--- - branch: pkgsrc-2009Q2 date: Wed Jul 29 07:59:53 UTC 2009 files: - new: 1.3.4.1 old: '1.3' path: pkgsrc/net/bind96/Makefile pathrev: pkgsrc/net/bind96/Makefile@1.3.4.1 type: modified - new: 1.3.4.1 old: '1.3' path: pkgsrc/net/bind96/distinfo pathrev: pkgsrc/net/bind96/distinfo@1.3.4.1 type: modified - new: 1.2.2.1 old: '1.2' path: pkgsrc/net/bind96/PLIST pathrev: pkgsrc/net/bind96/PLIST@1.2.2.1 type: modified - new: 1.1.1.1.4.1 old: 1.1.1.1 path: pkgsrc/net/bind96/options.mk pathrev: pkgsrc/net/bind96/options.mk@1.1.1.1.4.1 type: modified - new: 1.1.1.1.4.1 old: 1.1.1.1 path: pkgsrc/net/bind96/patches/patch-ab pathrev: pkgsrc/net/bind96/patches/patch-ab@1.1.1.1.4.1 type: modified - new: 1.1.1.1.4.1 old: 1.1.1.1 path: pkgsrc/net/bind96/patches/patch-ad pathrev: pkgsrc/net/bind96/patches/patch-ad@1.1.1.1.4.1 type: modified - new: 1.1.1.1.4.1 old: 1.1.1.1 path: pkgsrc/net/bind96/patches/patch-ag pathrev: pkgsrc/net/bind96/patches/patch-ag@1.1.1.1.4.1 type: modified - new: 1.1.1.1.4.1 old: 1.1.1.1 path: pkgsrc/net/bind96/patches/patch-aj pathrev: pkgsrc/net/bind96/patches/patch-aj@1.1.1.1.4.1 type: modified - new: 1.2.4.1 old: '1.2' path: pkgsrc/net/bind96/patches/patch-ac pathrev: pkgsrc/net/bind96/patches/patch-ac@1.2.4.1 type: modified id: 20090729T075953Z.71413ae000e287b5fb36d2f09cbdd78b4c70f6af log: "Pullup ticket 2844 - requested by reed\nsecurity update\nlast part of pullups for PR 41796\n\nRevisions pulled up:\n- pkgsrc/net/bind96/Makefile\t\t\t1.7\n- pkgsrc/net/bind96/PLIST\t\t\t1.3\n- pkgsrc/net/bind96/distinfo\t\t\t1.4\n- pkgsrc/net/bind96/options.mk\t\t\t1.2\n- pkgsrc/net/bind96/patches/patch-ab\t\t1.2\n- pkgsrc/net/bind96/patches/patch-ac\t\t1.3\n- pkgsrc/net/bind96/patches/patch-ad\t\t1.2\n- pkgsrc/net/bind96/patches/patch-ag\t\t1.2\n- pkgsrc/net/bind96/patches/patch-aj\t\t1.1\n\n Module Name: pkgsrc\n Committed By: obache\n Date: Fri Jul 24 12:30:00 UTC 2009\n\n Modified Files:\n \ pkgsrc/net/bind9: Makefile\n pkgsrc/net/bind95: Makefile\n \ pkgsrc/net/bind96: Makefile\n\n Log Message:\n Update HOMEPAGE url.\n\n To generate a diff of this commit:\n cvs rdiff -u -r1.107 -r1.108 pkgsrc/net/bind9/Makefile\n cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/bind95/Makefile\n \ cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind96/Makefile\n\n Module Name: pkgsrc\n \ Committed By: obache\n Date: Sun Jul 26 09:07:58 UTC 2009\n\n \ Modified Files:\n pkgsrc/net/bind96: Makefile PLIST distinfo options.mk\n \ pkgsrc/net/bind96/patches: patch-ab patch-ac patch-ad patch-ag\n Removed Files:\n pkgsrc/net/bind96/patches: patch-aj\n\n Log Message:\n Update bind96 to 9.6.1.\n Based on PR 41772 by Robert Elz.\n\n Pkgsrc changes:\n \ o MAKE_JOBS_SAFE=no, README said \"Do not use a parallel make\".\n o remove patch-aj, libbind has been removed from the BIND 9 distribution\n since 9.6.0.\n \ o add bind-dig-sigchase option. requested by PR 41751.\n\n Changes since 9.6.0:\n\n --- 9.6.1 released ---\n\n 2607. [bug] named could incorrectly delete NSEC3 records for\n empty nodes when processing a update request.\n [RT #19749]\n\n \ 2606. [bug] \"delegation-only\" was not being accepted in\n delegation-only type zones. [RT #19717]\n\n 2605. [bug] Accept DS responses from delegation only zones.\n [RT # 19296]\n\n 2603. [port] \ win32: handle .exe extension of named-checkzone and\n named-comilezone argv[0] names under windows.\n [RT #19767]\n\n 2602. \ [port] win32: fix debugging command line build of libisccfg.\n [RT #19767]\n\n --- 9.6.1rc1 released ---\n\n 2599. [bug] Address rapid memory growth when validation fails.