From owner-freebsd-security  Thu Nov 11  7:19: 3 1999
Delivered-To: freebsd-security@freebsd.org
Received: from vinyl.sentex.ca (vinyl.sentex.ca [209.112.4.14])
	by hub.freebsd.org (Postfix) with ESMTP
	id B8AE014D3A; Thu, 11 Nov 1999 07:18:59 -0800 (PST)
	(envelope-from mike@sentex.net)
Received: from granite.sentex.net (granite-atm.sentex.ca [209.112.4.1])
	by vinyl.sentex.ca (8.9.3/8.9.3) with ESMTP id KAA60033;
	Thu, 11 Nov 1999 10:18:58 -0500 (EST)
	(envelope-from mike@sentex.net)
Received: from simoeon (simeon.sentex.ca [209.112.4.47]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id KAA03501; Thu, 11 Nov 1999 10:18:58 -0500 (EST)
Message-Id: <3.0.5.32.19991111101750.01fd0cb0@staff.sentex.ca>
X-Sender: mdtpop@staff.sentex.ca
X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32)
Date: Thu, 11 Nov 1999 10:17:50 -0500
To: Udo Schweigert <ust@cert.siemens.de>
From: Mike Tancsa <mike@sentex.net>
Subject: Re: patch for bind8 port (was: BIND NXT Bug Vulnerability)
Cc: freebsd-security@FreeBSD.ORG, jseger@FreeBSD.ORG
In-Reply-To: <19991111082024.A17215@alaska.cert.siemens.de>
References: <4.1.19991110213919.04565e60@granite.sentex.ca>
 <4.1.19991110202719.04c5ee30@granite.sentex.ca>
 <Pine.BSF.4.20.9911102122050.1624-100000@s01.arpa-canada.ne t>
 <4.1.19991110213919.04565e60@granite.sentex.ca>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 08:20 AM 11/11/99 +0100, Udo Schweigert wrote:
>On Wed, Nov 10, 1999 at 09:40:29PM -0500, Mike Tancsa wrote:
>> At 09:23 PM 11/10/99 , matt wrote:
>> >
>> >The ports tree currently has 8.2.1 though, I'm sure alot of people have
>> >resorted to using this, I have. Has the maintainer of this port been
>> >contacted yet? -matt
>> 
>
>Here is a patch for the port.

You also want patch4 that the ISC folks point out.  I just made it patch-ac
and put it in the patches directory for the port, and fixed the diff path.


Index: src/bin/named-xfer/named-xfer.c
===================================================================
RCS file: /proj/cvs/isc/bind/src/bin/named-xfer/named-xfer.c,v
retrieving revision 8.88
retrieving revision 8.89
diff -c -r8.88 -r8.89
*** src/bin/named-xfer/named-xfer.c     1999/11/08 23:01:39     8.88
--- src/bin/named-xfer/named-xfer.c     1999/11/09 20:36:54     8.89
***************
*** 2195,2201 ****
                                        zp->z_origin, zp_finish.z_serial);
                        }
                        soa_cnt++;
!                       if ((methode == ISIXFR) || (soa_cnt > 2)) {
                                return (result);
                        }
                } else {
--- 2195,2201 ----
                                        zp->z_origin, zp_finish.z_serial);
                        }
                        soa_cnt++;
!                       if ((methode == ISIXFR) || (soa_cnt >= 2)) {
                                return (result);
                        }
                } else {


------------------------------------------------------------------------
Mike Tancsa,                          	          tel 01.519.651.3400
Network Administrator,     			  mike@sentex.net
Sentex Communications                 		  www.sentex.net
Cambridge, Ontario Canada


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message