Tue Jan 14 09:49:01 2014 UTC ()
Pullup ticket #4295 - requested by taca
net/bind98: security update

Revisions pulled up:
- net/bind98/Makefile                                           1.35
- net/bind98/distinfo                                           1.26
- net/bind98/patches/patch-configure                            1.5

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jan 13 17:28:22 UTC 2014

   Modified Files:
   	pkgsrc/net/bind98: Makefile distinfo
   	pkgsrc/net/bind98/patches: patch-configure

   Log Message:
   Update bind98 to 9.8.6pl2, (BIND 9.8.6-P2), security fix for CVE-2014-0591.

   	--- 9.8.6-P2 released ---

   3693.	[security]	memcpy was incorrectly called with overlapping
   			ranges resulting in malformed names being generated
   			on some platforms.  This could cause INSIST failures
   			when serving NSEC3 signed zones.  [RT #35120]

   3658.	[port]		linux: Address platform specific compilation issue
   			when libcap-devel is installed. [RT #34838]


(tron)
diff -r1.34 -r1.34.2.1 pkgsrc/net/bind98/Makefile
diff -r1.25 -r1.25.2.1 pkgsrc/net/bind98/distinfo
diff -r1.4 -r1.4.4.1 pkgsrc/net/bind98/patches/patch-configure
cvs diff -r1.34 -r1.34.2.1 pkgsrc/net/bind98/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/net/bind98/Attic/Makefile 2013/11/07 04:22:22 1.34
+++ pkgsrc/net/bind98/Attic/Makefile 2014/01/14 09:49:00 1.34.2.1
@@ -1,30 +1,30 @@ @@ -1,30 +1,30 @@
1# $NetBSD: Makefile,v 1.34 2013/11/07 04:22:22 taca Exp $ 1# $NetBSD: Makefile,v 1.34.2.1 2014/01/14 09:49:00 tron Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5CATEGORIES= net 5CATEGORIES= net
6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ 7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.isc.org/software/bind/ 10HOMEPAGE= http://www.isc.org/software/bind/
11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.8 11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.8
12 12
13CONFLICTS+= host-[0-9]* 13CONFLICTS+= host-[0-9]*
14 14
15MAKE_JOBS_SAFE= no 15MAKE_JOBS_SAFE= no
16 16
17BIND_VERSION= 9.8.6-P1 17BIND_VERSION= 9.8.6-P2
18 18
19.include "../../mk/bsd.prefs.mk" 19.include "../../mk/bsd.prefs.mk"
20 20
21BUILD_DEFS+= BIND_DIR VARBASE 21BUILD_DEFS+= BIND_DIR VARBASE
22 22
23.include "options.mk" 23.include "options.mk"
24 24
25USE_TOOLS+= pax perl 25USE_TOOLS+= pax perl
26USE_LIBTOOL= yes 26USE_LIBTOOL= yes
27GNU_CONFIGURE= yes 27GNU_CONFIGURE= yes
28#CONFIG_SHELL= sh -x 28#CONFIG_SHELL= sh -x
29 29
30CONFIGURE_ARGS+= --with-libtool 30CONFIGURE_ARGS+= --with-libtool
cvs diff -r1.25 -r1.25.2.1 pkgsrc/net/bind98/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/net/bind98/Attic/distinfo 2013/11/07 04:22:22 1.25
+++ pkgsrc/net/bind98/Attic/distinfo 2014/01/14 09:49:00 1.25.2.1
@@ -1,15 +1,15 @@ @@ -1,15 +1,15 @@
1$NetBSD: distinfo,v 1.25 2013/11/07 04:22:22 taca Exp $ 1$NetBSD: distinfo,v 1.25.2.1 2014/01/14 09:49:00 tron Exp $
2 2
3SHA1 (bind-9.8.6-P1.tar.gz) = 8655bf0c40a423248999ba9f36a7133164b0cc65 3SHA1 (bind-9.8.6-P2.tar.gz) = c2c513621019d14fd9e13caad86a4e13198d5e77
4RMD160 (bind-9.8.6-P1.tar.gz) = b5ff3a24376025dadfc0e8ae7cb8a9ac4deaacc8 4RMD160 (bind-9.8.6-P2.tar.gz) = 11384ed47a19d9bfd32b1f00f0d5e879c76d396c
5Size (bind-9.8.6-P1.tar.gz) = 7275757 bytes 5Size (bind-9.8.6-P2.tar.gz) = 7275835 bytes
6SHA1 (rl-9.8.6rc1.patch) = cacea695ab57cc44f0b79bef1e42ba4f787ca96f 6SHA1 (rl-9.8.6rc1.patch) = cacea695ab57cc44f0b79bef1e42ba4f787ca96f
7RMD160 (rl-9.8.6rc1.patch) = 13ac5bb0c5b0129b560026861dd4be5d17801055 7RMD160 (rl-9.8.6rc1.patch) = 13ac5bb0c5b0129b560026861dd4be5d17801055
8Size (rl-9.8.6rc1.patch) = 103557 bytes 8Size (rl-9.8.6rc1.patch) = 103557 bytes
9SHA1 (patch-bin_dig_dighost.c) = f76d4a3a3e521a9ff691e12b9f7c63299b15c74d 9SHA1 (patch-bin_dig_dighost.c) = f76d4a3a3e521a9ff691e12b9f7c63299b15c74d
10SHA1 (patch-bin_tests_system_Makefile.in) = 650ac962464e23f6c4278e7025f55f282789f9c9 10SHA1 (patch-bin_tests_system_Makefile.in) = 650ac962464e23f6c4278e7025f55f282789f9c9
11SHA1 (patch-config.threads.in) = 045531d8378a88c654ab98ba6ea65786c8cf4e2b 11SHA1 (patch-config.threads.in) = 045531d8378a88c654ab98ba6ea65786c8cf4e2b
12SHA1 (patch-configure) = 5d16cc851b425805e97c4a14770529ced57a5374 12SHA1 (patch-configure) = f811ac49b3d94903eb3abf887e0613decd4e8344
13SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7 13SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
14SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d 14SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d
15SHA1 (patch-lib_lwres_getnameinfo.c) = 1224033e3c1ca14f1508542e5d41c899060d4d9c 15SHA1 (patch-lib_lwres_getnameinfo.c) = 1224033e3c1ca14f1508542e5d41c899060d4d9c
cvs diff -r1.4 -r1.4.4.1 pkgsrc/net/bind98/patches/Attic/patch-configure (expand / switch to unified diff)

