Sat Jul 27 11:35:40 2013 UTC ()
Pullup ticket #4189 - requested by taca
net/bind99: security update

Revisions pulled up:
- net/bind99/Makefile                                           1.28
- net/bind99/distinfo                                           1.17

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Jul 27 03:20:07 UTC 2013

   Modified Files:
   	pkgsrc/net/bind99: Makefile distinfo

   Log Message:
   Update bind99 to 9.9.3pl2 (BIND 9.9.3-P2).

   --- 9.9.3-P2 released ---

   3621.	[security]	Incorrect bounds checking on private type 'keydata'
   			can lead to a remotely triggerable REQUIRE failure
   			(CVE-2013-4854). [RT #34238]


(tron)
diff -r1.26.2.2 -r1.26.2.3 pkgsrc/net/bind99/Makefile
diff -r1.16.2.2 -r1.16.2.3 pkgsrc/net/bind99/distinfo
cvs diff -r1.26.2.2 -r1.26.2.3 pkgsrc/net/bind99/Attic/Makefile (switch to unified diff)

--- pkgsrc/net/bind99/Attic/Makefile 2013/07/27 06:12:06 1.26.2.2
+++ pkgsrc/net/bind99/Attic/Makefile 2013/07/27 11:35:40 1.26.2.3
@@ -1,79 +1,79 @@ @@ -1,79 +1,79 @@
1# $NetBSD: Makefile,v 1.26.2.2 2013/07/27 06:12:06 taca Exp $ 1# $NetBSD: Makefile,v 1.26.2.3 2013/07/27 11:35:40 tron Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5CATEGORIES= net 5CATEGORIES= net
6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ 7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.isc.org/software/bind/ 10HOMEPAGE= http://www.isc.org/software/bind/
11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.9 11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.9
12 12
13CONFLICTS+= host-[0-9]* 13CONFLICTS+= host-[0-9]*
14 14
15MAKE_JOBS_SAFE= no 15MAKE_JOBS_SAFE= no
16 16
17BIND_VERSION= 9.9.3-P1 17BIND_VERSION= 9.9.3-P2
18 18
19.include "../../mk/bsd.prefs.mk" 19.include "../../mk/bsd.prefs.mk"
20 20
21BUILD_DEFS+= BIND_DIR VARBASE 21BUILD_DEFS+= BIND_DIR VARBASE
22 22
23.include "options.mk" 23.include "options.mk"
24 24
25USE_TOOLS+= pax perl 25USE_TOOLS+= pax perl
26USE_LIBTOOL= yes 26USE_LIBTOOL= yes
27GNU_CONFIGURE= yes 27GNU_CONFIGURE= yes
28#CONFIG_SHELL= sh -x 28#CONFIG_SHELL= sh -x
29 29
30CONFIGURE_ARGS+= --with-libtool 30CONFIGURE_ARGS+= --with-libtool
31CONFIGURE_ARGS+= --sysconfdir=/etc 31CONFIGURE_ARGS+= --sysconfdir=/etc
32CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q} 32CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q}
33CONFIGURE_ARGS+= --disable-openssl-version-check 33CONFIGURE_ARGS+= --disable-openssl-version-check
34CONFIGURE_ARGS+= --with-openssl=${SSLBASE:Q} 34CONFIGURE_ARGS+= --with-openssl=${SSLBASE:Q}
