Date: Fri, 27 Jul 2012 11:30:12 +0200 (CEST) From: Jaap Akkerhuis <jaap@NLnetLabs.nl> To: FreeBSD-gnats-submit@FreeBSD.org Cc: jaap@NLnetLabs.nl Subject: ports/170208: [SECURITY] [MAINTAINER] dns/nsd: update to 3.2.13 Message-ID: <201207270930.q6R9UCi4010317@bela.nlnetlabs.nl> Resent-Message-ID: <201207270940.q6R9e45q019198@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 170208
>Category: ports
>Synopsis: [SECURITY] [MAINTAINER] dns/nsd: update to 3.2.13
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Fri Jul 27 09:40:04 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator: Jaap Akkerhuis
>Release: FreeBSD 9.1-PRERELEASE amd64
>Organization:
NLnet Labs
>Environment:
System: FreeBSD bela.nlnetlabs.nl 9.1-PRERELEASE FreeBSD 9.1-PRERELEASE #25: Mon Jul 23 01:38:46 CEST 2012
>Description:
- Update to 3.2.13
NSD 3.2.11 and 3.2.12 are vulnerable to a denial of service attack if
and only if you have enabled per zone stats (--enable-zone-stats,
default off) [VU#517036 CVE-2012-2979 ].
BUG FIXES:
- Fix for nsd-patch segfault if zone has been removed from nsd.conf
(thanks Ilya Bakulin).
- Bugfix #460: man page correction - identity.
- Bugfix #461: NSD child segfaults when asked for out-of-zone data
with --enable-zone-stats. [VU#517036 CVE-2012-2979]
Generated with FreeBSD Port Tools 0.99_6 (mode: update, diff: suffix)
>How-To-Repeat:
>Fix:
--- nsd-3.2.13.patch begins here ---
diff -ruN --exclude=CVS ../nsd.orig/Makefile ./Makefile
--- ../nsd.orig/Makefile 2012-07-27 11:22:46.163818962 +0200
+++ ./Makefile 2012-07-27 11:24:28.393096112 +0200
@@ -6,7 +6,7 @@
#
PORTNAME= nsd
-PORTVERSION= 3.2.12
+PORTVERSION= 3.2.13
CATEGORIES= dns ipv6
MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/ \
ftp://ftp.rhnet.is/pub/nsd/
diff -ruN --exclude=CVS ../nsd.orig/distinfo ./distinfo
--- ../nsd.orig/distinfo 2012-07-27 11:22:46.164884707 +0200
+++ ./distinfo 2012-07-27 10:53:49.268820273 +0200
@@ -1,2 +1,2 @@
-SHA256 (nsd-3.2.12.tar.gz) = 73d78e3de88efdf5ebb0106fe3580cb887f5d2adc9ab147d15cf835de7de508e
-SIZE (nsd-3.2.12.tar.gz) = 889490
+SHA256 (nsd-3.2.13.tar.gz) = 6c0abd77d716a80047dac5cb2998b077686f41a93be7e9d10b2746e6f7ac1ac2
+SIZE (nsd-3.2.13.tar.gz) = 886216
--- nsd-3.2.13.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201207270930.q6R9UCi4010317>