\n [RT #19654]\n\n \ 2597. [bug] Handle a validation failure with a insecure delegation\n \ from a NSEC3 signed master/slave zone. [RT #19464]\n\n \ 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay\n \ long, leading to inefficient memory usage or rejecting\n \ newer cache entries in the worst case. [RT #19563]\n\n \ 2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]\n\n \ 2592. [bug] Treat \"any\" as a type in nsupdate. [RT #19455]\n\n \ 2591. [bug] named could die when processing a update in\n removed_orphaned_ds(). [RT #19507]\n\n 2588. [bug] SO_REUSEADDR could be set unconditionally after failure\n of bind(2) call. This should be rare and mostly\n harmless, but may cause interference with other\n processes that happen to use the same port. [RT #19642]\n\n 2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB\n or SDB. [RT #19577]\n\n 2585. [bug] Uninitialized socket name could be referenced via a\n statistics channel, triggering an assertion failure in\n XML rendering. [RT #19427]\n\n 2584. [bug] alpha: gcc optimization could break atomic operations.\n [RT #19227]\n\n 2583. [port] \ netbsd: provide a control to not add the compile\n date to the version string, -DNO_VERSION_DATE.\n\n 2582. [bug] Don't emit warning log message when we attempt to\n remove non-existant journal. [RT #19516]\n\n 2579. [bug] DNSSEC lookaside validation failed to handle unknown\n algorithms. [RT #19479]\n\n 2578. [bug] Changed default sig-signing-type to 65534, because\n 65535 turns out to be reserved. [RT #19477]\n\n \ 2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.\n \ [RT #18837]\n\n --- 9.6.1b1 released ---\n\n \ 2577. [doc] Clarified some statistics counters. [RT #19454]\n\n \ 2576. [bug] NSEC record were not being correctly signed when\n \ a zone transitions from insecure to secure.\n Handle such incorrectly signed zones. [RT #19114]\n\n 2574. [doc] Document nsupdate -g and -o. [RT #19351]\n\n 2573. [bug] Replacing a non-CNAME record with a CNAME record in a\n single transaction in a signed zone failed. [RT #19397]\n\n 2568. [bug] Report when the write to indicate a otherwise\n successful start fails. [RT #19360]\n\n 2567. [bug] dst__privstruct_writefile() could miss write errors.\n write_public_key() could miss write errors.\n dnssec-dsfromkey could miss write errors.\n \ [RT #19360]\n\n 2564. [bug] Only take EDNS fallback steps when processing timeouts.\n [RT #19405]\n\n 2563. [bug] Dig could leak a socket causing it to wait forever\n to exit. [RT #19359]\n\n 2562. [doc] ARM: miscellaneous improvements, reorganization,\n and some new content.\n\n 2561. [doc] Add isc-config.sh(1) man page. [RT #16378]\n\n 2560. [bug] Add #include to iptable.c. [RT #18258]\n\n 2559. [bug] dnssec-dsfromkey could compute bad DS records when\n reading from a K* files. [RT #19357]\n\n 2557. \ [cleanup] PCI compliance:\n * new libisc log module file\n * isc_dir_chroot() now also changes the working\n directory to \"/\".\n * additional INSISTs\n * additional logging when files can't be removed.\n\n 2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the\n error checks in the correct order resulting in the\n wrong error code sometimes being returned. [RT #19249]\n\n 2554. [bug] Validation of uppercase queries from NSEC3 zones could\n fail. [RT #19297]\n\n 2553. \ [bug] Reference leak on DNSSEC validation errors. [RT #19291]\n\n \ 2552. [bug] zero-no-soa-ttl-cache was not being honoured.\n [RT #19340]\n\n 2551. [bug] Potential Reference leak on return. [RT #19341]\n\n 2550. [bug] Check --with-openssl= finds .\n \ [RT #19343]\n\n 2549. [port] linux: define NR_OPEN if not currently defined.\n [RT #19344]\n\n \ 2548. [bug] Install iterated_hash.h. [RT #19335]\n\n 2547. [bug] \ openssl_link.c:mem_realloc() could reference an\n out-of-range area of the source buffer. New public\n function isc_mem_reallocate() was introduced to address\n this bug. [RT #19313]\n\n \ 2545. [doc] ARM: Legal hostname checking (check-names) is\n for SRV RDATA too. [RT #19304]\n\n 2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]\n\n 2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]\n\n 2542. [doc] Update the description of dig +adflag. [RT #19290]\n\n 2541. [bug] Conditionally update dispatch manager statistics.