Update bind910 to 9.10.1pl1 (BIND 9.10.1-P1). --- 9.10.1-P1 released --- 4006. [security] A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive query (CVE-2014-8500). The recursion depth limit is configured via the "max-recursion-depth" option, and the query limit via the "max-recursion-queries" option. [RT #37580] 4003. [security] When geoip-directory was reconfigured during named run-time, the previously loaded GeoIP data could remain, potentially causing wrong ACLs to be used or wrong results to be served based on geolocation (CVE-2014-8680). [RT #37720] 4002. [security] Lookups in GeoIP databases that were not loaded could cause an assertion failure (CVE-2014-8680). [RT #37679] 4001. [security] The caching of GeoIP lookups did not always handle address families correctly, potentially resulting in an assertion failure (CVE-2014-8680). [RT #37672]diff -r1.2 -r1.3 pkgsrc/net/bind910/Makefile
(taca)
@@ -1,30 +1,30 @@ | @@ -1,30 +1,30 @@ | |||
1 | # $NetBSD: Makefile,v 1.2 2014/10/14 16:23:19 taca Exp $ | 1 | # $NetBSD: Makefile,v 1.3 2014/12/08 21:59:09 taca Exp $ | |
2 | 2 | |||
3 | DISTNAME= bind-${BIND_VERSION} | 3 | DISTNAME= bind-${BIND_VERSION} | |
4 | PKGNAME= ${DISTNAME:S/-P/pl/} | 4 | PKGNAME= ${DISTNAME:S/-P/pl/} | |
5 | CATEGORIES= net | 5 | CATEGORIES= net | |
6 | MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ | 6 | MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \ | |
7 | http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ | 7 | http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/ | |
8 | 8 | |||
9 | MAINTAINER= pkgsrc-users@NetBSD.org | 9 | MAINTAINER= pkgsrc-users@NetBSD.org | |
10 | HOMEPAGE= http://www.isc.org/software/bind/ | 10 | HOMEPAGE= http://www.isc.org/software/bind/ | |
11 | COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.10 | 11 | COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.10 | |
12 | 12 | |||
13 | CONFLICTS+= host-[0-9]* | 13 | CONFLICTS+= host-[0-9]* | |
14 | 14 | |||
15 | MAKE_JOBS_SAFE= no | 15 | MAKE_JOBS_SAFE= no | |
16 | 16 | |||
17 | BIND_VERSION= 9.10.1 | 17 | BIND_VERSION= 9.10.1-P1 | |
18 | 18 | |||
19 | .include "../../mk/bsd.prefs.mk" | 19 | .include "../../mk/bsd.prefs.mk" | |
20 | 20 | |||
21 | BUILD_DEFS+= BIND_DIR VARBASE | 21 | BUILD_DEFS+= BIND_DIR VARBASE | |
22 | 22 | |||
23 | .include "options.mk" | 23 | .include "options.mk" | |
24 | 24 | |||
25 | USE_TOOLS+= pax perl | 25 | USE_TOOLS+= pax perl | |
26 | USE_LIBTOOL= yes | 26 | USE_LIBTOOL= yes | |
27 | GNU_CONFIGURE= yes | 27 | GNU_CONFIGURE= yes | |
28 | #CONFIG_SHELL= sh -x | 28 | #CONFIG_SHELL= sh -x | |
29 | 29 | |||
30 | CONFIGURE_ARGS+= --with-libtool | 30 | CONFIGURE_ARGS+= --with-libtool |
@@ -1,14 +1,14 @@ | @@ -1,14 +1,14 @@ | |||
1 | @comment $NetBSD: PLIST,v 1.2 2014/10/14 16:23:19 taca Exp $ | 1 | @comment $NetBSD: PLIST,v 1.3 2014/12/08 21:59:09 taca Exp $ | |
2 | bin/bind9-config | 2 | bin/bind9-config | |
3 | bin/delv | 3 | bin/delv | |
4 | bin/dig | 4 | bin/dig | |
5 | bin/host | 5 | bin/host | |
6 | bin/isc-config.sh | 6 | bin/isc-config.sh | |
7 | bin/nslookup | 7 | bin/nslookup | |
8 | bin/nsupdate | 8 | bin/nsupdate | |
9 | ${PLIST.inet6}include/isc/ipv6.h | 9 | ${PLIST.inet6}include/isc/ipv6.h | |
10 | include/bind9/check.h | 10 | include/bind9/check.h | |
11 | include/bind9/getaddresses.h | 11 | include/bind9/getaddresses.h | |
12 | include/bind9/version.h | 12 | include/bind9/version.h | |
13 | include/dns/acache.h | 13 | include/dns/acache.h | |
14 | include/dns/acl.h | 14 | include/dns/acl.h | |
