Wed Aug 10 15:26:11 2011 UTC ()
Update bind97 package to 9.7.4.

For full changes, please refer:
ftp://ftp.isc.org/isc/bind9/9.7.4/RELEASE-NOTES-BIND-9.7.4.html

New Features

9.7.4

     * A new test has been added to check the apex NSEC3 records after
       DNSKEY records have been added via dynamic update. [RT #23229]
     * Added a tool able to generate malformed packets to allow testing of
       how named handles them. [RT #24096]

Security Fixes

9.7.4

     * named, set up to be a caching resolver, is vulnerable to a user
       querying a domain with very large resource record sets (RRSets)
       when trying to negatively cache the response. Due to an off-by-one
       error, caching the response could cause named to crash. [RT #24650]
       [CVE-2011-1910]
     * Change #2912 (see CHANGES) exposed a latent bug in the DNS message
       processing code that could allow certain UPDATE requests to crash
       named. [RT #24777] [CVE-2011-2464]

Feature Changes

9.7.4

     * Merged in the NetBSD ATF test framework (currently version 0.12)
       for development of future unit tests. Use configure --with-atf to
       build ATF internally or configure --with-atf=prefix to use an
       external copy. [RT #23209]
     * Added more verbose error reporting from DLZ LDAP. [RT #23402]
     * Replaced compile time constant with STDTIME_ON_32BITS. [RT #23587]


(taca)
diff -r1.8 -r1.9 pkgsrc/net/bind97/Makefile
diff -r1.8 -r1.9 pkgsrc/net/bind97/distinfo
diff -r1.4 -r1.5 pkgsrc/net/bind97/PLIST

cvs diff -r1.8 -r1.9 pkgsrc/net/bind97/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/net/bind97/Attic/Makefile 2011/07/05 13:56:35 1.8
+++ pkgsrc/net/bind97/Attic/Makefile 2011/08/10 15:26:10 1.9
@@ -1,32 +1,32 @@ @@ -1,32 +1,32 @@
1# $NetBSD: Makefile,v 1.8 2011/07/05 13:56:35 taca Exp $ 1# $NetBSD: Makefile,v 1.9 2011/08/10 15:26:10 taca Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5CATEGORIES= net 5CATEGORIES= net
6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ 7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.isc.org/software/bind 10HOMEPAGE= http://www.isc.org/software/bind
11COMMENT= Version 9 of the Berkeley Internet Name Daemon, implementation of DNS 11COMMENT= Version 9 of the Berkeley Internet Name Daemon, implementation of DNS
12 12
13CONFLICTS+= bind<9.7.0 13CONFLICTS+= bind<9.7.0
14 14
15PKG_DESTDIR_SUPPORT= user-destdir 15PKG_DESTDIR_SUPPORT= user-destdir
16 16
17MAKE_JOBS_SAFE= no 17MAKE_JOBS_SAFE= no
18 18
19BIND_VERSION= 9.7.3-P3 19BIND_VERSION= 9.7.4
20 20
21.include "../../mk/bsd.prefs.mk" 21.include "../../mk/bsd.prefs.mk"
22 22
23BUILD_DEFS+= BIND_DIR VARBASE 23BUILD_DEFS+= BIND_DIR VARBASE
24 24
25.include "options.mk" 25.include "options.mk"
26 26
27USE_TOOLS+= pax perl 27USE_TOOLS+= pax perl
28USE_LIBTOOL= yes 28USE_LIBTOOL= yes
29GNU_CONFIGURE= yes 29GNU_CONFIGURE= yes
30#CONFIG_SHELL= sh -x 30#CONFIG_SHELL= sh -x
31 31
32CONFIGURE_ARGS+= --with-libtool 32CONFIGURE_ARGS+= --with-libtool

