Mon Dec 8 21:59:09 2014 UTC ()
Update bind910 to 9.10.1pl1 (BIND 9.10.1-P1).

	--- 9.10.1-P1 released ---

4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option, and the query limit
			via the "max-recursion-queries" option.  [RT #37580]

4003.	[security]	When geoip-directory was reconfigured during
			named run-time, the previously loaded GeoIP
			data could remain, potentially causing wrong
			ACLs to be used or wrong results to be served
			based on geolocation (CVE-2014-8680). [RT #37720]

4002.	[security]	Lookups in GeoIP databases that were not
			loaded could cause an assertion failure
			(CVE-2014-8680). [RT #37679]

4001.	[security]	The caching of GeoIP lookups did not always
			handle address families correctly, potentially
			resulting in an assertion failure (CVE-2014-8680).
			[RT #37672]


(taca)
diff -r1.2 -r1.3 pkgsrc/net/bind910/Makefile
diff -r1.2 -r1.3 pkgsrc/net/bind910/PLIST
diff -r1.2 -r1.3 pkgsrc/net/bind910/distinfo

cvs diff -r1.2 -r1.3 pkgsrc/net/bind910/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/net/bind910/Attic/Makefile 2014/10/14 16:23:19 1.2
+++ pkgsrc/net/bind910/Attic/Makefile 2014/12/08 21:59:09 1.3
@@ -1,30 +1,30 @@ @@ -1,30 +1,30 @@
1# $NetBSD: Makefile,v 1.2 2014/10/14 16:23:19 taca Exp $ 1# $NetBSD: Makefile,v 1.3 2014/12/08 21:59:09 taca Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5CATEGORIES= net 5CATEGORIES= net
6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ 7 http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.isc.org/software/bind/ 10HOMEPAGE= http://www.isc.org/software/bind/
11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.10 11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.10
12 12
13CONFLICTS+= host-[0-9]* 13CONFLICTS+= host-[0-9]*
14 14
15MAKE_JOBS_SAFE= no 15MAKE_JOBS_SAFE= no
16 16
17BIND_VERSION= 9.10.1 17BIND_VERSION= 9.10.1-P1
18 18
19.include "../../mk/bsd.prefs.mk" 19.include "../../mk/bsd.prefs.mk"
20 20
21BUILD_DEFS+= BIND_DIR VARBASE 21BUILD_DEFS+= BIND_DIR VARBASE
22 22
23.include "options.mk" 23.include "options.mk"
24 24
25USE_TOOLS+= pax perl 25USE_TOOLS+= pax perl
26USE_LIBTOOL= yes 26USE_LIBTOOL= yes
27GNU_CONFIGURE= yes 27GNU_CONFIGURE= yes
28#CONFIG_SHELL= sh -x 28#CONFIG_SHELL= sh -x
29 29
30CONFIGURE_ARGS+= --with-libtool 30CONFIGURE_ARGS+= --with-libtool

cvs diff -r1.2 -r1.3 pkgsrc/net/bind910/Attic/PLIST (expand / switch to unified diff)

