Changelog for bind-light-devel-9.3.4-3tr.i586.rpm :
Wed Jul 25 03:00:00 2007 Nived Gopalan 9.3.4-3tr
- Updated to bind 9.3.4-p1.
- SECURITY Fix: Amit Klein has reported a vulnerability in BIND,
caused due to predictable query IDs in outgoing queries which can
be exploited to poison the DNS cache when the query ID is guessed.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2007-2926 to this issue.

Tue Feb 6 02:00:00 2007 Nived Gopalan 9.3.4-2tr
- Optimize at -O1 instead of -O2, Fixed Bug #2086.

Thu Jan 25 02:00:00 2007 Nived Gopalan 9.3.4-1tr
- New Upstream.
- Multiple security fixes.

Fri Dec 29 02:00:00 2006 Nived Gopalan 9.3.3-2tr
- Built without stack protector.

Thu Dec 28 02:00:00 2006 Nived Gopalan 9.3.3-1tr
- New Upstream.

Mon Nov 6 02:00:00 2006 Nived Gopalan 9.3.2-6tr
- New Upstream.
- SECURITY Fix: Raise the minimum safe OpenSSL versions to OpenSSL 0.9.7l
and OpenSSL 0.9.8d. Versions prior to these have known security flaws
which are (potentially) exploitable in named. [RT #16391]
- Change the default RSA exponent from 3 to 65537.

Tue Sep 26 03:00:00 2006 Nived Gopalan 9.3.2-5tr
- Copy multiple zone files to jail, Bug #1926.

Tue Sep 12 03:00:00 2006 Nived Gopalan 9.3.2-4tr
- New Upstream.
- SECURITY Fix: Some vulnerabilities have been reported in BIND,
which can be exploited by malicious people to cause a DoS.
- Fix an assertion error within the processing of SIG queries that
can be exploited to crash either a recursive server when more than
one SIG(covered) Resource Record set (RRset) is returned or an
authoritative server serving a RFC 2535 DNSSEC zone where there
are multiple SIG(covered) RRsets.
- Fix an error within the handling of multiple recursive queries that
can be exploited to trigger an INSIST failure by causing the response
to the query to arrive after all clients looking for the response have
left the recursion queue.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the names CVE-2006-4095 and CVE-2006-4096 to these issues.

Mon Aug 21 03:00:00 2006 Bipin S 9.3.2-3tr
- Fixed Bug#1722.

Fri Feb 17 02:00:00 2006 Ajith Thampi 9.3.2-2tr
- rndc.key is 640 permission. Bug #1614

Thu Feb 9 02:00:00 2006 Bipin S 9.3.2-1tr
- New Upstream.

Tue Aug 16 03:00:00 2005 Erlend Midttun 9.3.1-4tr
- Split common zones to a separate file.

Wed Jul 27 03:00:00 2005 Syed Shabir Zakiullah 9.3.1-3tr
- Fix named.init for reloadproc, Fix bug #1131.

Mon May 2 03:00:00 2005 Ajith Thampi 9.3.1-2tr
- Fix File Conflicts Issue, Bug #556

Fri Apr 29 03:00:00 2005 Erlend Midttun 9.3.1-1tr
- New upstream.
- Make sure init script does not nuke the jail if the umount fails.

Thu Apr 21 03:00:00 2005 Bipin S 9.3.0-6tr
- Patch applied for root.cache

Fri Feb 4 02:00:00 2005 Oystein Viggen 9.3.0-5tr
- CAN-2005-0034, DoS in validator

Thu Nov 25 02:00:00 2004 Erlend Midttun 9.3.0-5tr
- Add conflicts.

Wed Nov 10 02:00:00 2004 Erlend Midttun 9.3.0-4tr
- No longer have duplicate ownership of .la files.

Tue Nov 9 02:00:00 2004 Oystein Viggen 9.3.0-3tr
- Rebuild with shared openssl

Fri Oct 1 03:00:00 2004 Syed Shabir 9.3.0-1tr
- New Upstream

Wed Mar 10 02:00:00 2004 Erlend Midttun 9.2.3-5tr
- Added allow-query { any; }; to the external view.

