From owner-svn-ports-all@freebsd.org Wed Aug 10 01:32:16 2016 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1A36DBB2D99; Wed, 10 Aug 2016 01:32:16 +0000 (UTC) (envelope-from junovitch@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D0718126C; Wed, 10 Aug 2016 01:32:15 +0000 (UTC) (envelope-from junovitch@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u7A1WF0e002999; Wed, 10 Aug 2016 01:32:15 GMT (envelope-from junovitch@FreeBSD.org) Received: (from junovitch@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u7A1WEWW002997; Wed, 10 Aug 2016 01:32:14 GMT (envelope-from junovitch@FreeBSD.org) Message-Id: <201608100132.u7A1WEWW002997@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: junovitch set sender to junovitch@FreeBSD.org using -f From: Jason Unovitch Date: Wed, 10 Aug 2016 01:32:14 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r419980 - head/dns/nsd X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 01:32:16 -0000 Author: junovitch Date: Wed Aug 10 01:32:14 2016 New Revision: 419980 URL: https://svnweb.freebsd.org/changeset/ports/419980 Log: dns/nsd: update 4.1.10 -> 4.1.11 - Restore configurable IPV6 option. Upstream integrated fix for issue. - FEATURES: * When tcp is more than half full, use short timeout for tcp session. * Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori. * Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865. - BUGFIXES: * Fix build without IPv6, patch from Zdenek Kaspar. * Fix #783: Trying to run a root server without having configured it silently gives wrong answers. * Fix #782: Serve DS record but parent zone has no NS record. * Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut. PR: 211693 Submitted by: jaap@NLnetLabs.nl (maintainer) Security: CVE-2016-6173 Security: https://vuxml.FreeBSD.org/freebsd/7d08e608-5e95-11e6-b334-002590263bf5.html MFH: 2016Q3 Modified: head/dns/nsd/Makefile head/dns/nsd/distinfo Modified: head/dns/nsd/Makefile ============================================================================== --- head/dns/nsd/Makefile Wed Aug 10 01:27:44 2016 (r419979) +++ head/dns/nsd/Makefile Wed Aug 10 01:32:14 2016 (r419980) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= nsd -PORTVERSION= 4.1.10 +PORTVERSION= 4.1.11 CATEGORIES= dns ipv6 MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/ \ ftp://ftp.rhnet.is/pub/nsd/ @@ -34,8 +34,7 @@ CONFIGURE_ARGS= --with-libevent=${LOCALB --localstatedir=${NSDLSDIR} \ --with-dbfile=${NSDDBDIR}/nsd.db \ --with-ssl=${OPENSSLBASE} \ - --with-pidfile=${NSDRUNDIR}/nsd.pid \ - --enable-ipv6 + --with-pidfile=${NSDRUNDIR}/nsd.pid PLIST_SUB= NSDUSER=${NSDUSER} \ NSDGROUP=${NSDGROUP} \ @@ -50,7 +49,7 @@ PORTDOCS= CREDITS ChangeLog LICENSE NSD- REQUIREMENTS TESTPLAN TODO UPGRADING coding-style \ differences.tex -OPTIONS_DEFINE= ROOT_SERVER LARGEFILE BIND8_STATS CHECKING \ +OPTIONS_DEFINE= ROOT_SERVER LARGEFILE IPV6 BIND8_STATS CHECKING \ MINRESPSIZE NSEC3 MMAP DOCS RRL ZONE_STATS MUNIN_PLUGIN OPTIONS_DEFAULT= LARGEFILE NSEC3 MINRESPSIZE RRL OPTIONS_SUB= yes @@ -79,6 +78,7 @@ MINRESPSIZE_CONFIGURE_ENABLE= minimal-re MMAP_CONFIGURE_ENABLE= mmap RRL_CONFIGURE_ENABLE= ratelimit ZONE_STATS_CONFIGURE_ENABLE= zone-stats +IPV6_CONFIGURE_ENABLE= ipv6 post-build-MUNIN_PLUGIN-on: ${REINPLACE_CMD} \ Modified: head/dns/nsd/distinfo ============================================================================== --- head/dns/nsd/distinfo Wed Aug 10 01:27:44 2016 (r419979) +++ head/dns/nsd/distinfo Wed Aug 10 01:32:14 2016 (r419980) @@ -1,3 +1,3 @@ -TIMESTAMP = 1466286030 -SHA256 (nsd-4.1.10.tar.gz) = 3a757014046752a0b0b11c1a2e22a36bb796f89f6939147ed3226556b4298727 -SIZE (nsd-4.1.10.tar.gz) = 1075892 +TIMESTAMP = 1470733493 +SHA256 (nsd-4.1.11.tar.gz) = c7712fd05eb0ab97040738e01d9369d02b89c0a7fa0943fd5bfc43b2111a92df +SIZE (nsd-4.1.11.tar.gz) = 1080220