Changes - j0ke.net Open Build Service

Changes of Revision 14

[-] [+]	Changed	pdns.changes
@@ -1,4 +1,9 @@ ------------------------------------------------------------------- +Thu Dec 6 10:19:44 UTC 2018 - Local OBS User <cs@linux-administrator.com> + +- add patch CVE-2017-15091-3.4.11.patch + +------------------------------------------------------------------- Thu Jan 19 15:11:40 UTC 2017 - cs@linux-administrator.com - update to version 3.4.11
[-] [+]	Changed	pdns.spec ^
@@ -89,6 +89,7 @@ Source1: rcpdns Source2: README.opendbx Patch0: %{name}-fixinit.patch +Patch1: CVE-2017-15091-3.4.11.patch # Summary: Modern, advanced and high performance authoritative-only nameserver @@ -283,6 +284,7 @@ %prep %setup %patch0 -p1 +%patch1 -p1 %if 0%{?with_pdns_opendbx} %{__cp} %{S:2} README.opendbx %endif
[-] [+]	Added	CVE-2017-15091-3.4.11.patch ^
@@ -0,0 +1,30 @@ +diff -ru pdns-3.4.11.orig/pdns/ws-auth.cc pdns-3.4.11/pdns/ws-auth.cc +--- pdns-3.4.11.orig/pdns/ws-auth.cc 2017-01-13 09:13:16.000000000 +0100 ++++ pdns-3.4.11/pdns/ws-auth.cc 2017-11-02 18:03:50.635753956 +0100 +@@ -895,7 +895,7 @@ + static void apiServerZoneAxfrRetrieve(HttpRequest* req, HttpResponse* resp) { + string zonename = apiZoneIdToName(req->parameters["id"]); + +- if(req->method != "PUT") ++ if(req->method != "PUT" \|\| ::arg().mustDo("experimental-api-readonly")) + throw HttpMethodNotAllowedException(); + + UeberBackend B; +@@ -914,7 +914,7 @@ + static void apiServerZoneNotify(HttpRequest* req, HttpResponse* resp) { + string zonename = apiZoneIdToName(req->parameters["id"]); + +- if(req->method != "PUT") ++ if(req->method != "PUT" \|\| ::arg().mustDo("experimental-api-readonly")) + throw HttpMethodNotAllowedException(); + + UeberBackend B; +@@ -1195,7 +1195,7 @@ + } + + void apiServerFlushCache(HttpRequest* req, HttpResponse* resp) { +- if(req->method != "PUT") ++ if(req->method != "PUT" \|\| ::arg().mustDo("experimental-api-readonly")) + throw HttpMethodNotAllowedException(); + + extern PacketCache PC;