From owner-cvs-src-old@FreeBSD.ORG Wed Dec 8 20:00:14 2010 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 39D65106566B for ; Wed, 8 Dec 2010 20:00:14 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 0BC0F8FC13 for ; Wed, 8 Dec 2010 20:00:14 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id oB8K0DUj031840 for ; Wed, 8 Dec 2010 20:00:13 GMT (envelope-from dougb@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id oB8K0Dbs031839 for cvs-src-old@freebsd.org; Wed, 8 Dec 2010 20:00:13 GMT (envelope-from dougb@repoman.freebsd.org) Message-Id: <201012082000.oB8K0Dbs031839@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to dougb@repoman.freebsd.org using -f From: Doug Barton Date: Wed, 8 Dec 2010 19:59:53 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: RELENG_8 Subject: cvs commit: src/contrib/bind9 CHANGES RELEASE-NOTES-BIND-9.6-ESV.html RELEASE-NOTES-BIND-9.6-ESV.pdf RELEASE-NOTES-BIND-9.6-ESV.txt release-notes.css version src/contrib/bind9/bin/check check-tool.c check-tool.h named-checkconf.c named-checkzone.c src/contrib/bind9/bin/dig ... X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Dec 2010 20:00:14 -0000 dougb 2010-12-08 19:59:53 UTC FreeBSD src repository Modified files: (Branch: RELENG_8) contrib/bind9 CHANGES version contrib/bind9/bin/check check-tool.c check-tool.h named-checkconf.c named-checkzone.c contrib/bind9/bin/dig host.c contrib/bind9/bin/named client.c query.c server.c contrib/bind9/bin/named/include/named query.h contrib/bind9/lib/dns api journal.c rbtdb.c validator.c view.c contrib/bind9/lib/dns/include/dns view.h contrib/bind9/lib/isc api print.c Added files: (Branch: RELENG_8) contrib/bind9 RELEASE-NOTES-BIND-9.6-ESV.html RELEASE-NOTES-BIND-9.6-ESV.pdf RELEASE-NOTES-BIND-9.6-ESV.txt release-notes.css Log: SVN rev 216307 on 2010-12-08 19:59:53Z by dougb Update to version 9.6-ESV-R4, the latest from ISC, which addresses the following security vulnerabilities. For more information regarding these issues please see: http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories 1. Cache incorrectly allows ncache and rrsig for the same type http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613 Affects resolver operators whose servers are open to potential attackers. Triggering the bug will cause the server to crash. This bug applies even if you do not have DNSSEC enabled. 2. Key algorithm rollover http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614 Affects resolver operators who are validating with DNSSEC, and querying zones which are in a key rollover period. The bug will cause answers to incorrectly be marked as insecure. Approved by: re (kensmith) Revision Changes Path 1.9.2.6 +52 -0 src/contrib/bind9/CHANGES 1.1.2.2 +225 -0 src/contrib/bind9/RELEASE-NOTES-BIND-9.6-ESV.html (new) 1.1.2.2 +321 -0 src/contrib/bind9/RELEASE-NOTES-BIND-9.6-ESV.pdf (new) 1.1.2.2 +133 -0 src/contrib/bind9/RELEASE-NOTES-BIND-9.6-ESV.txt (new) 1.3.2.1 +29 -2 src/contrib/bind9/bin/check/check-tool.c 1.2.2.1 +7 -2 src/contrib/bind9/bin/check/check-tool.h 1.3.2.1 +10 -2 src/contrib/bind9/bin/check/named-checkconf.c 1.4.2.2 +9 -2 src/contrib/bind9/bin/check/named-checkzone.c 1.2.2.2 +6 -4 src/contrib/bind9/bin/dig/host.c 1.5.2.1 +4 -4 src/contrib/bind9/bin/named/client.c 1.2.2.1 +4 -2 src/contrib/bind9/bin/named/include/named/query.h 1.3.2.5 +11 -14 src/contrib/bind9/bin/named/query.c 1.5.2.3 +23 -18 src/contrib/bind9/bin/named/server.c 1.7.2.5 +2 -2 src/contrib/bind9/lib/dns/api 1.2.2.1 +4 -2 src/contrib/bind9/lib/dns/include/dns/view.h 1.3.2.2 +14 -7 src/contrib/bind9/lib/dns/journal.c 1.3.2.5 +53 -12 src/contrib/bind9/lib/dns/rbtdb.c 1.4.2.6 +47 -11 src/contrib/bind9/lib/dns/validator.c 1.3.2.3 +7 -1 src/contrib/bind9/lib/dns/view.c 1.4.2.3 +1 -1 src/contrib/bind9/lib/isc/api 1.3.2.1 +3 -3 src/contrib/bind9/lib/isc/print.c 1.1.2.2 +60 -0 src/contrib/bind9/release-notes.css (new) 1.9.2.6 +2 -2 src/contrib/bind9/version