Thu Apr 13 01:52:42 2017 UTC ()
Update bind910 to 9.10.4pl8 (BIND 9.10.4-P8).

Quote from release announce:

   BIND 9.10.4-P8 addresses the security issues described in
   CVE-2017-3136, CVE-2017-3137, and CVE-2017-3138, and updates the
   built-in trusted keys for the root zone.

>From CHANGELOG:

	--- 9.10.4-P8 released ---

4582.	[security]	'rndc ""' could trigger a assertion failure in named.
			(CVE-2017-3138) [RT #44924]

4580.	[bug]		4578 introduced a regression when handling CNAME to
			referral below the current domain. [RT #44850]

	--- 9.10.4-P7 released ---

4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

4575.	[security]	DNS64 with "break-dnssec yes;" can result in an
			assertion failure. (CVE-2017-3136) [RT #44653]

4564.	[maint]		Update the built in managed keys to include the
			upcoming root KSK. [RT #44579]


(taca)
diff -r1.31 -r1.32 pkgsrc/net/bind910/Makefile
diff -r1.22 -r1.23 pkgsrc/net/bind910/distinfo
cvs diff -r1.31 -r1.32 pkgsrc/net/bind910/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/net/bind910/Attic/Makefile 2017/02/24 15:46:14 1.31
+++ pkgsrc/net/bind910/Attic/Makefile 2017/04/13 01:52:42 1.32
@@ -1,30 +1,29 @@ @@ -1,30 +1,29 @@
1# $NetBSD: Makefile,v 1.31 2017/02/24 15:46:14 fhajny Exp $ 1# $NetBSD: Makefile,v 1.32 2017/04/13 01:52:42 taca Exp $
2 2
3DISTNAME= bind-${BIND_VERSION} 3DISTNAME= bind-${BIND_VERSION}
4PKGNAME= ${DISTNAME:S/-P/pl/} 4PKGNAME= ${DISTNAME:S/-P/pl/}
5PKGREVISION= 1 
6CATEGORIES= net 5CATEGORIES= net
7MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ 6MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
8 7
9MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.isc.org/software/bind/ 9HOMEPAGE= http://www.isc.org/software/bind/
11COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.10 10COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.10
12 11
13CONFLICTS+= host-[0-9]* 12CONFLICTS+= host-[0-9]*
14 13
15MAKE_JOBS_SAFE= no 14MAKE_JOBS_SAFE= no
16 15
17BIND_VERSION= 9.10.4-P6 16BIND_VERSION= 9.10.4-P8
18 17
19.include "../../mk/bsd.prefs.mk" 18.include "../../mk/bsd.prefs.mk"
20 19
21BUILD_DEFS+= BIND_DIR VARBASE 20BUILD_DEFS+= BIND_DIR VARBASE
22 21
23.include "options.mk" 22.include "options.mk"
24 23
25USE_TOOLS+= pax perl 24USE_TOOLS+= pax perl
26USE_LIBTOOL= yes 25USE_LIBTOOL= yes
27GNU_CONFIGURE= yes 26GNU_CONFIGURE= yes
28#CONFIG_SHELL= sh -x 27#CONFIG_SHELL= sh -x
29 28
30CONFIGURE_ARGS+= --with-libtool 29CONFIGURE_ARGS+= --with-libtool
cvs diff -r1.22 -r1.23 pkgsrc/net/bind910/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/net/bind910/Attic/distinfo 2017/02/09 00:48:59 1.22
+++ pkgsrc/net/bind910/Attic/distinfo 2017/04/13 01:52:42 1.23
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1$NetBSD: distinfo,v 1.22 2017/02/09 00:48:59 taca Exp $ 1$NetBSD: distinfo,v 1.23 2017/04/13 01:52:42 taca Exp $
2 2
3SHA1 (bind-9.10.4-P6.tar.gz) = c08bef47136b3b88844a4c3b8a6227445fca6f40 3SHA1 (bind-9.10.4-P8.tar.gz) = 33a4c37bb85f632e7002bc157e9d357e389466da
4RMD160 (bind-9.10.4-P6.tar.gz) = c082903758103ac9780cf92dbd634f6b3369478a 4RMD160 (bind-9.10.4-P8.tar.gz) = dec49998fd31d431d1d7f77545fb7de8fd36237b
5SHA512 (bind-9.10.4-P6.tar.gz) = a881d81307b48922c062d672701e777a17d5130a10dc1c5e4022edbbc28c7136076c17a0c89b211cd3b07527b81fa9a3ac599d0c3c23d70a75e47c63cd2a59f5 5SHA512 (bind-9.10.4-P8.tar.gz) = cdda6e92a27cd1c6624dea92aa9f81b32088ec227dc4c3133f72cfb3ebf1bef29ba8908e6167232bca7cb6a00851646a694102749669cadd9137eebfaa202fd1
6Size (bind-9.10.4-P6.tar.gz) = 9317598 bytes 6Size (bind-9.10.4-P8.tar.gz) = 9323291 bytes
7SHA1 (patch-bin_dig_dighost.c) = 983e23a30d519982cbe88ed2277fcffc9cad616e 7SHA1 (patch-bin_dig_dighost.c) = 983e23a30d519982cbe88ed2277fcffc9cad616e
8SHA1 (patch-bin_tests_system_Makefile.in) = aeb2de1b6c6cfdbae7ffbf38aeebf52e94af9e2f 8SHA1 (patch-bin_tests_system_Makefile.in) = aeb2de1b6c6cfdbae7ffbf38aeebf52e94af9e2f
9SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2 9SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2
10SHA1 (patch-configure) = 754a510493ae8fae669a9ff79940ccb04bc1e57e 10SHA1 (patch-configure) = 754a510493ae8fae669a9ff79940ccb04bc1e57e
11SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f 11SHA1 (patch-contrib_dlz_config.dlz.in) = f18bec63fbfce7cb2cd72929058ce3770fce458f
12SHA1 (patch-lib_dns_rbt.c) = 7e37f411d084e5363c6a5023e1915d224321c3e3 12SHA1 (patch-lib_dns_rbt.c) = 7e37f411d084e5363c6a5023e1915d224321c3e3
13SHA1 (patch-lib_lwres_getaddrinfo.c) = 69e9c8049fedcb93bd219c6053163f21ce3b2535 13SHA1 (patch-lib_lwres_getaddrinfo.c) = 69e9c8049fedcb93bd219c6053163f21ce3b2535
14SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1 14SHA1 (patch-lib_lwres_getnameinfo.c) = 418ad349cf52925c9e8051b5c71d9d51ea8d2fb1