35CONFIGURE_ARGS+= --with-python=no 35CONFIGURE_ARGS+= --with-python=no
36.if ${MACHINE_PLATFORM:MNetBSD-*-mipsel} != "" 36.if ${MACHINE_PLATFORM:MNetBSD-*-mipsel} != ""
37CONFIGURE_ARGS+= --disable-atomic 37CONFIGURE_ARGS+= --disable-atomic
38.endif 38.endif
39.if ${MACHINE_PLATFORM:MNetBSD-*-powerpc} != "" 39.if ${MACHINE_PLATFORM:MNetBSD-*-powerpc} != ""
40CONFIGURE_ARGS+= --disable-threads 40CONFIGURE_ARGS+= --disable-threads
41.endif 41.endif
42.if ${OPSYS} == "DragonFly" 42.if ${OPSYS} == "DragonFly"
43CONFIGURE_ARGS+= --disable-kqueue 43CONFIGURE_ARGS+= --disable-kqueue
44.endif 44.endif
45 45
46PKG_GROUPS_VARS+= BIND_GROUP 46PKG_GROUPS_VARS+= BIND_GROUP
47PKG_USERS_VARS+= BIND_USER 47PKG_USERS_VARS+= BIND_USER
48 48
49PKG_GROUPS= ${BIND_GROUP} 49PKG_GROUPS= ${BIND_GROUP}
50PKG_USERS= ${BIND_USER}:${BIND_GROUP} 50PKG_USERS= ${BIND_USER}:${BIND_GROUP}
51 51
52PKG_GECOS.${BIND_USER}= Named pseudo-user 52PKG_GECOS.${BIND_USER}= Named pseudo-user
53PKG_HOME.${BIND_USER}= ${BIND_DIR} 53PKG_HOME.${BIND_USER}= ${BIND_DIR}
54 54
55DOCS= CHANGES FAQ README 55DOCS= CHANGES FAQ README
56 56
57FILES_SUBST+= BIND_GROUP=${BIND_GROUP:Q} \ 57FILES_SUBST+= BIND_GROUP=${BIND_GROUP:Q} \
58 BIND_USER=${BIND_USER:Q} PAX=${PAX:Q} 58 BIND_USER=${BIND_USER:Q} PAX=${PAX:Q}
59MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER} 59MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}
60DOCDIR= ${DESTDIR}${PREFIX}/share/doc/bind9 60DOCDIR= ${DESTDIR}${PREFIX}/share/doc/bind9
61 61
62# include/isc/ipv6.h is installed on non-ipv6 platforms 62# include/isc/ipv6.h is installed on non-ipv6 platforms
63PLIST_VARS+= inet6 63PLIST_VARS+= inet6
64.if !empty(MISSING_FEATURES:Minet6) 64.if !empty(MISSING_FEATURES:Minet6)
65PLIST.inet6= yes 65PLIST.inet6= yes
66.endif 66.endif
67 67
68RCD_SCRIPTS= lwresd named9 68RCD_SCRIPTS= lwresd named9
69 69
70INSTALLATION_DIRS= ${DOCDIR} share/doc/bind9/arm 70INSTALLATION_DIRS= ${DOCDIR} share/doc/bind9/arm
71 71
72post-install: 72post-install:
73.for f in ${DOCS} 73.for f in ${DOCS}
74 ${INSTALL_DATA} ${WRKSRC}/${f} ${DOCDIR} 74 ${INSTALL_DATA} ${WRKSRC}/${f} ${DOCDIR}
75.endfor 75.endfor
76 ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm 76 ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm
77 77
78.include "../../security/openssl/buildlink3.mk" 78.include "../../security/openssl/buildlink3.mk"
79.include "../../mk/bsd.pkg.mk" 79.include "../../mk/bsd.pkg.mk"
cvs diff -r1.16.2.2 -r1.16.2.3 pkgsrc/net/bind99/Attic/distinfo (switch to unified diff)

