From owner-cvs-src-old@FreeBSD.ORG Mon Nov 30 03:46:07 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 19F9E106566B for ; Mon, 30 Nov 2009 03:46:07 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 04D708FC08 for ; Mon, 30 Nov 2009 03:46:07 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id nAU3k6W6073214 for ; Mon, 30 Nov 2009 03:46:06 GMT (envelope-from dougb@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id nAU3k6ii073213 for cvs-src-old@freebsd.org; Mon, 30 Nov 2009 03:46:06 GMT (envelope-from dougb@repoman.freebsd.org) Message-Id: <200911300346.nAU3k6ii073213@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to dougb@repoman.freebsd.org using -f From: Doug Barton Date: Mon, 30 Nov 2009 03:38:34 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/contrib/bind9 CHANGES version src/contrib/bind9/bin/named query.c src/contrib/bind9/lib/dns api masterdump.c rbtdb.c resolver.c validator.c src/contrib/bind9/lib/dns/include/dns types.h src/lib/bind ... X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2009 03:46:07 -0000 dougb 2009-11-30 03:38:34 UTC FreeBSD src repository Modified files: contrib/bind9 CHANGES version contrib/bind9/bin/named query.c contrib/bind9/lib/dns api masterdump.c rbtdb.c resolver.c validator.c contrib/bind9/lib/dns/include/dns types.h lib/bind config.h Log: SVN rev 199958 on 2009-11-30 03:38:34Z by dougb Update to BIND 9.6.1-P2. The vulnerability this is designed to fix is related to DNSSEC validation on a resolving name server that allows access to untrusted users. If your system does not fall into all 3 of these categories you do not need to update immediately. Revision Changes Path 1.10 +6 -0 src/contrib/bind9/CHANGES 1.4 +56 -12 src/contrib/bind9/bin/named/query.c 1.8 +2 -2 src/contrib/bind9/lib/dns/api 1.3 +23 -11 src/contrib/bind9/lib/dns/include/dns/types.h 1.4 +3 -2 src/contrib/bind9/lib/dns/masterdump.c 1.4 +3 -3 src/contrib/bind9/lib/dns/rbtdb.c 1.7 +28 -5 src/contrib/bind9/lib/dns/resolver.c 1.5 +6 -6 src/contrib/bind9/lib/dns/validator.c 1.10 +2 -2 src/contrib/bind9/version 1.12 +4 -0 src/lib/bind/config.h