Thu Nov 21 05:38:21 2019 UTC ()
net/bind911: update to 9.11.13
Update bind911 to 9.11.3. It includes fix for CVS-2019-6477.
--- 9.11.13 released ---
5315. [bug] Apply the inital RRSIG expiration spread fixed
to all dynamically created records in the zone
including NSEC3. Also fix the signature clusters
when the server has been offline for prolonged
period of times. [GL #1256]
5314. [func] Added a new statistics variable "tcp-highwater"
that reports the maximum number of simultaneous TCP
clients BIND has handled while running. [GL #1206]
5313. [bug] The default GeoIP2 database location did not match
the ARM. 'named -V' now reports the default
location. [GL #1301]
5310. [bug] TCP failures were affecting EDNS statistics. [GL #1059]
5309. [bug] "geoip-use-ecs yes;" was not working for GeoIP2.
[GL #1275]
5308. [bug] Don't log DNS_R_UNCHANGED from sync_secure_journal()
at ERROR level in receive_secure_serial(). [GL #1288]
5307. [bug] Fix hang when named-compilezone output is sent to pipe.
Thanks to Tony Finch. [GL !2481]
5306. [security] Set a limit on the number of concurrently served
pipelined TCP queries. (CVE-2019-6477) [GL #1264]
5302. [bug] Fix checking that "dnstap-output" is defined when
"dnstap" is specified in a view. [GL #1281]
5301. [bug] Detect partial prefixes / incomplete IPv4 address in
acls. [GL #1143]
(taca)
diff -r1.16 -r1.17 pkgsrc/net/bind911/Makefile
diff -r1.12 -r1.13 pkgsrc/net/bind911/distinfo
--- pkgsrc/net/bind911/Attic/Makefile 2019/11/03 11:45:30 1.16
+++ pkgsrc/net/bind911/Attic/Makefile 2019/11/21 05:38:21 1.17
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.16 2019/11/03 11:45:30 rillig Exp $
+# $NetBSD: Makefile,v 1.17 2019/11/21 05:38:21 taca Exp $
DISTNAME= bind-${BIND_VERSION}
PKGNAME= ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@
MAKE_JOBS_SAFE= no
-BIND_VERSION= 9.11.12
+BIND_VERSION= 9.11.13
.include "../../mk/bsd.prefs.mk"
--- pkgsrc/net/bind911/Attic/distinfo 2019/10/17 00:48:31 1.12
+++ pkgsrc/net/bind911/Attic/distinfo 2019/11/21 05:38:21 1.13
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.12 2019/10/17 00:48:31 taca Exp $
+$NetBSD: distinfo,v 1.13 2019/11/21 05:38:21 taca Exp $
-SHA1 (bind-9.11.12.tar.gz) = bf154d1029791545a5d5aff42d60bfed71e3b515
-RMD160 (bind-9.11.12.tar.gz) = 5304d44a2f52c121b074742f8e6b33ac83facc49
-SHA512 (bind-9.11.12.tar.gz) = 7e2b9ef4ed5a00c2e5310c932c177887aed330d94eefc87d732dda010f2b71477e2f9d6ea89422ccbc8f6f04ceb83419b758218bcc02f25b34751bad974174e8
-Size (bind-9.11.12.tar.gz) = 8180761 bytes
+SHA1 (bind-9.11.13.tar.gz) = 550367762a653ac5ed0eb04b316d06517650a925
+RMD160 (bind-9.11.13.tar.gz) = d1d14035681abd25d10592c60682501c1aaded38
+SHA512 (bind-9.11.13.tar.gz) = 6e5289ff231b8d7d2f02ae02a1cf43abff3e507e1d96d8ec002dc71097fc77dc5514762ff1ea5918159c88319b1d5eed78c6dc1a7835173db234d4ee887644bc
+Size (bind-9.11.13.tar.gz) = 8370441 bytes
SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee
SHA1 (patch-bin_tests_system_metadata_tests.sh) = d01a492d0b7738760bdbff714248e279a78fef28