Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Jan 2014 17:54:05 +0000 (UTC)
From:      Mathieu Arnold <mat@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org
Subject:   svn commit: r339614 - in branches/2014Q1: dns/bind96 dns/bind98 dns/bind99 security/vuxml
Message-ID:  <201401131754.s0DHs5vF091675@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: mat
Date: Mon Jan 13 17:54:04 2014
New Revision: 339614
URL: http://svnweb.freebsd.org/changeset/ports/339614

Log:
  MFH: r339612
  
  Security update to fix CVE-2014-0591 as reported at
  https://kb.isc.org/article/AA-01078/74/
  
  9.9.4 -> 9.9.4-P2
  9.8.6 -> 9.8.6-P2
  9.6-ESV-R10 -> 9.6-ESV-R10-P2
  
  Security:	CVE-2014-0591 Remote DOS
  Approved by:	portmgr (implicit)

Modified:
  branches/2014Q1/dns/bind96/Makefile
  branches/2014Q1/dns/bind96/distinfo
  branches/2014Q1/dns/bind98/Makefile
  branches/2014Q1/dns/bind98/distinfo
  branches/2014Q1/dns/bind99/Makefile
  branches/2014Q1/dns/bind99/distinfo
  branches/2014Q1/security/vuxml/vuln.xml
Directory Properties:
  branches/2014Q1/   (props changed)

Modified: branches/2014Q1/dns/bind96/Makefile
==============================================================================
--- branches/2014Q1/dns/bind96/Makefile	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/dns/bind96/Makefile	Mon Jan 13 17:54:04 2014	(r339614)
@@ -1,8 +1,7 @@
 # $FreeBSD$
 
 PORTNAME=	bind96
-PORTVERSION=	9.6.3.2.ESV.R10
-PORTREVISION=	2
+PORTVERSION=	9.6.3.2.ESV.R10.2
 CATEGORIES=	dns net ipv6
 MASTER_SITES=	${MASTER_SITE_ISC}
 MASTER_SITE_SUBDIR=	bind9/${ISCVERSION}
@@ -14,7 +13,7 @@ COMMENT=	BIND DNS suite with updated DNS
 LICENSE=	ISCL
 
 # ISC releases things like 9.4.0b3, which our versioning doesn't like
-ISCVERSION=	9.6-ESV-R10
+ISCVERSION=	9.6-ESV-R10-P2
 
 MAKE_JOBS_UNSAFE=	yes
 

Modified: branches/2014Q1/dns/bind96/distinfo
==============================================================================
--- branches/2014Q1/dns/bind96/distinfo	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/dns/bind96/distinfo	Mon Jan 13 17:54:04 2014	(r339614)
@@ -1,2 +1,2 @@
-SHA256 (bind-9.6-ESV-R10.tar.gz) = f34e24a7d4bd41eedd7b781fbca3f8dc29e6f677be3b9f418f8581debbc4a66c
-SIZE (bind-9.6-ESV-R10.tar.gz) = 6420776
+SHA256 (bind-9.6-ESV-R10-P2.tar.gz) = 1b131ef3a3b27a7916815ec5f4a87f0d9f5ac0669df21c7ec75ba18a13238eda
+SIZE (bind-9.6-ESV-R10-P2.tar.gz) = 6421474

Modified: branches/2014Q1/dns/bind98/Makefile
==============================================================================
--- branches/2014Q1/dns/bind98/Makefile	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/dns/bind98/Makefile	Mon Jan 13 17:54:04 2014	(r339614)
@@ -1,8 +1,7 @@
 # $FreeBSD$
 
 PORTNAME=	bind98
-PORTVERSION=	9.8.6
-PORTREVISION=	2
+PORTVERSION=	9.8.6.2
 CATEGORIES=	dns net ipv6
 MASTER_SITES=	${MASTER_SITE_ISC}
 MASTER_SITE_SUBDIR=	bind9/${ISCVERSION}
@@ -14,7 +13,7 @@ COMMENT=	BIND DNS suite with updated DNS
 LICENSE=	ISCL
 
 # ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION=	9.8.6
+ISCVERSION=	9.8.6-P2
 
 MAKE_JOBS_UNSAFE=	yes
 

Modified: branches/2014Q1/dns/bind98/distinfo
==============================================================================
--- branches/2014Q1/dns/bind98/distinfo	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/dns/bind98/distinfo	Mon Jan 13 17:54:04 2014	(r339614)
@@ -1,4 +1,4 @@
-SHA256 (bind-9.8.6.tar.gz) = 01cc3a0105b47833b99e61b69acd824be4eeefd6557fffa26eced8e03f1249cd
-SIZE (bind-9.8.6.tar.gz) = 7275769
+SHA256 (bind-9.8.6-P2.tar.gz) = e5c87bdf102ac5b2563955393a2f4805e7574dc7addd03d18152c2f70befedeb
+SIZE (bind-9.8.6-P2.tar.gz) = 7275835
 SHA256 (rpz2+rl-9.8.6.patch) = 76b988205ce17034ff6c03cff943d0e579a5a46dbc47e1fac83704c88fb96d79
 SIZE (rpz2+rl-9.8.6.patch) = 348361

Modified: branches/2014Q1/dns/bind99/Makefile
==============================================================================
--- branches/2014Q1/dns/bind99/Makefile	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/dns/bind99/Makefile	Mon Jan 13 17:54:04 2014	(r339614)
@@ -1,8 +1,7 @@
 # $FreeBSD$
 
 PORTNAME?=	bind99
-PORTVERSION=	9.9.4
-PORTREVISION?=	2
+PORTVERSION=	9.9.4.2
 CATEGORIES=	dns net ipv6
 MASTER_SITES=	${MASTER_SITE_ISC}
 MASTER_SITE_SUBDIR=	bind9/${ISCVERSION}
@@ -14,7 +13,7 @@ COMMENT=	BIND DNS suite with updated DNS
 LICENSE=	ISCL
 
 # ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION=	9.9.4
+ISCVERSION=	9.9.4-P2
 
 MAKE_JOBS_UNSAFE=	yes
 

Modified: branches/2014Q1/dns/bind99/distinfo
==============================================================================
--- branches/2014Q1/dns/bind99/distinfo	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/dns/bind99/distinfo	Mon Jan 13 17:54:04 2014	(r339614)
@@ -1,2 +1,2 @@
-SHA256 (bind-9.9.4.tar.gz) = fe0f16653382e428b10282ce9850722d19589d66f2b45a528e98be3153f654c8
-SIZE (bind-9.9.4.tar.gz) = 7513017
+SHA256 (bind-9.9.4-P2.tar.gz) = 50f3c6431e26d3f322b69092a49c92e163e73029fe4a1933ce532dc97ec40a89
+SIZE (bind-9.9.4-P2.tar.gz) = 7513077

Modified: branches/2014Q1/security/vuxml/vuln.xml
==============================================================================
--- branches/2014Q1/security/vuxml/vuln.xml	Mon Jan 13 17:41:08 2014	(r339613)
+++ branches/2014Q1/security/vuxml/vuln.xml	Mon Jan 13 17:54:04 2014	(r339614)
@@ -51,6 +51,48 @@ Note:  Please add new entries to the beg
 
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">;
+  <vuln vid="cb252f01-7c43-11e3-b0a6-005056a37f68">
+    <topic>bind -- denial of service vulnerability</topic>
+    <affects>
+      <package>
+	<name>bind99</name>
+	<name>bind99-base</name>
+	<range><lt>9.9.4.2</lt></range>
+      </package>
+      <package>
+	<name>bind98</name>
+	<name>bind98-base</name>
+	<range><lt>9.8.6.2</lt></range>
+      </package>
+      <package>
+	<name>bind96</name>
+	<name>bind96-base</name>
+	<range><lt>9.6.3.2.ESV.R10.2</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">;
+	<p>ISC reports:</p>
+	<blockquote cite="https://kb.isc.org/article/AA-01078/74/">;
+	  <p>Because of a defect in handling queries for NSEC3-signed zones,
+	    BIND can crash with an "INSIST" failure in name.c when processing
+	    queries possessing certain properties. By exploiting this defect
+	    an attacker deliberately constructing a query with the right
+	    properties could achieve denial of service against an authoritative
+	    nameserver serving NSEC3-signed zones.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <cvename>CVE-2014-0591</cvename>
+      <url>https://kb.isc.org/article/AA-01078/74/</url>;
+    </references>
+    <dates>
+      <discovery>2014-01-08</discovery>
+      <entry>2014-01-13</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="28c575fa-784e-11e3-8249-001cc0380077">
     <topic>libXfont -- Stack buffer overflow in parsing of BDF font files in libXfont</topic>
     <affects>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201401131754.s0DHs5vF091675>