Tue Jul 5 13:35:29 2011 UTC ()
Update bind98 package to 9.8.0pl4 (9.8.0-P4), security release.

Introduction

   BIND 9.8.0-P4 is security patch for BIND 9.8.0.

   Please see the CHANGES file in the source code release for a complete
   list of all changes.

	--- 9.8.0-P4 released ---

3124.	[bug]		Use an rdataset attribute flag to indicate
			negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets.  [RT #24777]

	--- 9.8.0-P3 released (withdrawn) ---

3126.	[security]	Using DNAME record to generate replacements caused
			RPZ to exit with a assertion failure. [RT #23766]

3125.	[security]	Using wildcard CNAME records as a replacement with
			RPZ caused named to exit with a assertion failure.
			[RT #24715]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]

3115.	[bug]		Named could fail to return requested data when
			following a CNAME that points into the same zone.
			[RT #2445]


(taca)
diff -r1.3 -r1.4 pkgsrc/net/bind98/Makefile
diff -r1.3 -r1.4 pkgsrc/net/bind98/distinfo
cvs diff -r1.3 -r1.4 pkgsrc/net/bind98/Attic/Makefile (switch to unified diff)

--- pkgsrc/net/bind98/Attic/Makefile 2011/05/27 06:45:30 1.3
+++ pkgsrc/net/bind98/Attic/Makefile 2011/07/05 13:35:29 1.4
@@ -1,83 +1,83 @@ @@ -1,83 +1,83 @@
1# $NetBSD: Makefile,v 1.3 2011/05/27 06:45:30 taca Exp $ 1# $NetBSD: Makefile,v 1.4 2011/07/05 13:35:29 taca Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5CATEGORIES= net 5CATEGORIES= net
6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ 7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.isc.org/software/bind 10HOMEPAGE= http://www.isc.org/software/bind
11COMMENT= Version 9 of the Berkeley Internet Name Daemon, implementation of DNS 11COMMENT= Version 9 of the Berkeley Internet Name Daemon, implementation of DNS
12 12
13CONFLICTS+= bind<9.8.0 13CONFLICTS+= bind<9.8.0
14 14
15PKG_DESTDIR_SUPPORT= user-destdir 15PKG_DESTDIR_SUPPORT= user-destdir
16 16
17MAKE_JOBS_SAFE= no 17MAKE_JOBS_SAFE= no
18 18
19BIND_VERSION= 9.8.0-P2 19BIND_VERSION= 9.8.0-P4
20 20
21.include "../../mk/bsd.prefs.mk" 21.include "../../mk/bsd.prefs.mk"
22 22
23BUILD_DEFS+= BIND_DIR VARBASE 23BUILD_DEFS+= BIND_DIR VARBASE
24 24
25.include "options.mk" 25.include "options.mk"
26 26
27USE_TOOLS+= pax perl 27USE_TOOLS+= pax perl
28USE_LIBTOOL= yes 28USE_LIBTOOL= yes
29GNU_CONFIGURE= yes 29GNU_CONFIGURE= yes
30#CONFIG_SHELL= sh -x 30#CONFIG_SHELL= sh -x
31 31
32CONFIGURE_ARGS+= --with-libtool 32CONFIGURE_ARGS+= --with-libtool
33CONFIGURE_ARGS+= --sysconfdir=/etc 33CONFIGURE_ARGS+= --sysconfdir=/etc
34CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q} 34CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q}
35CONFIGURE_ARGS+= --disable-openssl-version-check 35CONFIGURE_ARGS+= --disable-openssl-version-check
36CONFIGURE_ARGS+= --with-openssl=${SSLBASE:Q} 36CONFIGURE_ARGS+= --with-openssl=${SSLBASE:Q}
37.if ${MACHINE_PLATFORM:MNetBSD-*-mipsel} != "" 37.if ${MACHINE_PLATFORM:MNetBSD-*-mipsel} != ""
38CONFIGURE_ARGS+= --disable-atomic 38CONFIGURE_ARGS+= --disable-atomic
39.endif 39.endif
40.if ${MACHINE_PLATFORM:MNetBSD-*-powerpc} != "" 40.if ${MACHINE_PLATFORM:MNetBSD-*-powerpc} != ""
41CONFIGURE_ARGS+= --disable-threads 41CONFIGURE_ARGS+= --disable-threads
42.endif 42.endif
43.if ${OPSYS} == "DragonFly" 43.if ${OPSYS} == "DragonFly"
44CONFIGURE_ARGS+= --disable-kqueue 44CONFIGURE_ARGS+= --disable-kqueue
45.endif 45.endif
46 46
47PKG_GROUPS_VARS+= BIND_GROUP 47PKG_GROUPS_VARS+= BIND_GROUP
48PKG_USERS_VARS+= BIND_USER 48PKG_USERS_VARS+= BIND_USER
49 49
50PKG_GROUPS= ${BIND_GROUP} 50PKG_GROUPS= ${BIND_GROUP}
51PKG_USERS= ${BIND_USER}:${BIND_GROUP} 51PKG_USERS= ${BIND_USER}:${BIND_GROUP}
52 52
53PKG_GECOS.${BIND_USER}= Named pseudo-user 53PKG_GECOS.${BIND_USER}= Named pseudo-user
54PKG_HOME.${BIND_USER}= ${BIND_DIR} 54PKG_HOME.${BIND_USER}= ${BIND_DIR}
55 55
56PTHREAD_OPTS+= native 56PTHREAD_OPTS+= native
57PTHREAD_AUTO_VARS= yes 57PTHREAD_AUTO_VARS= yes
58 58
59FILES_SUBST+= BIND_GROUP=${BIND_GROUP:Q} \ 59FILES_SUBST+= BIND_GROUP=${BIND_GROUP:Q} \
60 BIND_USER=${BIND_USER:Q} PAX=${PAX:Q} 60 BIND_USER=${BIND_USER:Q} PAX=${PAX:Q}
61MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER} 61MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}
62DOCDIR= ${DESTDIR}${PREFIX}/share/doc/bind9 62DOCDIR= ${DESTDIR}${PREFIX}/share/doc/bind9
63 63
64# include/isc/ipv6.h is installed on non-ipv6 platforms 64# include/isc/ipv6.h is installed on non-ipv6 platforms
65PLIST_VARS+= inet6 65PLIST_VARS+= inet6
66.if !empty(MISSING_FEATURES:Minet6) 66.if !empty(MISSING_FEATURES:Minet6)
67PLIST.inet6= yes 67PLIST.inet6= yes
68.endif 68.endif
69 69
70RCD_SCRIPTS= lwresd named9 70RCD_SCRIPTS= lwresd named9
71 71
72INSTALLATION_DIRS= ${DOCDIR} share/doc/bind9/arm share/doc/bind9/draft \ 72INSTALLATION_DIRS= ${DOCDIR} share/doc/bind9/arm share/doc/bind9/draft \
73 share/doc/bind9/rfc 73 share/doc/bind9/rfc
74 74
75post-install: 75post-install:
76 ${INSTALL_DATA} ${WRKSRC}/README ${DOCDIR} 76 ${INSTALL_DATA} ${WRKSRC}/README ${DOCDIR}
77 ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm 77 ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm
78 ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm 78 ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm
79 ${INSTALL_DATA} ${WRKSRC}/doc/draft/draft-*.txt ${DOCDIR}/draft 79 ${INSTALL_DATA} ${WRKSRC}/doc/draft/draft-*.txt ${DOCDIR}/draft
80 ${INSTALL_DATA} ${WRKSRC}/doc/rfc/rfc*.txt ${DOCDIR}/rfc 80 ${INSTALL_DATA} ${WRKSRC}/doc/rfc/rfc*.txt ${DOCDIR}/rfc
81 81
82.include "../../security/openssl/buildlink3.mk" 82.include "../../security/openssl/buildlink3.mk"
83.include "../../mk/bsd.pkg.mk" 83.include "../../mk/bsd.pkg.mk"
cvs diff -r1.3 -r1.4 pkgsrc/net/bind98/Attic/distinfo (switch to unified diff)