cvs diff -r1.8 -r1.9 pkgsrc/net/bind97/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/net/bind97/Attic/distinfo 2011/07/05 13:56:35 1.8
+++ pkgsrc/net/bind97/Attic/distinfo 2011/08/10 15:26:11 1.9
@@ -1,10 +1,10 @@ @@ -1,10 +1,10 @@
1$NetBSD: distinfo,v 1.8 2011/07/05 13:56:35 taca Exp $ 1$NetBSD: distinfo,v 1.9 2011/08/10 15:26:11 taca Exp $
2 2
3SHA1 (bind-9.7.3-P3.tar.gz) = 90c5340daa94517e3bc7be89feef5ea6918fc390 3SHA1 (bind-9.7.4.tar.gz) = a526bf9a7114988d895e7a9c5be175a8386c6904
4RMD160 (bind-9.7.3-P3.tar.gz) = 456aed6a9c6e87de43d38860eaef2ee5d67e1f8e 4RMD160 (bind-9.7.4.tar.gz) = 2da39514b7b79aa9a3c9ce10c239514dee610194
5Size (bind-9.7.3-P3.tar.gz) = 7586748 bytes 5Size (bind-9.7.4.tar.gz) = 8316839 bytes
6SHA1 (patch-aa) = 6cec876c8caa7082f97365863f3f88c4f168da48 6SHA1 (patch-aa) = 6cec876c8caa7082f97365863f3f88c4f168da48
7SHA1 (patch-ab) = 9585a26a376d32f80ac8266eb7967c00b433f14d 7SHA1 (patch-ab) = 9585a26a376d32f80ac8266eb7967c00b433f14d
8SHA1 (patch-ac) = 8c994d3c775cea8ef55c38ba63a1112cd02ea1e3 8SHA1 (patch-ac) = 8c994d3c775cea8ef55c38ba63a1112cd02ea1e3
9SHA1 (patch-ad) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7 9SHA1 (patch-ad) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
10SHA1 (patch-ae) = 0e11a5d4a3379b74124708dc2c1fe142ce369a0c 10SHA1 (patch-ae) = 0e11a5d4a3379b74124708dc2c1fe142ce369a0c

cvs diff -r1.4 -r1.5 pkgsrc/net/bind97/Attic/PLIST (expand / switch to unified diff)

