From owner-svn-ports-branches@FreeBSD.ORG Mon Jan 13 17:54:06 2014 Return-Path: Delivered-To: svn-ports-branches@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EBC5DBB9; Mon, 13 Jan 2014 17:54:06 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id D6DE016E6; Mon, 13 Jan 2014 17:54:06 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id s0DHs6NQ091688; Mon, 13 Jan 2014 17:54:06 GMT (envelope-from mat@svn.freebsd.org) Received: (from mat@localhost) by svn.freebsd.org (8.14.7/8.14.7/Submit) id s0DHs5vF091675; Mon, 13 Jan 2014 17:54:05 GMT (envelope-from mat@svn.freebsd.org) Message-Id: <201401131754.s0DHs5vF091675@svn.freebsd.org> From: Mathieu Arnold Date: Mon, 13 Jan 2014 17:54:05 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r339614 - in branches/2014Q1: dns/bind96 dns/bind98 dns/bind99 security/vuxml X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jan 2014 17:54:07 -0000 Author: mat Date: Mon Jan 13 17:54:04 2014 New Revision: 339614 URL: http://svnweb.freebsd.org/changeset/ports/339614 Log: MFH: r339612 Security update to fix CVE-2014-0591 as reported at https://kb.isc.org/article/AA-01078/74/ 9.9.4 -> 9.9.4-P2 9.8.6 -> 9.8.6-P2 9.6-ESV-R10 -> 9.6-ESV-R10-P2 Security: CVE-2014-0591 Remote DOS Approved by: portmgr (implicit) Modified: branches/2014Q1/dns/bind96/Makefile branches/2014Q1/dns/bind96/distinfo branches/2014Q1/dns/bind98/Makefile branches/2014Q1/dns/bind98/distinfo branches/2014Q1/dns/bind99/Makefile branches/2014Q1/dns/bind99/distinfo branches/2014Q1/security/vuxml/vuln.xml Directory Properties: branches/2014Q1/ (props changed) Modified: branches/2014Q1/dns/bind96/Makefile ============================================================================== --- branches/2014Q1/dns/bind96/Makefile Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/dns/bind96/Makefile Mon Jan 13 17:54:04 2014 (r339614) @@ -1,8 +1,7 @@ # $FreeBSD$ PORTNAME= bind96 -PORTVERSION= 9.6.3.2.ESV.R10 -PORTREVISION= 2 +PORTVERSION= 9.6.3.2.ESV.R10.2 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} MASTER_SITE_SUBDIR= bind9/${ISCVERSION} @@ -14,7 +13,7 @@ COMMENT= BIND DNS suite with updated DNS LICENSE= ISCL # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.6-ESV-R10 +ISCVERSION= 9.6-ESV-R10-P2 MAKE_JOBS_UNSAFE= yes Modified: branches/2014Q1/dns/bind96/distinfo ============================================================================== --- branches/2014Q1/dns/bind96/distinfo Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/dns/bind96/distinfo Mon Jan 13 17:54:04 2014 (r339614) @@ -1,2 +1,2 @@ -SHA256 (bind-9.6-ESV-R10.tar.gz) = f34e24a7d4bd41eedd7b781fbca3f8dc29e6f677be3b9f418f8581debbc4a66c -SIZE (bind-9.6-ESV-R10.tar.gz) = 6420776 +SHA256 (bind-9.6-ESV-R10-P2.tar.gz) = 1b131ef3a3b27a7916815ec5f4a87f0d9f5ac0669df21c7ec75ba18a13238eda +SIZE (bind-9.6-ESV-R10-P2.tar.gz) = 6421474 Modified: branches/2014Q1/dns/bind98/Makefile ============================================================================== --- branches/2014Q1/dns/bind98/Makefile Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/dns/bind98/Makefile Mon Jan 13 17:54:04 2014 (r339614) @@ -1,8 +1,7 @@ # $FreeBSD$ PORTNAME= bind98 -PORTVERSION= 9.8.6 -PORTREVISION= 2 +PORTVERSION= 9.8.6.2 