--- pkgsrc/net/bind910/Attic/PLIST 2014/10/14 16:23:19 1.2
+++ pkgsrc/net/bind910/Attic/PLIST 2014/12/08 21:59:09 1.3
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.2 2014/10/14 16:23:19 taca Exp $ 1@comment $NetBSD: PLIST,v 1.3 2014/12/08 21:59:09 taca Exp $
2bin/bind9-config 2bin/bind9-config
3bin/delv 3bin/delv
4bin/dig 4bin/dig
5bin/host 5bin/host
6bin/isc-config.sh 6bin/isc-config.sh
7bin/nslookup 7bin/nslookup
8bin/nsupdate 8bin/nsupdate
9${PLIST.inet6}include/isc/ipv6.h 9${PLIST.inet6}include/isc/ipv6.h
10include/bind9/check.h 10include/bind9/check.h
11include/bind9/getaddresses.h 11include/bind9/getaddresses.h
12include/bind9/version.h 12include/bind9/version.h
13include/dns/acache.h 13include/dns/acache.h
14include/dns/acl.h 14include/dns/acl.h
@@ -114,26 +114,27 @@ include/irs/version.h @@ -114,26 +114,27 @@ include/irs/version.h
114include/isc/aes.h 114include/isc/aes.h
115include/isc/app.h 115include/isc/app.h
116include/isc/assertions.h 116include/isc/assertions.h
117include/isc/atomic.h 117include/isc/atomic.h
118include/isc/backtrace.h 118include/isc/backtrace.h
119include/isc/base32.h 119include/isc/base32.h
120include/isc/base64.h 120include/isc/base64.h
121include/isc/bind9.h 121include/isc/bind9.h
122include/isc/boolean.h 122include/isc/boolean.h
123include/isc/buffer.h 123include/isc/buffer.h
124include/isc/bufferlist.h 124include/isc/bufferlist.h
125include/isc/commandline.h 125include/isc/commandline.h
126include/isc/condition.h 126include/isc/condition.h
 127include/isc/counter.h
127include/isc/crc64.h 128include/isc/crc64.h
128include/isc/dir.h 129include/isc/dir.h
129include/isc/entropy.h 130include/isc/entropy.h
130include/isc/error.h 131include/isc/error.h
131include/isc/event.h 132include/isc/event.h
132include/isc/eventclass.h 133include/isc/eventclass.h
133include/isc/file.h 134include/isc/file.h
134include/isc/formatcheck.h 135include/isc/formatcheck.h
135include/isc/fsaccess.h 136include/isc/fsaccess.h
136include/isc/hash.h 137include/isc/hash.h
137include/isc/heap.h 138include/isc/heap.h
138include/isc/hex.h 139include/isc/hex.h
139include/isc/hmacmd5.h 140include/isc/hmacmd5.h

cvs diff -r1.2 -r1.3 pkgsrc/net/bind910/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/net/bind910/Attic/distinfo 2014/10/14 16:23:19 1.2
+++ pkgsrc/net/bind910/Attic/distinfo 2014/12/08 21:59:09 1.3
@@ -1,13 +1,13 @@ @@ -1,13 +1,13 @@
1$NetBSD: distinfo,v 1.2 2014/10/14 16:23:19 taca Exp $ 1$NetBSD: distinfo,v 1.3 2014/12/08 21:59:09 taca Exp $
2 2
3SHA1 (bind-9.10.1.tar.gz) = 96aa28c6112c6a8c33a19efeac98c715f03b35ca 3SHA1 (bind-9.10.1-P1.tar.gz) = 24a81ba458a762c27be47461301fcf336cfb1d43
4RMD160 (bind-9.10.1.tar.gz) = 5bc833a729a4d94c3d85af17d1452d15ea605c3c 4RMD160 (bind-9.10.1-P1.tar.gz) = d98d5d14365b7604cb2c5a14664773f7f746bb37
5Size (bind-9.10.1.tar.gz) = 8353313 bytes 5Size (bind-9.10.1-P1.tar.gz) = 8356463 bytes
6SHA1 (patch-bin_dig_dighost.c) = 72cb7676cdf9cd4b44bc62c72bcf29127d9fbffe 6SHA1 (patch-bin_dig_dighost.c) = 72cb7676cdf9cd4b44bc62c72bcf29127d9fbffe
7SHA1 (patch-bin_tests_system_Makefile.in) = 8bb6130981a6ff2ac736cf53a061115782bb65a2 7SHA1 (patch-bin_tests_system_Makefile.in) = 8bb6130981a6ff2ac736cf53a061115782bb65a2
8SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2 8SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2
9SHA1 (patch-configure) = 1de3bfa72fd9887a8fbb20ddd12bfe0469083ba0 9SHA1 (patch-configure) = 1de3bfa72fd9887a8fbb20ddd12bfe0469083ba0
10SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f 10SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f
11SHA1 (patch-lib_dns_rbt.c) = 510dfc72bc7764e548a46e9c48b58b2543490d7a 11SHA1 (patch-lib_dns_rbt.c) = 510dfc72bc7764e548a46e9c48b58b2543490d7a
12SHA1 (patch-lib_lwres_getaddrinfo.c) = 69e9c8049fedcb93bd219c6053163f21ce3b2535 12SHA1 (patch-lib_lwres_getaddrinfo.c) = 69e9c8049fedcb93bd219c6053163f21ce3b2535
13SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1 13SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1