--- pkgsrc/net/bind97/Attic/PLIST 2011/02/16 17:43:22 1.4
+++ pkgsrc/net/bind97/Attic/PLIST 2011/08/10 15:26:11 1.5
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.4 2011/02/16 17:43:22 taca Exp $ 1@comment $NetBSD: PLIST,v 1.5 2011/08/10 15:26:11 taca Exp $
2bin/dig 2bin/dig
3bin/host 3bin/host
4bin/isc-config.sh 4bin/isc-config.sh
5bin/nslookup 5bin/nslookup
6bin/nsupdate 6bin/nsupdate
7${PLIST.inet6}include/isc/ipv6.h 7${PLIST.inet6}include/isc/ipv6.h
8include/bind9/check.h 8include/bind9/check.h
9include/bind9/getaddresses.h 9include/bind9/getaddresses.h
10include/bind9/version.h 10include/bind9/version.h
11include/dns/acl.h 11include/dns/acl.h
12include/dns/adb.h 12include/dns/adb.h
13include/dns/byaddr.h 13include/dns/byaddr.h
14include/dns/cache.h 14include/dns/cache.h
@@ -352,42 +352,43 @@ share/doc/bind9/arm/man.dnssec-settime.h @@ -352,42 +352,43 @@ share/doc/bind9/arm/man.dnssec-settime.h
352share/doc/bind9/arm/man.dnssec-signzone.html 352share/doc/bind9/arm/man.dnssec-signzone.html
353share/doc/bind9/arm/man.genrandom.html 353share/doc/bind9/arm/man.genrandom.html
354share/doc/bind9/arm/man.host.html 354share/doc/bind9/arm/man.host.html
355share/doc/bind9/arm/man.isc-hmac-fixup.html 355share/doc/bind9/arm/man.isc-hmac-fixup.html
356share/doc/bind9/arm/man.named-checkconf.html 356share/doc/bind9/arm/man.named-checkconf.html
357share/doc/bind9/arm/man.named-checkzone.html 357share/doc/bind9/arm/man.named-checkzone.html
358share/doc/bind9/arm/man.named-journalprint.html 358share/doc/bind9/arm/man.named-journalprint.html
359share/doc/bind9/arm/man.named.html 359share/doc/bind9/arm/man.named.html
360share/doc/bind9/arm/man.nsec3hash.html 360share/doc/bind9/arm/man.nsec3hash.html
361share/doc/bind9/arm/man.nsupdate.html 361share/doc/bind9/arm/man.nsupdate.html
362share/doc/bind9/arm/man.rndc-confgen.html 362share/doc/bind9/arm/man.rndc-confgen.html
363share/doc/bind9/arm/man.rndc.conf.html 363share/doc/bind9/arm/man.rndc.conf.html
364share/doc/bind9/arm/man.rndc.html 364share/doc/bind9/arm/man.rndc.html
 365share/doc/bind9/draft/draft-faltstrom-uri-06.txt
365share/doc/bind9/draft/draft-ietf-6man-text-addr-representation-07.txt 366share/doc/bind9/draft/draft-ietf-6man-text-addr-representation-07.txt
366share/doc/bind9/draft/draft-ietf-behave-address-format-07.txt 367share/doc/bind9/draft/draft-ietf-behave-address-format-07.txt
367share/doc/bind9/draft/draft-ietf-behave-dns64-11.txt 368share/doc/bind9/draft/draft-ietf-behave-dns64-11.txt
368share/doc/bind9/draft/draft-ietf-dnsext-axfr-clarify-14.txt 369share/doc/bind9/draft/draft-ietf-dnsext-axfr-clarify-14.txt
369share/doc/bind9/draft/draft-ietf-dnsext-dns-tcp-requirements-03.txt 370share/doc/bind9/draft/draft-ietf-dnsext-dns-tcp-requirements-03.txt
370share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-12.txt 371share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-12.txt
371share/doc/bind9/draft/draft-ietf-dnsext-dnssec-registry-fixes-06.txt 372share/doc/bind9/draft/draft-ietf-dnsext-dnssec-registry-fixes-06.txt
372share/doc/bind9/draft/draft-ietf-dnsext-ecc-key-07.txt 373share/doc/bind9/draft/draft-ietf-dnsext-ecc-key-07.txt
373share/doc/bind9/draft/draft-ietf-dnsext-interop3597-02.txt 374share/doc/bind9/draft/draft-ietf-dnsext-interop3597-02.txt
374share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-02.txt 375share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-05.txt
375share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-19.txt 376share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-19.txt
376share/doc/bind9/draft/draft-ietf-dnsext-rfc3597-bis-02.txt 377share/doc/bind9/draft/draft-ietf-dnsext-rfc3597-bis-02.txt
377share/doc/bind9/draft/draft-ietf-dnsext-tsig-md5-deprecated-03.txt 378share/doc/bind9/draft/draft-ietf-dnsext-tsig-md5-deprecated-03.txt
378share/doc/bind9/draft/draft-ietf-dnsop-bad-dns-res-05.txt 379share/doc/bind9/draft/draft-ietf-dnsop-bad-dns-res-05.txt
379share/doc/bind9/draft/draft-ietf-dnsop-default-local-zones-10.txt 380share/doc/bind9/draft/draft-ietf-dnsop-default-local-zones-10.txt
380share/doc/bind9/draft/draft-ietf-dnsop-dnssec-key-timing-00.txt 381share/doc/bind9/draft/draft-ietf-dnsop-dnssec-key-timing-02.txt
381share/doc/bind9/draft/draft-ietf-dnsop-dnssec-trust-history-01.txt 382share/doc/bind9/draft/draft-ietf-dnsop-dnssec-trust-history-01.txt
382share/doc/bind9/draft/draft-ietf-dnsop-inaddr-required-07.txt 383share/doc/bind9/draft/draft-ietf-dnsop-inaddr-required-07.txt
383share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-02.txt 384share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-02.txt
384share/doc/bind9/draft/draft-ietf-dnsop-respsize-06.txt 385share/doc/bind9/draft/draft-ietf-dnsop-respsize-06.txt
385share/doc/bind9/draft/draft-kato-dnsop-local-zones-00.txt 386share/doc/bind9/draft/draft-kato-dnsop-local-zones-00.txt
386share/doc/bind9/draft/draft-kerr-ixfr-only-01.txt 387share/doc/bind9/draft/draft-kerr-ixfr-only-01.txt
387share/doc/bind9/draft/draft-mekking-dnsop-auto-cpsync-00.txt 388share/doc/bind9/draft/draft-mekking-dnsop-auto-cpsync-00.txt
388share/doc/bind9/draft/draft-yao-dnsext-bname-04.txt 389share/doc/bind9/draft/draft-yao-dnsext-bname-04.txt
389share/doc/bind9/rfc/rfc1032.txt 390share/doc/bind9/rfc/rfc1032.txt
390share/doc/bind9/rfc/rfc1033.txt 391share/doc/bind9/rfc/rfc1033.txt
391share/doc/bind9/rfc/rfc1034.txt 392share/doc/bind9/rfc/rfc1034.txt
392share/doc/bind9/rfc/rfc1035.txt 393share/doc/bind9/rfc/rfc1035.txt
393share/doc/bind9/rfc/rfc1101.txt 394share/doc/bind9/rfc/rfc1101.txt