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} MASTER_SITE_SUBDIR= bind9/${ISCVERSION} @@ -14,7 +13,7 @@ COMMENT= BIND DNS suite with updated DNS LICENSE= ISCL # ISC releases things like 9.8.0-P1, which our versioning doesn't like -ISCVERSION= 9.8.6 +ISCVERSION= 9.8.6-P2 MAKE_JOBS_UNSAFE= yes Modified: branches/2014Q1/dns/bind98/distinfo ============================================================================== --- branches/2014Q1/dns/bind98/distinfo Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/dns/bind98/distinfo Mon Jan 13 17:54:04 2014 (r339614) @@ -1,4 +1,4 @@ -SHA256 (bind-9.8.6.tar.gz) = 01cc3a0105b47833b99e61b69acd824be4eeefd6557fffa26eced8e03f1249cd -SIZE (bind-9.8.6.tar.gz) = 7275769 +SHA256 (bind-9.8.6-P2.tar.gz) = e5c87bdf102ac5b2563955393a2f4805e7574dc7addd03d18152c2f70befedeb +SIZE (bind-9.8.6-P2.tar.gz) = 7275835 SHA256 (rpz2+rl-9.8.6.patch) = 76b988205ce17034ff6c03cff943d0e579a5a46dbc47e1fac83704c88fb96d79 SIZE (rpz2+rl-9.8.6.patch) = 348361 Modified: branches/2014Q1/dns/bind99/Makefile ============================================================================== --- branches/2014Q1/dns/bind99/Makefile Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/dns/bind99/Makefile Mon Jan 13 17:54:04 2014 (r339614) @@ -1,8 +1,7 @@ # $FreeBSD$ PORTNAME?= bind99 -PORTVERSION= 9.9.4 -PORTREVISION?= 2 +PORTVERSION= 9.9.4.2 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} MASTER_SITE_SUBDIR= bind9/${ISCVERSION} @@ -14,7 +13,7 @@ COMMENT= BIND DNS suite with updated DNS LICENSE= ISCL # ISC releases things like 9.8.0-P1, which our versioning doesn't like -ISCVERSION= 9.9.4 +ISCVERSION= 9.9.4-P2 MAKE_JOBS_UNSAFE= yes Modified: branches/2014Q1/dns/bind99/distinfo ============================================================================== --- branches/2014Q1/dns/bind99/distinfo Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/dns/bind99/distinfo Mon Jan 13 17:54:04 2014 (r339614) @@ -1,2 +1,2 @@ -SHA256 (bind-9.9.4.tar.gz) = fe0f16653382e428b10282ce9850722d19589d66f2b45a528e98be3153f654c8 -SIZE (bind-9.9.4.tar.gz) = 7513017 +SHA256 (bind-9.9.4-P2.tar.gz) = 50f3c6431e26d3f322b69092a49c92e163e73029fe4a1933ce532dc97ec40a89 +SIZE (bind-9.9.4-P2.tar.gz) = 7513077 Modified: branches/2014Q1/security/vuxml/vuln.xml ============================================================================== --- branches/2014Q1/security/vuxml/vuln.xml Mon Jan 13 17:41:08 2014 (r339613) +++ branches/2014Q1/security/vuxml/vuln.xml Mon Jan 13 17:54:04 2014 (r339614) @@ -51,6 +51,48 @@ Note: Please add new entries to the beg --> + + bind -- denial of service vulnerability + + + bind99 + bind99-base + 9.9.4.2 + + + bind98 + bind98-base + 9.8.6.2 + + + bind96 + bind96-base + 9.6.3.2.ESV.R10.2 + + + + +

ISC reports:

+
+

Because of a defect in handling queries for NSEC3-signed zones, + BIND can crash with an "INSIST" failure in name.c when processing + queries possessing certain properties. By exploiting this defect + an attacker deliberately constructing a query with the right + properties could achieve denial of service against an authoritative + nameserver serving NSEC3-signed zones.

+
+ + + + CVE-2014-0591 + https://kb.isc.org/article/AA-01078/74/ + + + 2014-01-08 + 2014-01-13 + + + libXfont -- Stack buffer overflow in parsing of BDF font files in libXfont