--- pkgsrc/net/bind98/patches/Attic/patch-configure 2013/09/21 15:59:01 1.4
+++ pkgsrc/net/bind98/patches/Attic/patch-configure 2014/01/14 09:49:00 1.4.4.1
@@ -1,22 +1,22 @@ @@ -1,22 +1,22 @@
1$NetBSD: patch-configure,v 1.4 2013/09/21 15:59:01 taca Exp $ 1$NetBSD: patch-configure,v 1.4.4.1 2014/01/14 09:49:00 tron Exp $
2 2
3--- configure.orig 2013-09-05 05:19:53.000000000 +0000 3--- configure.orig 2013-12-20 00:30:37.000000000 +0000
4+++ configure 4+++ configure
5@@ -14682,6 +14682,8 @@ case $host in 5@@ -14682,6 +14682,8 @@ case $host in
6 use_threads=false ;; 6 use_threads=false ;;
7 *-freebsd*) 7 *-freebsd*)
8 use_threads=false ;; 8 use_threads=false ;;
9+*-dragonfly*) 9+*-dragonfly*)
10+ use_threads=false ;; 10+ use_threads=false ;;
11 *-bsdi[234]*) 11 *-bsdi[234]*)
12 # Thread signals do not work reliably on some versions of BSD/OS. 12 # Thread signals do not work reliably on some versions of BSD/OS.
13 use_threads=false ;; 13 use_threads=false ;;
14@@ -19672,7 +19674,7 @@ $as_echo "no" >&6; } 14@@ -19683,7 +19685,7 @@ $as_echo "no" >&6; }
15 fi 15 fi
16 if test -n "-L$use_dlz_postgres_lib -lpq" 16 if test -n "-L$use_dlz_postgres_lib -lpq"
17 then 17 then
18- DLZ_DRIVER_LIBS="$DLZ_DRIVER_LIBS -L$use_dlz_postgres_lib -lpq" 18- DLZ_DRIVER_LIBS="$DLZ_DRIVER_LIBS -L$use_dlz_postgres_lib -lpq"
19+ DLZ_DRIVER_LIBS="$DLZ_DRIVER_LIBS -L${PREFIX}/lib -lpq" 19+ DLZ_DRIVER_LIBS="$DLZ_DRIVER_LIBS -L${PREFIX}/lib -lpq"
20 fi 20 fi
21  21
22  22