Fedora 7 Update: bind-9.4.2-4.fc7

Wed May 21 11:10:34 UTC 2008

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-4309
2008-05-21 07:17:31
--------------------------------------------------------------------------------

Name        : bind
Product     : Fedora 7
Version     : 9.4.2
Release     : 4.fc7
URL         : http://www.isc.org/products/BIND/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server.
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

Root hints file has to be updated to current state
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 20 2008 Adam Tkac <atkac redhat com> 31:9.4.2-4
- updated named.ca (#447341)
* Mon Jan 21 2008 Adam Tkac <atkac redhat com> 31:9.4.2-3
- CVE-2008-0122
* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 31:9.4.2-2
- CVE-2007-6283
* Wed Dec  5 2007 Adam Tkac <atkac redhat com> 31:9.4.2-1.1
- update named.ca file (new L.ROOT-SERVERS.NET, #411141)
* Thu Nov 29 2007 Adam Tkac <atkac redhat com> 31:9.4.2-1
- final 9.4.2
* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.5.rc1
- updated to 9.4.2-rc2
* Mon Nov 12 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.4.1.rc1
- new L.ROOT-SERVERS.NET address
* Tue Oct  9 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.4.rc1
- updated to 9.4.2rc1
- patches merged to upstream
  - bind-9.4-update.patch
  - bind-9.4-_res_errno.patch
* Mon Sep 17 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.3.1.b1
- moved caching-nameserver chroot files to bind-chroot (#287321)
* Thu Sep  6 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.3.b1
- patches bind-9.4-2119_revert.patch and
  libbind-9.3.1rc1-fix_h_errno.patch are obsoleted by
  bind-9.4-_res_errno.patch
* Fri Aug 31 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.2.b1
- temporary revert ISC 2119 change which conflicts with our
  "libbind-errno" patch (#254501)
* Tue Aug 21 2007 Adam Tkac <atkac redhat com> 31:9.4.2-0.1.b1
- updated to 9.4.2b1
- dropped patches
  - bind-bsdcompat (upstream)
  - bind-9.4-tsig-init (upstream)
  - bind-9.3.3rc2-dbus (obsoleted by bind-9.4-dbus.patch)
  - bind-9.4.0-dbus-race-condition.patch (upstream)
  - bind-9.3.4-sdb-sqlite-src.patch (upstream)
* Tue Aug 14 2007 Adam Tkac <atkac redhat com> 31:9.4.1-9.P1
- named could crash when deleting SRV record with UPDATE (#251336)
* Thu Jul 26 2007 Adam Tkac <atkac redhat com> 31:9.4.1-8.P1
- backported patch to #249701 from BIND's HEAD
* Tue Jul 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-7.P1
- updated to latest upstream (contains fixes for CVE-2007-2925 and
  CVE-2007-2926)
* Thu Jun 21 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6.1
- minor changes in caching-nameserver configuration
* Mon Jun 18 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6
- major changes in default caching-nameserver configuration (configuration
  could now honor RFCs, #243565)
* Tue Jun  5 2007 Adam Tkac <atkac redhat com> 31:9.4.1-5
- added /var/named/dynamic directory. This directory is primary designed
  for dynamic DNS zones. In future releases named could write only into
  dynamic, data and slaves directories
* Thu May 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-4
- start using deprecated ldap API
- fix minor bug in bind-chroot-admin (#241103)
* Tue May 15 2007 Adam Tkac <atkac redhat com> 31:9.4.1-3
- fixed bind-chroot-admin dynamic DNS handling (#239149)
- rewrited ldap backend to latest API (#239802)
- updated zone-freeze patch to latest upstream
* Mon May  7 2007 Adam Tkac <atkac redhat com> 31:9.4.1-2
- test build on new build system
* Wed May  2 2007 Adam Tkac <atkac redhat com> 31:9.4.1-1
- updated to 9.4.1 which contains fix to CVE-2007-2241
* Fri Apr 27 2007 Adam Tkac <atkac redhat com> 31:9.4.0-8
- improved "zone freeze patch" - if multiple zone with same name exists
  no zone is freezed
- minor cleanup in caching-nameserver's config file
- fixed race-condition in dbus code (#235809)
- added forgotten restorecon statement in bind-chroot-admin
* Tue Apr 17 2007 Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
- removed DEBUGINFO option because with this option (default) was bind
  builded with -O0 and without this flag no debuginfo package was produced.
  (I want faster bind => -O2 + debuginfo)
- fixed zone finding (#236426)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #447341 - Identity Theft Hits the Root Name Servers
        https://bugzilla.redhat.com/show_bug.cgi?id=447341
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update bind' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------