Received: by mail.netbsd.org (Postfix, from userid 605) id 4C16784DAE; Thu, 11 Feb 2021 11:25:53 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 858D184DA6 for ; Thu, 11 Feb 2021 11:25:52 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id JzNxa59xMKD4 for ; Thu, 11 Feb 2021 11:25:51 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id BA69B84CDF for ; Thu, 11 Feb 2021 11:25:51 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id ACB60FA95; Thu, 11 Feb 2021 11:25:51 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1613042751120020" MIME-Version: 1.0 Date: Thu, 11 Feb 2021 11:25:51 +0000 From: "Nia Alarie" Subject: CVS commit: pkgsrc/net/adns To: pkgsrc-changes@NetBSD.org Reply-To: nia@netbsd.org X-Mailer: log_accum Message-Id: <20210211112551.ACB60FA95@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1613042751120020 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: nia Date: Thu Feb 11 11:25:51 UTC 2021 Modified Files: pkgsrc/net/adns: Makefile distinfo Removed Files: pkgsrc/net/adns/patches: patch-af Log Message: adns: Update to 1.6.0 adns (1.6.0) UPSTREAM; urgency=medium Bugfixes: * adnshost: Support --reverse in -f mode input stream * timeout robustness against clock skew: track query start time and duration. Clock instability may now only cause spurious timeouts rather than indefinite hangs or even assertion failures. New features: * adnshost: Offer ability to set adns checkc flags * adnslogres: Honour --checkc-freq (if it comes first) * adnsresfilter: Honour --checkc-freq and --checkc-entex * time handling: Support use of CLOCK_MONOTONIC via an init flag. * adns_str* etc.: Improve robustness; more allowable inputs values. Build system improvements: * clean targets: Delete $(TARGETS) too! * Remove all m4 output files from the distributed source tree. * Support DESTDIR=/some/absolute/path on `make install'. * Provide autogen.sh. * Rerun autoheader and autoconf (2.69). Internal changes: * adnshost: adh-opts.c: Whitespace adjustments to option table Tests: * New tests for fixes in 1.5.3. * Fixes to test harness to avoid false positives during fuzzing. * Other changes to support use with AFL. * Many supporting improvements and refactorings. * Fix skipped tests ($$ reference in Makefile) -- Ian Jackson Thu, 11 Jun 2020 15:49:39 +0100 adns (1.5.2) UPSTREAM; urgency=medium * Important security fixes: CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9109: Vulnerable applications: all adns callers. Exploitable by: the local recursive resolver. Likely worst case: Remote code execution. CVE-2017-9106: Vulnerable applications: those that make SOA queries. Exploitable by: upstream DNS data sources. Likely worst case: DoS (crash of the adns-using application) CVE-2017-9107: Vulnerable applications: those that use adns_qf_quoteok_query. Exploitable by: sources of query domain names. Likely worst case: DoS (crash of the adns-using application) CVE-2017-9108: Vulnerable applications: adnshost. Exploitable by: code responsible for framing the input. Likely worst case: DoS (adnshost crashes at EOF). All found by AFL 2.35b. Thanks to the University of Cambridge Department of Applied Mathematics for computing facilities. Bugfixes: * Do not include spurious external symbol `data' (fixes GCC10 build). * If server sends TC flag over TCP, bail rather than retrying. * Do not crash on certain strange resolv.conf contents. * Fix various crashes