[el5_latest] bind97-chroot-32:9.7.0-21.P2.el5_11.3.x86_64

This package contains a tree of files which can be used as a
chroot(2) jail for the named(8) program from the BIND package.
Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

Changelog (Show File list) (Show related packages)

• Thu Sep 03 2015 Tomas Hozza <thozza@redhat.com> - 32:9.7.0-21.P2.3

  - Fix CVE-2015-5722

• Tue Jul 28 2015 Florian Weimer <fweimer@redhat.com> - 32:9.7.0-21.P2.2

  - Fix CVE-2015-5477

• Wed Dec 10 2014 Tomas Hozza <thozza@redhat.com> 32:9.7.0-21.P2.1

  - Fix CVE-2014-8500 (#1171972)

• Tue Mar 25 2014 Tomas Hozza <thozza@redhat.com> 32:9.7.0-21.P2

  - Fix CVE-2014-0591

• Tue Mar 11 2014 Tomas Hozza <thozza@redhat.com> 32:9.7.0-20.P2

  - Fix init script to not unmount filesystem when ROOTDIR is empty (#1059118)

• Mon Jul 29 2013 Tomas Hozza <thozza@redhat.com> 32:9.7.0-19.P2

  - fix for CVE-2013-4854

• Thu Mar 28 2013 Adam Tkac <atkac redhat com> 32:9.7.0-18.P2

  - fix CVE-2013-2266

• Wed Oct 24 2012 Adam Tkac <atkac redhat com> 32:9.7.0-17.P2

  - fix typo in initscript (caused by "kill the correct named" patch)

• Thu Oct 11 2012 Adam Tkac <atkac redhat com> 32:9.7.0-16.P2

  - fix CVE-2012-5166

• Fri Sep 14 2012 Adam Tkac <atkac redhat com> 32:9.7.0-15.P2

  - fix CVE-2012-4244

• Thu Jul 26 2012 Adam Tkac <atkac redhat com> 32:9.7.0-14.P2

  - fix CVE-2012-3817

• Fri Jul 13 2012 Adam Tkac <atkac redhat com> 32:9.7.0-13.P2

  - fixed various bind-chroot packaging errors (#829823)
  - generate rndc.key during `service named start` (#829827)
  - nslookup: return non-zero exit code when fail to get answer (#829829)
  - named could fail to send a uncompressable zone

• Thu Jun 21 2012 Adam Tkac <atkac redhat com> 32:9.7.0-12.P2

  - initscript should kill only the "correct" named process
  - don't check MD5, size and mtime of sysconfig/named
  - host utility now honors "attempts", "timeout" and "debug" options
    in resolv.conf
  - add new option DISABLE_ZONE_CHECKING to sysconfig/named
  - improve handling of lame responses with no SOA
  - mount /etc/named.root.key into chroot (#719855)
  - document dig exit codes
  - print "the working directory is not writable" as debug message
  - zero zone->curmaster before return in dns_zone_setmasterswithkeys()
  - fix IDN related statement in dig.1 manpage (#811566)
  - disable broken testsuite tests, they also don't work with upstream
    tarball

• Tue Jun 05 2012 Adam Tkac <atkac redhat com> 32:9.7.0-11.P2

  - fix CVE-2012-1667 and CVE-2012-1033

• Thu Nov 17 2011 Adam Tkac <atkac redhat com> 32:9.7.0-10.P2

  - fix DOS against recursive servers (#754398)

• Wed Jul 06 2011 Adam Tkac <atkac redhat com> 32:9.7.0-9.P2

  - fix CVE-2011-2464

• Sat May 28 2011 Adam Tkac <atkac redhat com> 32:9.7.0-8.P2

  - fix CVE-2011-1910

• Tue Apr 12 2011 Adam Tkac <atkac redhat com> 32:9.7.0-7.P2

  - work correctly when new DS is introduced in the trusted DNS tree (#675467)
  - include root zone DNSKEY (#693788)

• Fri Dec 03 2010 Adam Tkac <atkac redhat com> 32:9.7.0-6.P2

  - fix CVE-2010-3613 and CVE-2010-3614

• Tue Oct 19 2010 Adam Tkac <atkac redhat com> 32:9.7.0-5.P2

  - don't obsolete bind-libbind-devel, "Conflicts" with it instead

• Sat Oct 16 2010 Adam Tkac <atkac redhat com> 32:9.7.0-4.P2

  - replace bind97-rh507429.patch by improved bind97-rh643102.patch
  - don't pass unsupported "-N" option to useradd (#643323)

• Tue Sep 14 2010 Adam Tkac <atkac redhat com> 32:9.7.0-3.P2

  - don't obsolete/provide caching-nameserver, conflict with it instead (#631681)

• Fri Aug 13 2010 Adam Tkac <atkac redhat com> 32:9.7.0-2.P2

  - fix rpmdiff issues

• Thu Jun 17 2010 Adam Tkac <atkac redhat com> 32:9.7.0-1.P2

  - Initial bind97 package, based on bind-9.7.0-10.P2.fc14