tags 654568 + patch tags 654568 + pending thanks Dear maintainer,
I've prepared an NMU for pdns (versioned as 3.0-1.1) and uploaded it to DELAYED/02. Please feel free to tell me if I should delay it longer. Cheers Luk
diff -Nru pdns-3.0/debian/changelog pdns-3.0/debian/changelog --- pdns-3.0/debian/changelog 2011-11-19 12:05:12.000000000 +0100 +++ pdns-3.0/debian/changelog 2012-01-15 19:33:09.000000000 +0100 @@ -1,3 +1,11 @@ +pdns (3.0-1.1) unstable; urgency=high + + * Non-maintainer upload. + * Don't respond to responses fixes CVE-2012-0206 + * Make build dependency on mongodb-dev arch specific (Closes: #654568). + + -- Luk Claes <l...@debian.org> Sun, 15 Jan 2012 19:13:17 +0100 + pdns (3.0-1) unstable; urgency=low * New upstream version (Closes: #624330, #626909, #617476, #498918, #500572) diff -Nru pdns-3.0/debian/control pdns-3.0/debian/control --- pdns-3.0/debian/control 2011-11-07 19:37:40.000000000 +0100 +++ pdns-3.0/debian/control 2012-01-15 19:22:56.000000000 +0100 @@ -3,7 +3,7 @@ Priority: extra Standards-Version: 3.9.2 Maintainer: Matthijs Möhlmann <matth...@cacholong.nl> -Build-Depends: debhelper (>= 7.0.50~), po-debconf, libtool, flex, bison, libmysqlclient-dev, libpq-dev, libssl-dev, tdb-dev, libgdbm-dev, libldap2-dev, libsqlite0-dev, libsqlite3-dev, dpkg-dev (>= 1.10.17), libboost-dev, libboost-serialization-dev, libboost-program-options-dev, autotools-dev, automake, autoconf, liblua5.1-0-dev, pkg-config, libcrypto++-dev, mongodb-dev, ragel +Build-Depends: debhelper (>= 7.0.50~), po-debconf, libtool, flex, bison, libmysqlclient-dev, libpq-dev, libssl-dev, tdb-dev, libgdbm-dev, libldap2-dev, libsqlite0-dev, libsqlite3-dev, dpkg-dev (>= 1.10.17), libboost-dev, libboost-serialization-dev, libboost-program-options-dev, autotools-dev, automake, autoconf, liblua5.1-0-dev, pkg-config, libcrypto++-dev, mongodb-dev [i386 amd64], ragel Vcs-Git: git://github.com/Signum/debian-pdns.git Homepage: http://www.powerdns.com/ diff -Nru pdns-3.0/debian/patches/CVE-2012-0206 pdns-3.0/debian/patches/CVE-2012-0206 --- pdns-3.0/debian/patches/CVE-2012-0206 1970-01-01 01:00:00.000000000 +0100 +++ pdns-3.0/debian/patches/CVE-2012-0206 2012-01-15 19:40:15.000000000 +0100 @@ -0,0 +1,13 @@ +--- a/pdns/common_startup.cc ++++ b/pdns/common_startup.cc +@@ -255,7 +255,9 @@ + numreceived4++; + else + numreceived6++; +- ++ if(P->d.qr) ++ continue; ++ + S.ringAccount("queries", P->qdomain+"/"+P->qtype.getName()); + S.ringAccount("remotes",P->getRemote()); + if(logDNSQueries) diff -Nru pdns-3.0/debian/patches/series pdns-3.0/debian/patches/series --- pdns-3.0/debian/patches/series 2011-11-19 12:07:05.000000000 +0100 +++ pdns-3.0/debian/patches/series 2012-01-15 19:13:07.000000000 +0100 @@ -9,3 +9,4 @@ changeset-2267 fix-sqlite-parse-priority fix-sqlite-backend-loading +CVE-2012-0206
