--- - branch: pkgsrc-2012Q1 date: Tue May 22 09:09:53 UTC 2012 files: - new: 1.1.1.1.2.2 old: 1.1.1.1.2.1 path: pkgsrc/net/bind99/Makefile pathrev: pkgsrc/net/bind99/Makefile@1.1.1.1.2.2 type: modified - new: 1.1.1.1.2.1 old: 1.1.1.1 path: pkgsrc/net/bind99/PLIST pathrev: pkgsrc/net/bind99/PLIST@1.1.1.1.2.1 type: modified - new: 1.2.2.2 old: 1.2.2.1 path: pkgsrc/net/bind99/distinfo pathrev: pkgsrc/net/bind99/distinfo@1.2.2.2 type: modified - new: 1.1.1.1.2.1 old: 1.1.1.1 path: pkgsrc/net/bind99/files/named9.sh pathrev: pkgsrc/net/bind99/files/named9.sh@1.1.1.1.2.1 type: modified - new: 1.1.2.1 old: '1.1' path: pkgsrc/net/bind99/patches/patch-bin_tests_system_Makefile.in pathrev: pkgsrc/net/bind99/patches/patch-bin_tests_system_Makefile.in@1.1.2.1 type: modified - new: '0' old: 1.1.2.2 path: pkgsrc/net/bind99/patches/patch-lib_dns_resolver.c pathrev: pkgsrc/net/bind99/patches/patch-lib_dns_resolver.c@0 type: deleted id: 20120522T090953Z.5fc04bd8b382a65cb9efc59831d97e2144d34653 log: "Pullup ticket #3797 - requested by taca\nnet/bind99/: security update\n\nRevisions pulled up:\n- net/bind99/Makefile 1.3-1.4\n- net/bind99/PLIST 1.2\n- net/bind99/distinfo \ 1.4\n- net/bind99/files/named9.sh 1.2\n- net/bind99/patches/patch-bin_tests_system_Makefile.in 1.2\n- net/bind99/patches/patch-lib_dns_resolver.c \ deleted\n\n---\n Module Name:\tpkgsrc\n Committed By:\tmarino\n \ Date:\t\tSun May 20 12:00:15 UTC 2012\n\n Modified Files:\n \tpkgsrc/net/bind99: Makefile\n \tpkgsrc/net/bind99/files: named9.sh\n\n Log Message:\n PR#45780 net/bind99: Fix chroot operation\n\n DNSSEC related, bind99 needs same fix as bind98\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue May 22 03:31:07 UTC 2012\n\n Modified Files:\n \tpkgsrc/net/bind99: Makefile PLIST distinfo\n \tpkgsrc/net/bind99/patches: patch-bin_tests_system_Makefile.in\n \ Removed Files:\n \tpkgsrc/net/bind99/patches: patch-lib_dns_resolver.c\n\n \ Log Message:\n Update biind99 package to 9.9.1.\n\n pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.\n\n Changes from release announce:\n\n Security Fixes\n\n * Windows binary packages distributed by ISC are now built and linked\n against OpenSSL 1.0.0i\n\n New Features\n\n \ * None\n\n Feature Changes\n\n * BIND now recognizes the TLSA resource record type, created to\n support IETF DANE (DNS-based Authentication of Named Entities)\n [RT #28989]\n\n * A note will be added to the README in future releases to explain\n that the improved scalability provided by using multiple threads\n to listen for and process queries (change 3137, RT #22992) does\n not provide any performance benefit when running BIND on versions\n of the linux kernel that do not include the 'lockless UDP transmit\n \ path' changes that were incorporated in 2.6.39. (Some linux\n distributors may have provided this functionality under their\n own version numbering systems).\n\n Bug Fixes\n\n * The locking strategy around the handling of iterative queries\n has been tuned to reduce unnecessary contention in a multi-threaded\n environment. (Note that this may not provide a measurable\n \ improvement over previous versions of BIND, but it corrects the\n performance impact of change 3309 / RT #27995) [RT #29239]\n\n * Addresses a race condition that can cause named to to crash when\n the masters list for a zone is updated via rndc reload/reconfig\n [RT #26732]\n\n * named-checkconf now correctly validates dns64 clients acl\n definitions. [RT #27631]\n\n * Fixes a race condition in zone.c that can cause named to crash\n during the processing of rndc delzone [RT #29028]\n\n * Prevents a named segfault from resolver.c due to procedure\n fctx_finddone() not being thread-safe. [RT #27995]\n\n \ * Improves DNS64 reverse zone performance. [RT #28563]\n\n * Adds wire format lookup method to sdb. [RT #28563]\n\n * Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering\n an assertion when flushing cache data. [RT #28571]\n\n * Prevents intermittent named crashes following an rndc reload [RT\n #28606]\n\n * Resolves inconsistencies in locating DNSSEC keys where zone names\n contain characters that require special mappings [RT #28600]\n\n \ * A new flag -R has been added to queryperf for running tests\n using non-recursive queries. It also now builds correctly on\n MacOS version 10.7 (darwin) [RT #28565]\n\n * Named no longer crashes if gssapi is enabled in named.conf but\n was not compiled into the binary [RT #28338]\n\n * SDB now handles unexpected errors from back-end database drivers\n gracefully instead of exiting on an assert. [RT #28534]\n\n * Prevents named crashes as a result of dereferencing a NULL pointer\n in zmgr_start_xfrin_ifquota if the zone was being removed while\n there were zone transfers still pending [RT #28419]\n\n * Corrects a parser bug that could cause named to crash while\n \ reading a malformed zone file. [RT #28467]\n\n * Ensures that when a client recurses its status fields are\n consistently set so that named doesn't fail on an INSIST in\n client.c:exit_check. [RT #28346]\n\n * Fixed a problem preventing proper use of 64 bit time values in\n libbind. [RT # 26542]\n\n \ * isccc/cc.c:table_fromwire could fail to free an allocated object\n on error, leading to a possible memory leak condition. [RT #28265]\n\n * Fixed a build error on systems without ENOTSUP. [RT #28200]\n\n * The header file isc/hmacsha.h is now installed when building\n BIND. [RT #28169]\n\n * \ AAAA responses will no longer be returned in the additional\n section when filter-aaaa-on-v4 is in use. (Prior to this change,\n they would be returned for some query types). [RT #27292]\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2012Q1] pkgsrc/net/bind99' unixtime: '1337677793' user: tron