Date: Wed, 5 Jun 2013 11:49:51 +0000 (UTC) From: Erwin Lansing <erwin@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r319983 - head/dns/bind98 Message-ID: <201306051149.r55BnpWi066334@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: erwin Date: Wed Jun 5 11:49:51 2013 New Revision: 319983 URL: http://svnweb.freebsd.org/changeset/ports/319983 Log: Update to 9.8.5-P1 Security Fixes Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] A deliberately constructed combination of records could cause named to hang while populating the additional section of a response. (CVE-2012-5166) [RT #31090] Now supports NAPTR regular expression validation on all platforms, and avoids memory exhaustion compiling pathological regular expressions. (CVE-2013-2266) [RT #32688] Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might occur as a result of specific queries that are received. (CVE-2012-5688) [RT #30792 / #30996] Prevents an assertion failure in named when RPZ and DNS64 are used together. (CVE-2012-5689) [RT #32141] See release notes for further features and bug fixes: https://kb.isc.org/article/AA-00969/0/BIND-9.8.5-P1-Release-Notes.html Security: CVE-2013-3919 CVE-2012-5166 CVE-2013-2266 CVE-2012-5688 CVE-2012-5689 Modified: head/dns/bind98/Makefile head/dns/bind98/distinfo Modified: head/dns/bind98/Makefile ============================================================================== --- head/dns/bind98/Makefile Wed Jun 5 11:46:54 2013 (r319982) +++ head/dns/bind98/Makefile Wed Jun 5 11:49:51 2013 (r319983) @@ -1,7 +1,7 @@ # $FreeBSD$ PORTNAME= bind98 -PORTVERSION= 9.8.5 +PORTVERSION= 9.8.5.1 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} MASTER_SITE_SUBDIR= bind9/${ISCVERSION} @@ -13,7 +13,7 @@ COMMENT= BIND DNS suite with updated DNS LICENSE= ISCL # ISC releases things like 9.8.0-P1, which our versioning doesn't like -ISCVERSION= 9.8.5 +ISCVERSION= 9.8.5-P1 MAKE_JOBS_UNSAFE= yes @@ -109,7 +109,7 @@ CONFIGURE_ARGS+= --enable-rpz-nsdname .endif .if ${PORT_OPTIONS:MRPZRRL_PATCH} -PATCHFILES= rpz2+rl-9.8.5.patch +PATCHFILES= 9.8.5-rpz+rl.156.01-P1.patch PATCH_SITES= http://ss.vix.com/~vjs/ .endif Modified: head/dns/bind98/distinfo ============================================================================== --- head/dns/bind98/distinfo Wed Jun 5 11:46:54 2013 (r319982) +++ head/dns/bind98/distinfo Wed Jun 5 11:49:51 2013 (r319983) @@ -1,4 +1,4 @@ -SHA256 (bind-9.8.5.tar.gz) = 250bf1a305290db30c4e3b284e9ac58c53687727b51107c393bdb3fd3f36de6d -SIZE (bind-9.8.5.tar.gz) = 7262595 -SHA256 (rpz2+rl-9.8.5.patch) = 918a45012092f3a21ea4cae248d18d332d435ff41a0e4260246c85f0e682bca9 -SIZE (rpz2+rl-9.8.5.patch) = 323496 +SHA256 (bind-9.8.5-P1.tar.gz) = f1aa010cef49c453e24f0cadedd1866dc7e3c9fd385f39ee3e68f3a4ba226cc6 +SIZE (bind-9.8.5-P1.tar.gz) = 7263322 +SHA256 (9.8.5-rpz+rl.156.01-P1.patch) = fdf306bf7a5cc8eb1dd5a400048aec788b3387934d350c46bbe0384b9ff76793 +SIZE (9.8.5-rpz+rl.156.01-P1.patch) = 323499
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201306051149.r55BnpWi066334>