Wed Jul 25 10:30:24 2012 UTC ()
Pullup ticket #3871 - requested by spz
net/bind99 security update

Revisions pulled up:
- net/bind99/Makefile                                           1.9
- net/bind99/distinfo                                           1.7

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Tue Jul 24 20:40:12 UTC 2012

   Modified Files:
   	pkgsrc/net/bind99: Makefile distinfo

   Log Message:
   patch version fixing CVE-2012-3817 and CVE-2012-3868:

              --- 9.9.1-P2 released ---

      3349.   [bug]           Change #3345 was incomplete. [RT #30233]

      3346.   [security]      Bad-cache data could be used before it was
                              initialized, causing an assert. [RT #30025]

      3345.   [bug]           Addressed race condition when removing the last item
                              or inserting the first item in an ISC_QUEUE.
                              [RT #29539]

      3342.   [bug]           Change #3314 broke saving of stub zones to disk
                              resulting in excessive cpu usage in some cases.
                              [RT #29952]


(sbd)
diff -r1.6 -r1.6.2.1 pkgsrc/net/bind99/Makefile
diff -r1.5 -r1.5.2.1 pkgsrc/net/bind99/distinfo

cvs diff -r1.6 -r1.6.2.1 pkgsrc/net/bind99/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/net/bind99/Attic/Makefile 2012/06/14 07:45:39 1.6
+++ pkgsrc/net/bind99/Attic/Makefile 2012/07/25 10:30:24 1.6.2.1
@@ -1,33 +1,32 @@ @@ -1,33 +1,32 @@
1# $NetBSD: Makefile,v 1.6 2012/06/14 07:45:39 sbd Exp $ 1# $NetBSD: Makefile,v 1.6.2.1 2012/07/25 10:30:24 sbd Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5PKGREVISION= 1 
6CATEGORIES= net 5CATEGORIES= net
7MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
8 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ 7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
9 8
10MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
11HOMEPAGE= http://www.isc.org/software/bind 10HOMEPAGE= http://www.isc.org/software/bind
12COMMENT= Version 9.9 of the Berkeley Internet Name Daemon, implementation of DNS 11COMMENT= Version 9.9 of the Berkeley Internet Name Daemon, implementation of DNS
13 12
14CONFLICTS+= bind<9.9.0 13CONFLICTS+= bind<9.9.0
15 14
16PKG_DESTDIR_SUPPORT= user-destdir 15PKG_DESTDIR_SUPPORT= user-destdir
17 16
18MAKE_JOBS_SAFE= no 17MAKE_JOBS_SAFE= no
19 18
20BIND_VERSION= 9.9.1-P1 19BIND_VERSION= 9.9.1-P2
21 20
22.include "../../mk/bsd.prefs.mk" 21.include "../../mk/bsd.prefs.mk"
23 22
24BUILD_DEFS+= BIND_DIR VARBASE 23BUILD_DEFS+= BIND_DIR VARBASE
25 24
26.include "options.mk" 25.include "options.mk"
27 26
28USE_TOOLS+= pax perl 27USE_TOOLS+= pax perl
29USE_LIBTOOL= yes 28USE_LIBTOOL= yes
30GNU_CONFIGURE= yes 29GNU_CONFIGURE= yes
31#CONFIG_SHELL= sh -x 30#CONFIG_SHELL= sh -x
32 31
33CONFIGURE_ARGS+= --with-libtool 32CONFIGURE_ARGS+= --with-libtool

