[Bug 888627] [NEW] please backport pdns-recursor 3.3-2 from Precise

Launchpad Bug Tracker 888627 at bugs.launchpad.net
Fri Nov 11 18:02:17 UTC 2011


*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Evan Broder (broder):

There is pdns-recursor 3.1.4-6ubuntu1 in Hardy, which has a major
security issue (see bug #502987). This bug was fixed in pdns-recursor
3.1.7 and above for every Ubuntu release except Hardy, because it would
be too much of a hassle to rewrite the code. Because of this, pdns-
recursor will not be included in hardy-security (see comments 19 and 20
of above bug).

I thought at least it could be included in hardy-backports for whoever
wants to upgrade. pdns-recursor 3.3 has a LOT of changes and
improvements (beside this security fix) since version 3.1, so it would
be a benefit to backport it to Hardy (and possibly Lucid for which I'll
open a separate bugreport).

I've managed to build it locally with pbuilder and in my PPA (https://launchpad.net/~cemc/+archive/ppa/+packages), without source changes, there are only a couple of (IMHO) minor changes to debian/* . It does need the -backports repo enabled when building because of debhelper >= 7 (which is backported to Hardy). Other than that seems pretty straightforward.
I've build 3.3-1 from Oneiric two months ago, using it since on my Hardy server without problems.

** Affects: hardy-backports
     Importance: Undecided
         Status: Incomplete

** Affects: lucid-backports
     Importance: Wishlist
         Status: In Progress

** Affects: maverick-backports
     Importance: Wishlist
         Status: In Progress

** Affects: natty-backports
     Importance: Wishlist
         Status: In Progress

** Affects: oneiric-backports
     Importance: Wishlist
         Status: In Progress

-- 
please backport pdns-recursor 3.3-2 from Precise
https://bugs.launchpad.net/bugs/888627
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.



More information about the ubuntu-archive mailing list