CVE-2015-1868

[Felix Geyer]

pdns is vulnerable to a label decompression bug can cause crashes on specific platforms:
https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/

[Felix Geyer (debfx)]

debdiffs follow.
precise is not affected (only version 3.2 and up).

[Marc Deslauriers (mdeslaur)]

ACK on the debdiffs. They look good.

Packages are building now and will be released later on today.

Thanks!

[Launchpad Janitor (janitor)]

This bug was fixed in the package pdns - 3.3-2ubuntu0.1

---------------
pdns (3.3-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: label decompression bug (LP: #1450037)
    - debian/patches/CVE-2015-1868: apply upstream fix
    - CVE-2015-1868

 -- Felix Geyer <email address hidden> Wed, 29 Apr 2015 15:27:51 +0200

[Launchpad Janitor (janitor)]

This bug was fixed in the package pdns - 3.3.1-4ubuntu0.1

---------------
pdns (3.3.1-4ubuntu0.1) utopic-security; urgency=medium

  * SECURITY UPDATE: label decompression bug (LP: #1450037)
    - debian/patches/CVE-2015-1868: apply upstream fix
    - CVE-2015-1868

 -- Felix Geyer <email address hidden> Wed, 29 Apr 2015 16:21:06 +0200

[Launchpad Janitor (janitor)]

This bug was fixed in the package pdns - 3.4.1-4ubuntu0.1

---------------
pdns (3.4.1-4ubuntu0.1) vivid-security; urgency=medium

  * SECURITY UPDATE: label decompression bug (LP: #1450037)
    - debian/patches/CVE-2015-1868: apply upstream fix
    - CVE-2015-1868

 -- Felix Geyer <email address hidden> Wed, 29 Apr 2015 16:19:01 +0200