\n [RT #19247]\n\n 2539. \ [security] Update the interaction between recursion, allow-query,\n allow-query-cache and allow-recursion. [RT #19198]\n\n 2538. [bug] cache/ADB memory could grow over max-cache-size,\n especially with threads and smaller max-cache-size\n values. [RT #19240]\n\n \ 2537. [experimental] Added more statistics counters including those on socket\n \ I/O events and query RTT histograms. [RT #18802]\n\n \ 2536. [cleanup] Silence some warnings when -Werror=format-security is\n specified. [RT #19083]\n\n 2535. [bug] dig +showsearh and +trace interacted badly. [RT #19091]\n\n 2532. [bug] dig: check the question section of the response to\n see if it matches the asked question. [RT #18495]\n\n 2531. [bug] Change #2207 was incomplete. [RT #19098]\n\n 2530. [bug] named failed to reject insecure to secure transitions\n via UPDATE. [RT #19101]\n\n 2529. [cleanup] Upgrade libtool to silence complaints from recent\n version of autoconf. [RT #18657]\n\n 2528. \ [cleanup] Silence spurious configure warning about\n --datarootdir [RT #19096]\n\n 2527. [bug] named could reuse cache on reload with\n \ enabling/disabling validation. [RT #19119]\n\n 2525. \ [experimental] New logging category \"query-errors\" to provide detailed\n \ internal information about query failures, especially\n \ about server failures. [RT #19027]\n\n 2524. [port] \ sunos: dnssec-signzone needs strtoul(). [RT #19129]\n\n 2523. [bug] \ Random type rdata freed by dns_nsec_typepresent().\n [RT #19112]\n\n 2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().\n\n \ 2521. [bug] Improve epoll cross compilation support. [RT #19047]\n\n \ 2519. [bug] dig/host with -4 or -6 didn't work if more than two\n \ nameserver addresses of the excluded address family\n \ preceded in resolv.conf. [RT #19081]\n\n 2517. [bug] \ dig +trace with -4 or -6 failed when it chose a\n nameserver address of the excluded address.\n [RT #18843]\n\n 2516. \ [bug] glue sort for responses was performed even when not\n needed. [RT #19039]\n\n 2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains\n a nameserver of the excluded address family.\n \ [RT #18848]\n\n 2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.\n [RT #18885]\n\n 2506. [port] \ solaris: Check at configure time if\n hack_shutup_pthreadonceinit is needed. [RT #19037]\n\n 2505. [port] Treat amd64 similarly to x86_64 when determining\n atomic operation support. [RT #19031]\n\n 2503. [port] linux: improve compatibility with Linux Standard\n Base. [RT #18793]\n\n 2502. [cleanup] \ isc_radix: Improve compliance with coding style,\n document function in . [RT #18534]\n\n To generate a diff of this commit:\n \ cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/bind96/Makefile\n cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind96/PLIST\n cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind96/distinfo\n \ cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/net/bind96/options.mk\n cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/net/bind96/patches/patch-ab \\\n pkgsrc/net/bind96/patches/patch-ad pkgsrc/net/bind96/patches/patch-ag\n cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind96/patches/patch-ac\n \ cvs rdiff -u -r1.1.1.1 -r0 pkgsrc/net/bind96/patches/patch-aj\n\n Module Name: pkgsrc\n Committed By: reed\n Date: Wed Jul 29 00:03:38 UTC 2009\n\n Modified Files:\n pkgsrc/net/bind96: Makefile distinfo\n\n \ Log Message:\n Update to 9.6.1-P1.\n This is for PR pkg/41796: Security fix CVE-2009-0696\n\n To generate a diff of this commit:\n cvs rdiff -u -r1.5 -r1.6 pkgsrc/net/bind96/Makefile\n cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/bind96/distinfo\n\n \ Module Name: pkgsrc\n Committed By: reed\n Date: Wed Jul 29 00:16:33 UTC 2009\n\n Modified Files:\n pkgsrc/net/bind96: Makefile\n\n \ Log Message:\n Fix PKGNAME that I broke.\n\n To generate a diff of this commit:\n cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/bind96/Makefile\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2009Q2] pkgsrc/net/bind96' unixtime: '1248854393' user: spz