./net/bind912, Berkeley Internet Name Daemon implementation of DNS, version 9.12

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2019Q1, Version: 9.12.4pl1nb1, Package name: bind-9.12.4pl1nb1, Maintainer: pkgsrc-users

BIND, the Berkeley Internet Name Daemon. This package contains the BIND
9.12 release.

This package contains the BIND 9.12 release.

- named and related libraries have been substantially refactored for
improved query performance.
- Code implementing the name server query processing logic has been
moved into a new libns library.
- The DNS Response Policy Service API (DNSRPS) is now supported.
- Log file timestamps can now also be formatted in ISO 8601 (local)
or ISO 8601 (UTC) formats.
- Added support for the EDNS Padding and Keepalive options.
- 'new-zones-directory' option sets the location where the
configuration data for zones added by rndc addzone is stored.
- The default key algorithm in rndc-confgen is now hmac-sha256.
- filter-aaaa-on-v4 and filter-aaaa-on-v6 options are now available
by default without a configure option.
- The obsolete isc-hmac-fixup command has been removed.



Package options: inet6, threads

Master sites:

SHA1: e1406e294aee810e32f93d60bd45b15b5d1f76e9
RMD160: b656fbd38b80fc59bcd592803671e80825e6e24a
Filesize: 7729.401 KB

Version history: (Expand)

CVS history: (Expand)


   2019-05-12 22:37:29 by S.P.Zeidler | Files touched by this commit (10) | Package updated
Log message:
Pullup ticket #5957 - requested by taca
net/bind912: security update

Revisions pulled up:
- net/bind912/DESCR                                             1.2
- net/bind912/MESSAGE                                           1.2
- net/bind912/Makefile                                          1.10-1.11
- net/bind912/PLIST                                             1.3
- net/bind912/distinfo                                          1.7-1.8
- net/bind912/options.mk                                        1.4
- net/bind912/patches/patch-bin_named_server.c                  1.1-1.2
- net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c          1.1
- net/bind912/patches/patch-lib_dns_view.c                      1.1
- net/bind912/patches/patch-lib_isc_unix_socket.c               1.3

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Apr 30 02:46:16 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: DESCR MESSAGE Makefile PLIST distinfo options.mk
   	pkgsrc/net/bind912/patches: patch-lib_isc_unix_socket.c
   Added Files:
   	pkgsrc/net/bind912/patches: patch-bin_named_server.c
   	    patch-bin_pkcs11_pkcs11-keygen.c patch-lib_dns_view.c

   Log message:
   net/bind912: update to 9.12.4pl1

   Update bind912 to 9.12.4pl1 (BIND 9.12.4-P1).

   Fix security problem CVE-2018-5743 and CVE-2019-6467 and overhaul pkgsrc.
   Now no need to change namedb is permission under NetBSD.

   pkgsrc changes:

   * Simplify DESCR.
   * Update note about required directories.
   * Drop pkg-config from USE_TOOLS.
   * Drop none existing configure arguments and PKG_OPTIONS:
   	- fetchlimit
   	- sit
   * Sort PLIST.

   Please refer CHANGES file in detail before 9.12.4 release:

   	--- 9.12.4-P1 released ---

   5200.	[security]	tcp-clients settings could be exceeded in some cases,
   			which could lead to exhaustion of file descriptors.
   			(CVE-2018-5743) [GL #615]

   5199.	[security]	In certain configurations, named could crash
   			if nxdomain-redirect was in use and a redirected
   			query resulted in an NXDOMAIN from the cache.
   			(CVE-2019-6467) [GL #880]

   5167.	[bug]		nxdomain-redirect could sometimes lookup the wrong
   			redirect name. [GL #892]

   To generate a diff of this commit:
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind912/DESCR pkgsrc/net/bind912/MESSAGE
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/bind912/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind912/PLIST
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/bind912/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind912/options.mk
   cvs rdiff -u -r0 -r1.1 pkgsrc/net/bind912/patches/patch-bin_named_server.c \
       pkgsrc/net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c \
       pkgsrc/net/bind912/patches/patch-lib_dns_view.c
   cvs rdiff -u -r1.2 -r1.3 \
       pkgsrc/net/bind912/patches/patch-lib_isc_unix_socket.c

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May  2 13:31:07 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: Makefile distinfo
   	pkgsrc/net/bind912/patches: patch-bin_named_server.c

   Log message:
   net/bind912: fix an error when reloading configuration

   Fix an error when reloading configuration.  There is on more check to
   "directory" in option statement is writable.

   Bump PKGREVISION.

   To generate a diff of this commit:
   cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/bind912/Makefile
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/net/bind912/distinfo
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind912/patches/patch-bin_named_server.c