@@ -114,26 +114,27 @@ include/irs/version.h | @@ -114,26 +114,27 @@ include/irs/version.h | |||
114 | include/isc/aes.h | 114 | include/isc/aes.h | |
115 | include/isc/app.h | 115 | include/isc/app.h | |
116 | include/isc/assertions.h | 116 | include/isc/assertions.h | |
117 | include/isc/atomic.h | 117 | include/isc/atomic.h | |
118 | include/isc/backtrace.h | 118 | include/isc/backtrace.h | |
119 | include/isc/base32.h | 119 | include/isc/base32.h | |
120 | include/isc/base64.h | 120 | include/isc/base64.h | |
121 | include/isc/bind9.h | 121 | include/isc/bind9.h | |
122 | include/isc/boolean.h | 122 | include/isc/boolean.h | |
123 | include/isc/buffer.h | 123 | include/isc/buffer.h | |
124 | include/isc/bufferlist.h | 124 | include/isc/bufferlist.h | |
125 | include/isc/commandline.h | 125 | include/isc/commandline.h | |
126 | include/isc/condition.h | 126 | include/isc/condition.h | |
127 | include/isc/counter.h | |||
127 | include/isc/crc64.h | 128 | include/isc/crc64.h | |
128 | include/isc/dir.h | 129 | include/isc/dir.h | |
129 | include/isc/entropy.h | 130 | include/isc/entropy.h | |
130 | include/isc/error.h | 131 | include/isc/error.h | |
131 | include/isc/event.h | 132 | include/isc/event.h | |
132 | include/isc/eventclass.h | 133 | include/isc/eventclass.h | |
133 | include/isc/file.h | 134 | include/isc/file.h | |
134 | include/isc/formatcheck.h | 135 | include/isc/formatcheck.h | |
135 | include/isc/fsaccess.h | 136 | include/isc/fsaccess.h | |
136 | include/isc/hash.h | 137 | include/isc/hash.h | |
137 | include/isc/heap.h | 138 | include/isc/heap.h | |
138 | include/isc/hex.h | 139 | include/isc/hex.h | |
139 | include/isc/hmacmd5.h | 140 | include/isc/hmacmd5.h |
@@ -1,13 +1,13 @@ | @@ -1,13 +1,13 @@ | |||
1 | $NetBSD: distinfo,v 1.2 2014/10/14 16:23:19 taca Exp $ | 1 | $NetBSD: distinfo,v 1.3 2014/12/08 21:59:09 taca Exp $ | |
2 | 2 | |||
3 | SHA1 (bind-9.10.1.tar.gz) = 96aa28c6112c6a8c33a19efeac98c715f03b35ca | 3 | SHA1 (bind-9.10.1-P1.tar.gz) = 24a81ba458a762c27be47461301fcf336cfb1d43 | |
4 | RMD160 (bind-9.10.1.tar.gz) = 5bc833a729a4d94c3d85af17d1452d15ea605c3c | 4 | RMD160 (bind-9.10.1-P1.tar.gz) = d98d5d14365b7604cb2c5a14664773f7f746bb37 | |
5 | Size (bind-9.10.1.tar.gz) = 8353313 bytes | 5 | Size (bind-9.10.1-P1.tar.gz) = 8356463 bytes | |
6 | SHA1 (patch-bin_dig_dighost.c) = 72cb7676cdf9cd4b44bc62c72bcf29127d9fbffe | 6 | SHA1 (patch-bin_dig_dighost.c) = 72cb7676cdf9cd4b44bc62c72bcf29127d9fbffe | |
7 | SHA1 (patch-bin_tests_system_Makefile.in) = 8bb6130981a6ff2ac736cf53a061115782bb65a2 | 7 | SHA1 (patch-bin_tests_system_Makefile.in) = 8bb6130981a6ff2ac736cf53a061115782bb65a2 | |
8 | SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2 | 8 | SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2 | |
9 | SHA1 (patch-configure) = 1de3bfa72fd9887a8fbb20ddd12bfe0469083ba0 | 9 | SHA1 (patch-configure) = 1de3bfa72fd9887a8fbb20ddd12bfe0469083ba0 | |
10 | SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f | 10 | SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f | |
11 | SHA1 (patch-lib_dns_rbt.c) = 510dfc72bc7764e548a46e9c48b58b2543490d7a | 11 | SHA1 (patch-lib_dns_rbt.c) = 510dfc72bc7764e548a46e9c48b58b2543490d7a | |
12 | SHA1 (patch-lib_lwres_getaddrinfo.c) = 69e9c8049fedcb93bd219c6053163f21ce3b2535 | 12 | SHA1 (patch-lib_lwres_getaddrinfo.c) = 69e9c8049fedcb93bd219c6053163f21ce3b2535 | |
13 | SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1 | 13 | SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1 |