Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Thu, 6 Jun 2013 02:55:03 +0000
From: "Takahiro Kambe" <taca@netbsd.org>
Subject: CVS commit: pkgsrc/net/bind99
To: pkgsrc-changes@NetBSD.org
Reply-To: taca@netbsd.org
Message-Id: <20130606025503.85BD596@cvs.netbsd.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Jun  6 02:55:03 UTC 2013

Modified Files:
	pkgsrc/net/bind99: Makefile PLIST distinfo options.mk
	pkgsrc/net/bind99/patches: patch-configure patch-configure.in
Removed Files:
	pkgsrc/net/bind99/patches: patch-bin_dig_Makefile.in
	    patch-bin_nsupdate_Makefile.in patch-lib_dns_zone.c

Log Message:
Update bind99 to 9.9.3pl1 (BIND 9.9.3-P1).

Please refer CHANGES file for complete changes and here is quote from
release announce.

Introduction

   BIND 9.9.3-P1 is the latest production release of BIND 9.9-ESV.

Security Fixes

   Prevents exploitation of a runtime_check which can crash named
   when satisfying a recursive query for particular malformed zones.
   (CVE-2013-3919) [RT #33690]

   Now supports NAPTR regular expression validation on all platforms,
   and avoids memory exhaustion compiling pathological regular
   expressions. (CVE-2013-2266)  [RT #32688]

   Prevents named from aborting with a require assertion failure
   on servers with DNS64 enabled.  These crashes might occur as a
   result of specific queries that are received.  (CVE-2012-5688)
   [RT #30792 / #30996]

   Prevents an assertion failure in named when RPZ and DNS64 are
   used together. (CVE-2012-5689) [RT #32141]

New Features

   Adds a new configuration option, "check-spf"; valid values are
   "warn" (default) and "ignore".  When set to "warn", checks SPF
   and TXT records in spf format, warning if either resource record
   type occurs without a corresponding record of the other resource
   record type.  [RT #33355]

   Adds the command-line tool "dnssec-coverage" that checks to make
   sure that there is no scheduled lapse in key coverage. Requires
   python. [RT #28098]

   Adds support for the EUI48 and EUI64 RR types. [RT #33082]

   Adds support for the RFC 6742 ILNP record types (NID, LP, L32,
   and L64). [RT #31836]


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.26 pkgsrc/net/bind99/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind99/PLIST
cvs rdiff -u -r1.15 -r1.16 pkgsrc/net/bind99/distinfo
cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/bind99/options.mk
cvs rdiff -u -r1.1 -r0 pkgsrc/net/bind99/patches/patch-bin_dig_Makefile.in \
    pkgsrc/net/bind99/patches/patch-bin_nsupdate_Makefile.in
cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/bind99/patches/patch-configure
cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind99/patches/patch-configure.in
cvs rdiff -u -r1.1.1.1 -r0 pkgsrc/net/bind99/patches/patch-lib_dns_zone.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.