--- pkgsrc/net/bind99/Attic/distinfo 2013/07/27 06:12:06 1.16.2.2
+++ pkgsrc/net/bind99/Attic/distinfo 2013/07/27 11:35:40 1.16.2.3
@@ -1,25 +1,23 @@ @@ -1,25 +1,23 @@
1$NetBSD: distinfo,v 1.16.2.2 2013/07/27 06:12:06 taca Exp $ 1$NetBSD: distinfo,v 1.16.2.3 2013/07/27 11:35:40 tron Exp $
2 2
3SHA1 (bind-9.9.3-P1.tar.gz) = 9e1a9e5e45685befce6b93d4fcfd63e50eaeb2cf 3SHA1 (bind-9.9.3-P2.tar.gz) = a0235692c488b3fadf54a15858b1f13ae2ab6979
4RMD160 (bind-9.9.3-P1.tar.gz) = 1c0e244781fa653872794991091e7403f4b6f020 4RMD160 (bind-9.9.3-P2.tar.gz) = 4d760937864bb7edb3d9862cbe446235a8a5ddee
5Size (bind-9.9.3-P1.tar.gz) = 7459819 bytes 5Size (bind-9.9.3-P2.tar.gz) = 7459422 bytes
6SHA1 (rl-9.9.3-P1.patch) = f4538d33c6d958e579752f90c9cee7db5dd1a6fa 6SHA1 (rl-9.9.3-P1.patch) = f4538d33c6d958e579752f90c9cee7db5dd1a6fa
7RMD160 (rl-9.9.3-P1.patch) = df1b825f2faa314680246be58cc74cb93a730105 7RMD160 (rl-9.9.3-P1.patch) = df1b825f2faa314680246be58cc74cb93a730105
8Size (rl-9.9.3-P1.patch) = 103910 bytes 8Size (rl-9.9.3-P1.patch) = 103910 bytes
9SHA1 (patch-bin_dig_Makefile.in) = d2c2a0b137be7e31fdc15438d107116fc38a38b9 
10SHA1 (patch-bin_dig_dighost.c) = 186cdc70605242afb0211dc8802ec75677a65614 9SHA1 (patch-bin_dig_dighost.c) = 186cdc70605242afb0211dc8802ec75677a65614
11SHA1 (patch-bin_nsupdate_Makefile.in) = 42b39d60468ffa8ed13f77259755b217966de664 
12SHA1 (patch-bin_tests_system_Makefile.in) = 1f268808c55223ac11d1794039503424a51ee71b 10SHA1 (patch-bin_tests_system_Makefile.in) = 1f268808c55223ac11d1794039503424a51ee71b
13SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2 11SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2
14SHA1 (patch-configure) = cd7f1b06f3849016c971b5947578128594a04b9a 12SHA1 (patch-configure) = cd7f1b06f3849016c971b5947578128594a04b9a
15SHA1 (patch-configure.in) = cc6fcdd0ad9fdc9546dc15d51c267bd4ac1453a6 13SHA1 (patch-configure.in) = cc6fcdd0ad9fdc9546dc15d51c267bd4ac1453a6
16SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f 14SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f
17SHA1 (patch-lib_bind9_Makefile.in) = 89e21d21fa512f11a2fdb8d7455abd5d95f20ba5 15SHA1 (patch-lib_bind9_Makefile.in) = 89e21d21fa512f11a2fdb8d7455abd5d95f20ba5
18SHA1 (patch-lib_dns_Makefile.in) = 1770a8bd86901c618b11d255f3af54748d04b759 16SHA1 (patch-lib_dns_Makefile.in) = 1770a8bd86901c618b11d255f3af54748d04b759
19SHA1 (patch-lib_dns_rbt.c) = df4b029369d9fa3b250d8505b5f7590e2cd86654 17SHA1 (patch-lib_dns_rbt.c) = df4b029369d9fa3b250d8505b5f7590e2cd86654
20SHA1 (patch-lib_isc_Makefile.in) = 5e0739d19957b1f26bcc24a6c76bcab6248cbff5 18SHA1 (patch-lib_isc_Makefile.in) = 5e0739d19957b1f26bcc24a6c76bcab6248cbff5
21SHA1 (patch-lib_isccc_Makefile.in) = a31831872b7724cb84f663ed70a82335d812f95f 19SHA1 (patch-lib_isccc_Makefile.in) = a31831872b7724cb84f663ed70a82335d812f95f
22SHA1 (patch-lib_isccfg_Makefile.in) = 5ce4a85c1a13eca255804850b18b421418a2a01b 20SHA1 (patch-lib_isccfg_Makefile.in) = 5ce4a85c1a13eca255804850b18b421418a2a01b
23SHA1 (patch-lib_lwres_Makefile.in) = 40fd0ed1d699cb2f6258f33888a9495899373767 21SHA1 (patch-lib_lwres_Makefile.in) = 40fd0ed1d699cb2f6258f33888a9495899373767
24SHA1 (patch-lib_lwres_getaddrinfo.c) = ccc00e446867785e401eb92e63e05505dfd01087 22SHA1 (patch-lib_lwres_getaddrinfo.c) = ccc00e446867785e401eb92e63e05505dfd01087
25SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1 23SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1