 25 10:48:06 CEST 2001 - bodammer@suse.de - update to bind-9.1.3rc2 ------------------------------------------------------------------- Tue May 29 11:09:59 CEST 2001 - bodammer@suse.de - update to bind-9.1.3rc1 ------------------------------------------------------------------- Thu May 10 14:41:05 CEST 2001 - bodammer@suse.de - initscript fix: don't start bind in runlevel 2 [bug #7956] ------------------------------------------------------------------- Tue May 8 15:53:04 CEST 2001 - mfabian@suse.de - bzip2 sources ------------------------------------------------------------------- Tue May 8 10:03:00 CEST 2001 - bodammer@suse.de - install a new named.conf with comments ------------------------------------------------------------------- Mon May 7 13:38:25 CEST 2001 - bodammer@suse.de - update to bind-9.1.2 (release) ------------------------------------------------------------------- Tue Apr 24 12:18:01 CEST 2001 - bodammer@suse.de - little modification to named.conf ------------------------------------------------------------------- Thu Mar 29 13:21:29 CEST 2001 - bodammer@suse.de - update to bind-9.1.1 (release) ------------------------------------------------------------------- Tue Mar 27 10:50:55 CEST 2001 - bodammer@suse.de - update to bind-9.1.1rc7 ------------------------------------------------------------------- Fri Mar 23 10:39:53 CET 2001 - bodammer@suse.de - update to bind-9.1.1rc6 ------------------------------------------------------------------- Thu Mar 15 14:47:49 CET 2001 - bodammer@suse.de - update to bind-9.1.1rc5 - new initscript more LSB conform ------------------------------------------------------------------- Mon Mar 12 13:34:23 CET 2001 - bodammer@suse.de - update to bind-9.1.1rc4 ------------------------------------------------------------------- Tue Feb 27 17:05:04 CET 2001 - bodammer@suse.de - initscript fix: now checks for a running named ------------------------------------------------------------------- Tue Feb 27 09:18:09 CET 2001 - bodammer@suse.de - update to bind-9.1.1rc3 ------------------------------------------------------------------- Thu Feb 15 15:04:08 CET 2001 - sf@suse.de - added suse_update_config ------------------------------------------------------------------- Wed Feb 14 13:27:11 CET 2001 - bodammer@suse.de - update to bind-9.1.1rc2 ------------------------------------------------------------------- Mon Feb 12 18:04:03 CET 2001 - bodammer@suse.de - subpackages bind9-util and bind9-devel created ------------------------------------------------------------------- Thu Feb 8 12:08:50 CET 2001 - bodammer@suse.de - update to bind-9.1.1rc1 - missing headerfile included in stdtime.c ------------------------------------------------------------------- Thu Jan 18 09:40:33 CET 2001 - bodammer@suse.de - update to bind-9.1.0 ------------------------------------------------------------------- Tue Nov 28 19:01:37 CET 2000 - bodammer@suse.de - Fix location of rcscript ------------------------------------------------------------------- Thu Nov 23 23:46:02 CET 2000 - ro@suse.de - added insserv calls ------------------------------------------------------------------- Thu Nov 23 22:40:37 CET 2000 - bodammer@suse.de - rcscript update ------------------------------------------------------------------- Mon Nov 13 18:19:00 CET 2000 - bodammer@suse.de - update to bind-9.0.1 ------------------------------------------------------------------- Fri Oct 6 18:09:53 CEST 2000 - kukuk@suse.de - change group tag ------------------------------------------------------------------- Mon Sep 18 11:07:47 CEST 2000 - bodammer@suse.de - update to bind-9.0.0 ( first release version ) ------------------------------------------------------------------- Wed Aug 30 13:19:52 CEST 2000 - bodammer@suse.de - update to bind-9.0.0rc5 ------------------------------------------------------------------- Wed Aug 16 09:30:11 CEST 2000 - bodammer@suse.de - update to bind-9.0.0rc3 ------------------------------------------------------------------- Thu Aug 10 19:50:49 CEST 2000 - bodammer@suse.de - update to bind-9.0.0rc2 - nslookup renamed to nslookup9 ------------------------------------------------------------------- Thu Jul 13 09:53:58 CEST 2000 - bodammer@suse.de - update to bind-9.0.0rc1 (release candidate) ------------------------------------------------------------------- Mon Jul 3 23:10:21 CEST 2000 - bodammer@suse.de - update to bind-9.0.0b5 - host renamed to host9 ------------------------------------------------------------------- Fri Jun 16 10:55:41 CEST 2000 - bodammer@suse.de - update to bind-9.0.0b4 ------------------------------------------------------------------- Thu May 25 18:19:21 CEST 2000 - bodammer@suse.de - dig renamed to dig9 to avoid conflicts with dig from bindutil - libtool-fix added - option -f added to suse_update_config-macro ------------------------------------------------------------------- Wed May 24 10:10:43 CEST 2000 - bodammer@suse.de - update to bind-9.0.0b3 - configure option added to build shared libraries ------------------------------------------------------------------- Mon May 15 15:49:35 CEST 2000 - schwab@suse.de - Update config files. - Fix 64-bit bug. ------------------------------------------------------------------- Fri May 12 16:24:15 CEST 2000 - bodammer@suse.de - update to bind9-snap-20000510 ------------------------------------------------------------------- Tue May 2 09:44:15 CEST 2000 - bodammer@suse.de - update to bind9-snap-20000427a ------------------------------------------------------------------- Wed Apr 19 10:27:15 CEST 2000 - bodammer@suse.de - update to bind9-snap-20000414 ------------------------------------------------------------------- Tue Mar 28 19:03:17 CEST 2000 - bodammer@suse.de - update to bind-9.0.0b2 ------------------------------------------------------------------- Mon Feb 7 21:26:09 CET 2000 - bodammer@suse.de - first public beta version bind-9.0.0b1