Next | Query returned 49 messages, browsing 21 to 30 | Previous

History of commit frequency

CVS Commit History:


   2013-03-02 21:33:35 by Thomas Klausner | Files touched by this commit (83)
Log message:
Bump PKGREVISION for mysql default change to 55.
   2013-02-09 01:09:43 by Fredrik Pettai | Files touched by this commit (2)
Log message:
Updated rrl patch version + source
   2013-02-07 00:24:19 by Jonathan Perkin | Files touched by this commit (1351) | Package updated
Log message:
PKGREVISION bumps for the security/openssl 1.0.1d update.
   2012-12-05 01:54:16 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update bind98 to 9.8.4p1 (BIND 9.8.4-P1) which solves CVE-2012-5688.

	--- 9.8.4-P1 released ---

3407.	[security]	Named could die on specific queries with dns64 enabled.
			[Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
   2012-12-02 12:51:45 by Ignatios Souvatzis | Files touched by this commit (1)
Log message:
PKG_OPTIONize kerberos as 'kerberos'. From: Matthias Kretschmer via PR#45823
with a minor edit.
N.B.: a minority of packages uses 'gssapi' as the option name. We should
decide on one option name and fix all packages to use the same, with
notification of the users and a transition mechanism. (Do we support, or
intend to support, any GSSAPI mechanisms other than Kerberos? In parallel?)
   2012-11-11 00:44:31 by Fredrik Pettai | Files touched by this commit (3)
Log message:
Added RRL (Response Rate Limiting) build option
   2012-11-11 00:22:50 by Fredrik Pettai | Files touched by this commit (1)
Log message:
Remove the PATCH* lines from the Makefile
   2012-10-23 19:19:22 by Aleksej Saushev | Files touched by this commit (671)
Log message:
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
   2012-10-21 17:49:07 by Aleksey Cheusov | Files touched by this commit (5)
Log message:
Add CONFLICTS between net/bind and net/host.
net/bind9*: remove "bind<x.y.z" entries from CONFLICTS. It is useless
   because package's PKGBASE is "bind".
   2012-10-10 05:06:37 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update bind98 package to 9.8.4.

Here are change changes from release note.  Note security fixes except
CVE-2012-5166 should be already fixed in previous version of bind98 package.

Please refer https://kb.isc.org/article/AA-00797 for list of full bug fixes.

Security Fixes

* A deliberately constructed combination of records could cause named to hang
  while populating the additional section of a response. [CVE-2012-5166] [RT
  #31090]
* Prevents a named assert (crash) when queried for a record whose RDATA
  exceeds 65535 bytes [CVE-2012-4244] [RT #30416]
* Prevents a named assert (crash) when validating caused by using "Bad \ 
cache"
  data before it has been initialized. [CVE-2012-3817] [RT #30025]
* A condition has been corrected where improper handling of zero-length RDATA
  could cause undesirable behavior, including termination of the named
  process. [CVE-2012-1667] [RT #29644]

New Features

* Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are
  now supported per RFC 6605. [RT #21918]

Feature Changes

* Improves OpenSSL error logging [RT #29932]
* nslookup now returns a nonzero exit code when it is unable to get an answer.
  [RT #29492]

Next | Query returned 49 messages, browsing 21 to 30 | Previous