cvs diff -r1.5 -r1.5.2.1 pkgsrc/net/bind99/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/net/bind99/Attic/distinfo 2012/06/04 13:24:28 1.5
+++ pkgsrc/net/bind99/Attic/distinfo 2012/07/25 10:30:24 1.5.2.1
@@ -1,18 +1,19 @@ @@ -1,18 +1,19 @@
1$NetBSD: distinfo,v 1.5 2012/06/04 13:24:28 taca Exp $ 1$NetBSD: distinfo,v 1.5.2.1 2012/07/25 10:30:24 sbd Exp $
2 2
3SHA1 (bind-9.9.1-P1.tar.gz) = a2263b96ccd8a143ea54b39958142c542bf605a8 3SHA1 (bind-9.9.1-P2.tar.gz) = 449b12c32682b5bef64c7b53cd0fc0c6b731c8a7
4RMD160 (bind-9.9.1-P1.tar.gz) = 5ba6adbfeab5872582095b213e95b97eda59d044 4RMD160 (bind-9.9.1-P2.tar.gz) = 76b8f61a1930922223544ed3671dd017a4f593d1
5Size (bind-9.9.1-P1.tar.gz) = 7223197 bytes 5Size (bind-9.9.1-P2.tar.gz) = 7223896 bytes
 6SHA1 (patch-bin_dig_Makefile.in) = d2c2a0b137be7e31fdc15438d107116fc38a38b9
6SHA1 (patch-bin_dig_dighost.c) = 186cdc70605242afb0211dc8802ec75677a65614 7SHA1 (patch-bin_dig_dighost.c) = 186cdc70605242afb0211dc8802ec75677a65614
7SHA1 (patch-bin_tests_system_Makefile.in) = 3224a66b7d29f6f17d02de1663c61b5e57b91d20 8SHA1 (patch-bin_tests_system_Makefile.in) = 3224a66b7d29f6f17d02de1663c61b5e57b91d20
8SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2 9SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2
9SHA1 (patch-configure) = 6a8b709d8369864c397d4315348c9c96753618f6 10SHA1 (patch-configure) = 6a8b709d8369864c397d4315348c9c96753618f6
10SHA1 (patch-lib_bind9_Makefile.in) = 89e21d21fa512f11a2fdb8d7455abd5d95f20ba5 11SHA1 (patch-lib_bind9_Makefile.in) = 89e21d21fa512f11a2fdb8d7455abd5d95f20ba5
11SHA1 (patch-lib_dns_Makefile.in) = 1770a8bd86901c618b11d255f3af54748d04b759 12SHA1 (patch-lib_dns_Makefile.in) = 1770a8bd86901c618b11d255f3af54748d04b759
12SHA1 (patch-lib_dns_rbt.c) = df4b029369d9fa3b250d8505b5f7590e2cd86654 13SHA1 (patch-lib_dns_rbt.c) = df4b029369d9fa3b250d8505b5f7590e2cd86654
13SHA1 (patch-lib_dns_zone.c) = e01378ee95bf7c5b903a2c3a90acf83a3a4cae52 14SHA1 (patch-lib_dns_zone.c) = e01378ee95bf7c5b903a2c3a90acf83a3a4cae52
14SHA1 (patch-lib_isc_Makefile.in) = 5e0739d19957b1f26bcc24a6c76bcab6248cbff5 15SHA1 (patch-lib_isc_Makefile.in) = 5e0739d19957b1f26bcc24a6c76bcab6248cbff5
15SHA1 (patch-lib_isccc_Makefile.in) = a31831872b7724cb84f663ed70a82335d812f95f 16SHA1 (patch-lib_isccc_Makefile.in) = a31831872b7724cb84f663ed70a82335d812f95f
16SHA1 (patch-lib_isccfg_Makefile.in) = 5ce4a85c1a13eca255804850b18b421418a2a01b 17SHA1 (patch-lib_isccfg_Makefile.in) = 5ce4a85c1a13eca255804850b18b421418a2a01b
17SHA1 (patch-lib_lwres_Makefile.in) = 40fd0ed1d699cb2f6258f33888a9495899373767 18SHA1 (patch-lib_lwres_Makefile.in) = 40fd0ed1d699cb2f6258f33888a9495899373767
18SHA1 (patch-lib_lwres_getaddrinfo.c) = ccc00e446867785e401eb92e63e05505dfd01087 19SHA1 (patch-lib_lwres_getaddrinfo.c) = ccc00e446867785e401eb92e63e05505dfd01087