if a global system failure occurs, or adns_finish is called with outstanding queries. * Correct a parsing error message very slightly. * DNS packet parsing: Slight fix when packet is truncated. * Fix ABI compatibility in string conversion of certain RR types. * internal.h: Use `unsigned' for nextid; fixes theoretical C UB. Portability fix: * common.make.in: add -Wno-unused-value. Fixes build with GCC9. Internal changes: * Additional comments describing some internal code restrions. * Robustness assert() against malfunctioning write() system call. -- Ian Jackson Thu, 11 Jun 2020 15:48:12 +0100 To generate a diff of this commit: cvs rdiff -u -r1.25 -r1.26 pkgsrc/net/adns/Makefile cvs rdiff -u -r1.18 -r1.19 pkgsrc/net/adns/distinfo cvs rdiff -u -r1.3 -r0 pkgsrc/net/adns/patches/patch-af Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1613042751120020 Content-Disposition: inline Content-Length: 2481 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/net/adns/Makefile diff -u pkgsrc/net/adns/Makefile:1.25 pkgsrc/net/adns/Makefile:1.26 --- pkgsrc/net/adns/Makefile:1.25 Sun Jan 26 17:31:48 2020 +++ pkgsrc/net/adns/Makefile Thu Feb 11 11:25:51 2021 @@ -1,23 +1,24 @@ -# $NetBSD: Makefile,v 1.25 2020/01/26 17:31:48 rillig Exp $ +# $NetBSD: Makefile,v 1.26 2021/02/11 11:25:51 nia Exp $ # -DISTNAME= adns-1.5.1 +DISTNAME= adns-1.6.0 CATEGORIES= net -MASTER_SITES= http://www.chiark.greenend.org.uk/~ian/adns/ftp/ +MASTER_SITES= https://www.chiark.greenend.org.uk/~ian/adns/ftp/ MAINTAINER= pkgsrc-users@NetBSD.org HOMEPAGE= https://www.chiark.greenend.org.uk/~ian/adns/ COMMENT= Asynchronous-capable DNS client library and utilities LICENSE= gnu-gpl-v2 -USE_TOOLS+= gmake +USE_TOOLS+= gmake gm4 USE_LIBTOOL= YES GNU_CONFIGURE= YES # libtoolize patch to static library target. CONFIGURE_ARGS+= --disable-dynamic -INSTALL_MAKE_FLAGS= prefix=${DESTDIR}${PREFIX} +INSTALL_MAKE_FLAGS+= bindir=${DESTDIR}${PREFIX}/bin +INSTALL_MAKE_FLAGS+= libdir=${DESTDIR}${PREFIX}/lib TEST_TARGET= check Index: pkgsrc/net/adns/distinfo diff -u pkgsrc/net/adns/distinfo:1.18 pkgsrc/net/adns/distinfo:1.19 --- pkgsrc/net/adns/distinfo:1.18 Tue Aug 16 13:34:52 2016 +++ pkgsrc/net/adns/distinfo Thu Feb 11 11:25:51 2021 @@ -1,12 +1,11 @@ -$NetBSD: distinfo,v 1.18 2016/08/16 13:34:52 mef Exp $ +$NetBSD: distinfo,v 1.19 2021/02/11 11:25:51 nia Exp $ -SHA1 (adns-1.5.1.tar.gz) = 95ef1af9198aa2ea5c23b30c0f45d3c561e856b8 -RMD160 (adns-1.5.1.tar.gz) = 1247903d0fb02f34ea402a75f46c34e8a8190f68 -SHA512 (adns-1.5.1.tar.gz) = f7bf8ff2b8faa1d7be0b27c732714240a27d6dfd7f70af8ae364e5de382427a79c484099f73f85eb1c77fb1a9845884e2f63d5831bc34a6212f206b24e7e1574 -Size (adns-1.5.1.tar.gz) = 319774 bytes +SHA1 (adns-1.6.0.tar.gz) = aa8f1d0c5357fc71ad7f2ed145cd81db7af02848 +RMD160 (adns-1.6.0.tar.gz) = bfed1dc9adec78f73b34b6d02ee986eb43ef2e7f +SHA512 (adns-1.6.0.tar.gz) = d28d27123a2c9f873a60f9f1fd76ba60c795dc703ff52a6649f8f7ead12a5c74eb71b0a158168dfe9bb1eaf9b7d21f96ef303eb07fd9ad37fd73c38ed853d8de +Size (adns-1.6.0.tar.gz) = 323474 bytes SHA1 (patch-aa) = 047eaeec04126c74a36f04f69d54ffedde0a2002 SHA1 (patch-ab) = 551451955e92fac6962b405908adc2afb603082d SHA1 (patch-ac) = 6660ff4248eea59bb54e88aebf87c7430fbae102 SHA1 (patch-ad) = 0a2632c7984ac30dff61cafc51631449e41399f2 -SHA1 (patch-af) = 10a4868a0f3ec8901e50cf9df7309722ca07bed9 SHA1 (patch-ag) = 916492f0b7ffa5508a8c8531c0daab24f6004136 --_----------=_1613042751120020--