From owner-svn-ports-head@freebsd.org Fri Apr 26 18:04:12 2019 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B437D159A496; Fri, 26 Apr 2019 18:04:12 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from smtp-out-so.shaw.ca (smtp-out-so.shaw.ca [64.59.136.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A531A773DB; Fri, 26 Apr 2019 18:04:10 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from spqr.komquats.com ([70.67.125.17]) by shaw.ca with ESMTPA id K5CZhBmrSGusjK5CbheODE; Fri, 26 Apr 2019 12:04:02 -0600 X-Authority-Analysis: v=2.3 cv=fOdHIqSe c=1 sm=1 tr=0 a=VFtTW3WuZNDh6VkGe7fA3g==:117 a=VFtTW3WuZNDh6VkGe7fA3g==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=IkcTkHD0fZMA:10 a=oexKYjalfGEA:10 a=6I5d2MoRAAAA:8 a=YxBL1-UpAAAA:8 a=TMCdc3A5bpCAEW6WLvkA:9 a=_tO0f5ve2G9V4Ry8:21 a=P9fcBciswWokqSKw:21 a=pxJ783-jDI6d9x_K:21 a=QEXdDO2ut3YA:10 a=IjZwj45LgO3ly-622nXo:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: from DESKTOP-IJTJOA3.esitwifi.local (S0106788a207e2972.gv.shawcable.net [70.66.154.233]) by spqr.komquats.com (Postfix) with ESMTPSA id BE204A9C; Fri, 26 Apr 2019 11:03:58 -0700 (PDT) Date: Fri, 26 Apr 2019 11:03:34 -0700 User-Agent: K-9 Mail for Android In-Reply-To: <201904250717.x3P7HKo8018898@repo.freebsd.org> References: <201904250717.x3P7HKo8018898@repo.freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: Re: svn commit: r499959 - in head/dns/bind914: . files To: Mathieu Arnold , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org From: Cy Schubert Message-ID: X-CMAE-Envelope: MS4wfNNP2mZWloJIJiE1gciiSqAKCaTb6uC39CupG2ES2iW5cQ1ItXDahbDbkoDM+I5KIa30asJnD4uuU0ShLUE72Kq2vIsl/hWC+R03E/44PdZJNR1qfHX5 eQzB1GX/suG+Gtu7+AXYKPtL0Zl7EQTBkUDsB1rlBzP+2wC+vz4/EiZJtnSG4+jEOT8sbPylGrGG/U4KCDNcqHjDKWYAQtZJroVsJQPpD2lJhKblCIXIigEJ V8YSEIppIIxNVd65nXvexsCowa9kFa9rhgb6FIrh4QKVillLTCyUxGRhyWp57SD3 X-Rspamd-Queue-Id: A531A773DB X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-5.58 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; MX_GOOD(-0.01)[spqr.komquats.com]; NEURAL_HAM_SHORT(-0.97)[-0.975,0]; RCVD_IN_DNSWL_LOW(-0.10)[138.136.59.64.list.dnswl.org : 127.0.5.1]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6327, ipnet:64.59.128.0/20, country:CA]; MID_RHS_MATCH_FROM(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[17.125.67.70.zen.spamhaus.org : 127.0.0.11,233.154.66.70.zen.spamhaus.org : 127.0.0.11]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(-2.39)[ip: (-6.23), ipnet: 64.59.128.0/20(-3.20), asn: 6327(-2.44), country: CA(-0.09)]; R_SPF_NA(0.00)[] X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Apr 2019 18:04:12 -0000 On April 25, 2019 12:17:20 AM PDT, Mathieu Arnold wrote= : >Author: mat >Date: Thu Apr 25 07:17:20 2019 >New Revision: 499959 >URL: https://svnweb=2Efreebsd=2Eorg/changeset/ports/499959 > >Log: > Update to BIND9 9=2E14=2E1=2E > =20 > MFH: 2019Q2 > Security: CVE-2018-5743, CVE-2019-6467 > >Modified: > head/dns/bind914/Makefile (contents, props changed) > head/dns/bind914/distinfo (contents, props changed) >head/dns/bind914/files/extrapatch-bind-min-override-ttl (contents, >props changed) >head/dns/bind914/files/extrapatch-bind-tools (contents, props >changed) > head/dns/bind914/files/patch-configure (contents, props changed) > head/dns/bind914/pkg-plist (contents, props changed) > >Modified: head/dns/bind914/Makefile >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >--- head/dns/bind914/Makefile