Tue Feb 17 02:00:00 2004 Erlend Midttun 9.2.3-4tr
- Now create /etc/ in jail as well.
- Now have named own master directory as well to allow remote updates.
- Changed names of the zone files to zonename.
- Moved the rndc.key to the rest of the rndc stuff.

Thu Feb 12 02:00:00 2004 Tor Hveem 9.2.3-3th
- Move sysconfig to main package

Sun Jan 25 02:00:00 2004 Erlend Midttun 9.2.3-2tr
- No longer own /usr/share/man/man1

Tue Dec 2 02:00:00 2003 Erlend Midttun 9.2.3-1em
- New upstream.

Tue Sep 23 03:00:00 2003 Erlend Midttun 9.2.2p3-1tr
- Updated to 9.2.2-P3.
- Merged named.conf with \"Securing BIND template\" from Rob Thomas.
- Changed init script to now have all jail setup in itself instead
of in a separate script.
- Now allow bind to run
*without
* chroot if configured that way.

Thu Sep 11 03:00:00 2003 Erlend Midttun 9.2.2-10tr
- Restrict queries to prevent unauthorized queries as outlined in a post
on Bugtraq Sep 9 2003 by Chris Brenton.

Mon Aug 25 03:00:00 2003 Chr. Toldnes 9.2.2-9tr
- Bugfixing the jail, now even save the slave zones.

Mon Jun 23 03:00:00 2003 Erlend Midttun 9.2.2-8tr
- Added %defattr.

Wed Jun 18 03:00:00 2003 Erlend Midttun 9.2.2-7tr
- Big rebuild

Tue May 27 03:00:00 2003 Erlend Midttun 9.2.2-6em
- Cleaned up Req\'s and PreReq\'s.

Mon Apr 28 03:00:00 2003 Erlend Midttun 9.2.2-5em
- Make reload and a few other arguments to initscript work.

Wed Apr 9 03:00:00 2003 Erlend Midttun 9.2.2-4em
- Moved user/group generation to bind-libs
- Changed uid/gid to 98/98.

Mon Mar 24 02:00:00 2003 Erlend Midttun 9.2.2-3em
- Rebuilt against glibc 2.3.2.

Tue Mar 11 02:00:00 2003 Erlend Midttun 9.2.2-2em
- named.conf(5) does no longer contain the cname log option as the
option was removed.

Mon Mar 10 02:00:00 2003 Erlend Midttun 9.2.2-1em
- Make reload work.
- Upgrade to 9.2.2.
- Uses /etc/rndc.key for both daemon and rndc.

Thu Feb 27 02:00:00 2003 Erlend Midttun 9.2.1-7em
- Moved the light libraries needed by many to the bind-libs package.

Fri Jan 31 02:00:00 2003 Erlend Midttun 9.2.1-6em
- Typo.

Fri Jan 31 02:00:00 2003 Erlend Midttun 9.2.1-5em
- Cleaned out bugs #51, #52, #53 and #76:
- service named start now works
- service named status now works
- service named stop now works

Sun Jan 19 02:00:00 2003 Gerald Dachs 9.2.1-4gd
- rebuilt against openssl 0.9.7

Thu Nov 21 02:00:00 2002 Christian H. Toldnes 9.2.1-2ct
- named initscript now uses $INITLOCK
- includes geralds syslog/mount fixes

Mon Oct 21 03:00:00 2002 Goetz Bock 9.2.1-2bg
- added openssl buidlreq

Tue Aug 13 03:00:00 2002 Christian H. Toldnes 9.2.1-1ct
- Correct user/group handling
- Correct logging in chroot jail
- Correct init-script
- Better file separation between packages.
- New upstream version
- -common changed to -libs
- Changed name to bind

Wed Nov 21 02:00:00 2001 Christian H. Toldnes
- New upstream version 9.2.0rc10

Mon Nov 12 02:00:00 2001 Christian H. Toldnes
- New upstream version 9.2.0rc9

Mon Oct 29 02:00:00 2001 Christian H. Toldnes
- New upstream version 9.2.0rc8 and chroot-jail

Wed Oct 17 03:00:00 2001 Christian H. Toldnes
- New upstream version 9.2.0rc7 and finish remake

Wed Aug 15 03:00:00 2001 Erlend Midttun
- Complete remake to fit BIND 9.2.0