--- pkgsrc/net/bind98/Attic/distinfo 2011/05/27 06:45:30 1.3
+++ pkgsrc/net/bind98/Attic/distinfo 2011/07/05 13:35:29 1.4
@@ -1,10 +1,10 @@ @@ -1,10 +1,10 @@
1$NetBSD: distinfo,v 1.3 2011/05/27 06:45:30 taca Exp $ 1$NetBSD: distinfo,v 1.4 2011/07/05 13:35:29 taca Exp $
2 2
3SHA1 (bind-9.8.0-P2.tar.gz) = b3492ad11cfbf2939d9b0fb62c52c204de58679b 3SHA1 (bind-9.8.0-P4.tar.gz) = 969864200c1516a8bea54266de60f316d79182b4
4RMD160 (bind-9.8.0-P2.tar.gz) = 3db0b25303da78f06d6fb48f66908111cb0eb34c 4RMD160 (bind-9.8.0-P4.tar.gz) = cd44fe00d5f052ab441c16b2e735ad5771b4230a
5Size (bind-9.8.0-P2.tar.gz) = 7702702 bytes 5Size (bind-9.8.0-P4.tar.gz) = 7703981 bytes
6SHA1 (patch-config.threads.in) = 3d8ee03230fdb6aca545a67759ba7aacda52bb61 6SHA1 (patch-config.threads.in) = 3d8ee03230fdb6aca545a67759ba7aacda52bb61
7SHA1 (patch-configure) = edf5a32b5c05aea110316f877264c22a2c4344ba 7SHA1 (patch-configure) = edf5a32b5c05aea110316f877264c22a2c4344ba
8SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7 8SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
9SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d 9SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d
10SHA1 (patch-lib_lwres_getnameinfo.c) = c26dcff4637b7beb16b66c32b304d0f187390eed 10SHA1 (patch-lib_lwres_getnameinfo.c) = c26dcff4637b7beb16b66c32b304d0f187390eed