From owner-svn-src-stable-9@FreeBSD.ORG Thu Mar 28 05:39:47 2013 Return-Path: Delivered-To: svn-src-stable-9@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 9E9055FD; Thu, 28 Mar 2013 05:39:47 +0000 (UTC) (envelope-from delphij@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 82309968; Thu, 28 Mar 2013 05:39:47 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r2S5dl0A011156; Thu, 28 Mar 2013 05:39:47 GMT (envelope-from delphij@svn.freebsd.org) Received: (from delphij@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r2S5djuq011147; Thu, 28 Mar 2013 05:39:45 GMT (envelope-from delphij@svn.freebsd.org) Message-Id: <201303280539.r2S5djuq011147@svn.freebsd.org> From: Xin LI Date: Thu, 28 Mar 2013 05:39:45 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-9@freebsd.org Subject: svn commit: r248808 - in stable/9: contrib/bind9 lib/bind lib/bind/dns lib/bind/dns/dns X-SVN-Group: stable-9 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-stable-9@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for only the 9-stable src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2013 05:39:47 -0000 Author: delphij Date: Thu Mar 28 05:39:45 2013 New Revision: 248808 URL: http://svnweb.freebsd.org/changeset/base/248808 Log: MFC r248788 (erwin): Update BIND to 9.8.4-P2 Removed the check for regex.h in configure in order to disable regex syntax checking, as it exposes BIND to a critical flaw in libregex on some platforms. [RT #32688] Modified: stable/9/contrib/bind9/CHANGES stable/9/contrib/bind9/config.h.in stable/9/contrib/bind9/configure.in stable/9/contrib/bind9/version stable/9/lib/bind/config.h stable/9/lib/bind/dns/code.h stable/9/lib/bind/dns/dns/enumclass.h stable/9/lib/bind/dns/dns/enumtype.h stable/9/lib/bind/dns/dns/rdatastruct.h Directory Properties: stable/9/contrib/bind9/ (props changed) stable/9/lib/bind/ (props changed) Modified: stable/9/contrib/bind9/CHANGES ============================================================================== --- stable/9/contrib/bind9/CHANGES Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/contrib/bind9/CHANGES Thu Mar 28 05:39:45 2013 (r248808) @@ -1,3 +1,10 @@ + --- 9.8.4-P2 released --- + +3516. [security] Removed the check for regex.h in configure in order + to disable regex syntax checking, as it exposes + BIND to a critical flaw in libregex on some + platforms. [RT #32688] + --- 9.8.4-P1 released --- 3407. [security] Named could die on specific queries with dns64 enabled. Modified: stable/9/contrib/bind9/config.h.in ============================================================================== --- stable/9/contrib/bind9/config.h.in Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/contrib/bind9/config.h.in Thu Mar 28 05:39:45 2013 (r248808) @@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int /* Define if your OpenSSL version supports GOST. */ #undef HAVE_OPENSSL_GOST -/* Define to 1 if you have the header file. */ -#undef HAVE_REGEX_H - /* Define to 1 if you have the `setegid' function. */ #undef HAVE_SETEGID Modified: stable/9/contrib/bind9/configure.in ============================================================================== --- stable/9/contrib/bind9/configure.in Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/contrib/bind9/configure.in Thu Mar 28 05:39:45 2013 (r248808) @@ -298,7 +298,7 @@ esac AC_HEADER_STDC -AC_CHECK_HEADERS(fcntl.h regex.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,, +AC_CHECK_HEADERS(fcntl.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,, [$ac_includes_default #ifdef HAVE_SYS_PARAM_H # include Modified: stable/9/contrib/bind9/version ============================================================================== --- stable/9/contrib/bind9/version Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/contrib/bind9/version Thu Mar 28 05:39:45 2013 (r248808) @@ -7,4 +7,4 @@ MAJORVER=9 MINORVER=8 PATCHVER=4 RELEASETYPE=-P -RELEASEVER=1 +RELEASEVER=2 Modified: stable/9/lib/bind/config.h ============================================================================== --- stable/9/lib/bind/config.h Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/lib/bind/config.h Thu Mar 28 05:39:45 2013 (r248808) @@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int /* Define if your OpenSSL version supports GOST. */ /* #undef HAVE_OPENSSL_GOST */ -/* Define to 1 if you have the header file. */ -#define HAVE_REGEX_H 1 - /* Define to 1 if you have the `setegid' function. */ #define HAVE_SETEGID 1 Modified: stable/9/lib/bind/dns/code.h ============================================================================== --- stable/9/lib/bind/dns/code.h Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/lib/bind/dns/code.h Thu Mar 28 05:39:45 2013 (r248808) @@ -1,7 +1,7 @@ /* $FreeBSD$ */ /* - * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1998-2003 Internet Software Consortium. * * Permission to use, copy, modify, and distribute this software for any Modified: stable/9/lib/bind/dns/dns/enumclass.h ============================================================================== --- stable/9/lib/bind/dns/dns/enumclass.h Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/lib/bind/dns/dns/enumclass.h Thu Mar 28 05:39:45 2013 (r248808) @@ -1,7 +1,7 @@ /* $FreeBSD$ */ /* - * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1998-2003 Internet Software Consortium. * * Permission to use, copy, modify, and distribute this software for any Modified: stable/9/lib/bind/dns/dns/enumtype.h ============================================================================== --- stable/9/lib/bind/dns/dns/enumtype.h Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/lib/bind/dns/dns/enumtype.h Thu Mar 28 05:39:45 2013 (r248808) @@ -1,7 +1,7 @@ /* $FreeBSD$ */ /* - * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1998-2003 Internet Software Consortium. * * Permission to use, copy, modify, and distribute this software for any Modified: stable/9/lib/bind/dns/dns/rdatastruct.h ============================================================================== --- stable/9/lib/bind/dns/dns/rdatastruct.h Thu Mar 28 05:35:46 2013 (r248807) +++ stable/9/lib/bind/dns/dns/rdatastruct.h Thu Mar 28 05:39:45 2013 (r248808) @@ -1,7 +1,7 @@ /* $FreeBSD$ */ /* - * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1998-2003 Internet Software Consortium. * * Permission to use, copy, modify, and distribute this software for any