Thu Apr 25 07:17:17 2019 (r499958) >+++ head/dns/bind914/Makefile Thu Apr 25 07:17:20 2019 (r499959) >@@ -8,7 +8,7 @@ PORTVERSION=3D ${ISCVERSION:S/-P/P/:S/b/=2Eb/:S/a/=2Ea/:S= /rc > PORTREVISION=3D 0 > =2Eelse > # dns/bind914 here >-PORTREVISION=3D 1 >+PORTREVISION=3D 0 > =2Eendif > CATEGORIES=3D dns net ipv6 > MASTER_SITES=3D ISC/bind9/${ISCVERSION} >@@ -36,7 +36,7 @@ RUN_DEPENDS=3D bind-tools>0:dns/bind-tools >=20 > USES=3D compiler:c11 cpe libedit ssl > # ISC releases things like 9=2E8=2E0-P1, which our versioning doesn't li= ke >-ISCVERSION=3D 9=2E14=2E0 >+ISCVERSION=3D 9=2E14=2E1 >=20 > CPE_VENDOR=3D isc > CPE_VERSION=3D ${ISCVERSION:C/-=2E*//} > >Modified: head/dns/bind914/distinfo >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >--- head/dns/bind914/distinfo Thu Apr 25 07:17:17 2019 (r499958) >+++ head/dns/bind914/distinfo Thu Apr 25 07:17:20 2019 (r499959) >@@ -1,3 +1,3 @@ >-TIMESTAMP =3D 1553504518 >-SHA256 (bind-9=2E14=2E0=2Etar=2Egz) =3D >4edd459830bb97f749e25a5d42a2a4a093d7800e9962fca4300996cf7ea680af >-SIZE (bind-9=2E14=2E0=2Etar=2Egz) =3D 6290135 >+TIMESTAMP =3D 1556117981 >+SHA256 (bind-9=2E14=2E1=2Etar=2Egz) =3D >c3c7485d900a03271a9918a071c123e8951871a219f4c1c4383e37717f11db48 >+SIZE (bind-9=2E14=2E1=2Etar=2Egz) =3D 6235968 > >Modified: head/dns/bind914/files/extrapatch-bind-min-override-ttl >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >--- head/dns/bind914/files/extrapatch-bind-min-override-ttl Thu Apr 25 >07:17:17 2019 (r499958) >+++ head/dns/bind914/files/extrapatch-bind-min-override-ttl Thu Apr 25 >07:17:20 2019 (r499959) >@@ -1,4 +1,4 @@ >---- bin/named/config=2Ec=2Eorig 2019-03-13 02:03:34 UTC >+--- bin/named/config=2Ec=2Eorig 2019-04-06 20:09:59 UTC > +++ bin/named/config=2Ec > @@ -179,6 +179,7 @@ options {\n\ > notify-source *;\n\ >@@ -8,9 +8,9 @@ > provide-ixfr true;\n\ > qname-minimization relaxed;\n\ > query-source address *;\n\ >---- bin/named/server=2Ec=2Eorig 2019-03-13 02:03:34 UTC >+--- bin/named/server=2Ec=2Eorig 2019-04-06 20:09:59 UTC > +++ bin/named/server=2Ec >-@@ -4162,6 +4162,11 @@ configure_view(dns_view_t *view, dns_viewlist_t >*viewl >+@@ -4178,6 +4178,11 @@ configure_view(dns_view_t *view, dns_viewlist_t >*viewl > } > =20 > obj =3D NULL; >@@ -22,7 +22,7 @@ > result =3D named_config_get(maps, "max-cache-ttl", &obj); > INSIST(result =3D=3D ISC_R_SUCCESS); > view->maxcachettl =3D cfg_obj_asuint32(obj); >---- lib/dns/include/dns/view=2Eh=2Eorig 2019-03-13 02:03:34 UTC >+--- lib/dns/include/dns/view=2Eh=2Eorig 2019-04-06 20:09:59 UTC > +++ lib/dns/include/dns/view=2Eh > @@ -153,6 +153,7 @@ struct dns_view { > bool requestnsid; >@@ -32,9 +32,9 @@ > dns_ttl_t maxncachettl; > dns_ttl_t mincachettl; > dns_ttl_t minncachettl; >---- lib/dns/resolver=2Ec=2Eorig 2019-03-13 02:03:34 UTC >+--- lib/dns/resolver=2Ec=2Eorig 2019-04-06 20:09:59 UTC > +++ lib/dns/resolver=2Ec >-@@ -6009,6 +6009,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, >dns_adb >+@@ -6013,6 +6013,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, >dns_adb > } > =20 > /* >@@ -47,9 +47,9 @@ > * Enforce the configure maximum cache TTL=2E > */ > if (rdataset->ttl > res->view->maxcachettl) { >---- lib/isccfg/namedconf=2Ec=2Eorig 2019-03-13 02:03:34 UTC >+--- lib/isccfg/namedconf=2Ec=2Eorig 2019-04-06 20:09:59 UTC > +++ lib/isccfg/namedconf=2Ec >-@@ -1899,6 +1899,7 @@ view_clauses[] =3D { >+@@ -1901,6 +1901,7 @@ view_clauses[] =3D { > #endif > { "max-acache-size", &cfg_type_sizenodefault, CFG_CLAUSEFLAG_OBSOLETE >}, > { "max-cache-size", &cfg_type_sizeorpercent, 0 }, > >Modified: head/dns/bind914/files/extrapatch-bind-tools >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >--- head/dns/bind914/files/extrapatch-bind-tools Thu Apr 25 07:17:17 >2019 (r499958) >+++ head/dns/bind914/files/extrapatch-bind-tools Thu Apr 25 07:17:20 >2019 (r499959) >@@ -1,6 +1,6 @@ > Only select the "tools" part of bind for building=2E >=20 >---- Makefile=2Ein=2Eorig 2019-03-20 05:57:56 UTC >+--- Makefile=2Ein=2Eorig 2019-04-06 20:09:59 UTC > +++ Makefile=2Ein > @@ -14,7 +14,7 @@ top_builddir =3D @top_builddir@ > =20 >@@ -27,9 +27,9 @@ Only select the "tools" part of bind for building=2E > =20 > uninstall:: > rm -f ${DESTDIR}${sysconfdir}/bind=2Ekeys >---- bin/Makefile=2Ein=2Eorig 2019-03-20 05:57:56 UTC >+--- bin/Makefile=2Ein=2Eorig 2019-04-06 20:09:59 UTC > +++ bin/Makefile=2Ein >-@@ -11,7 +11,7 @@ srcdir =3D @srcdir@ >+@@ -11,8 +11,8 @@ srcdir =3D @srcdir@ > VPATH =3D @srcdir@ > top_srcdir =3D @top_srcdir@ > =20 >@@ -39,3 +39,4 @@ Only select the "tools" part of bind for building=2E > + @NZD_TOOLS@ @PYTHON_TOOLS@ > TARGETS =3D > =20 >+ @BIND9_MAKE_RULES@ > >Modified: head/dns/bind914/files/patch-configure >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >--- head/dns/bind914/files/patch-configure Thu Apr 25 07:17:17 >2019 (r499958) >+++ head/dns/bind914/files/patch-configure Thu Apr 25 07:17:20 >2019 (r499959) >@@ -1,6 +1,6 @@ >---- configure=2Eorig 2019-03-13 02:03:34 UTC >+--- configure=2Eorig 2019-04-06 20:09:59 UTC > +++ configure >-@@ -16318,27 +16318,9 @@ done >+@@ -16317,27 +16317,9 @@ done > # problems start to show up=2E > saved_libs=3D"$LIBS" > for TRY_LIBS in \ >@@ -30,7 +30,7 @@ > { $as_echo "$as_me:${as_lineno-$LINENO}: checking linking as >$TRY_LIBS" >&5 > $as_echo_n "checking linking as $TRY_LIBS=2E=2E=2E " >&6; } > cat confdefs=2Eh - <<_ACEOF >conftest=2E$ac_ext >-@@ -16381,47 +16363,7 @@ $as_echo "no" >&6; } ;; >+@@ -16380,47 +16362,7 @@ $as_echo "no" >&6; } ;; > no) as_fn_error $? "could not determine proper GSSAPI linkage" >"$LINENO" 5 ;; > esac > =20 >@@ -79,7 +79,7 @@ > DNS_GSSAPI_LIBS=3D"$LIBS" > =20 > { $as_echo "$as_me:${as_lineno-$LINENO}: result: using GSSAPI from >$use_gssapi/lib and $use_gssapi/include" >&5 >-@@ -20928,7 +20870,7 @@ $as_echo "" >&6; } >+@@ -20924,7 +20866,7 @@ $as_echo "" >&6; } > # Check other locations for includes=2E > # Order is important (sigh)=2E > =20 > >Modified: head/dns/bind914/pkg-plist >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >--- head/dns/bind914/pkg-plist Thu Apr 25 07:17:17 2019 (r499958) >+++ head/dns/bind914/pkg-plist Thu Apr 25 07:17:20 2019 (r499959) >@@ -36,7 +36,6 @@ include/dns/dns64=2Eh > include/dns/dnsrps=2Eh > include/dns/dnssec=2Eh > include/dns/dnstap=2Eh >-%%DNSTAP%%include/dns/dnstap=2Epb-c=2Eh > include/dns/ds=2Eh > include/dns/dsdigest=2Eh > include/dns/dyndb=2Eh Should this and the other bind ports be documented in vuxml? The reason I = ask is I was showing my manager at $JOB the vuxml site regarding these very= CVEs but they are not documented yet=2E --=20 Pardon the typos and autocorrect, small keyboard in use=2E Cheers, Cy Schubert FreeBSD UNIX: Web: http://www=2EFreeBSD=2Eorg The need of the many outweighs the greed of the few=2E