Path to this page:
Subject: CVS commit: [pkgsrc-2012Q1] pkgsrc/net/bind97
From: Matthias Scheler
Date: 2012-05-22 11:40:38
Message id: 20120522094038.1B1AC175DD@cvs.netbsd.org
Log Message:
Pullup ticket #3799 - requested by taca
net/bind97: security update
Revisions pulled up:
- net/bind97/Makefile 1.14
- net/bind97/distinfo 1.13
- net/bind97/patches/patch-lib_dns_resolver.c deleted
---
Module Name: pkgsrc
Committed By: taca
Date: Tue May 22 03:33:28 UTC 2012
Modified Files:
pkgsrc/net/bind97: Makefile distinfo
Removed Files:
pkgsrc/net/bind97/patches: patch-lib_dns_resolver.c
Log Message:
Update bind97 package to 9.7.6.
New Features
* None
Feature Changes
* BIND now recognizes the TLSA resource record type, created to
support IETF DANE (DNS-based Authentication of Named Entities)
[RT #28989]
Bug Fixes
* The locking strategy around the handling of iterative queries
has been tuned to reduce unnecessary contention in a multi-threaded
environment. (Note that this may not provide a measurable
improvement over previous versions of BIND, but it corrects the
performance impact of change 3309 / RT #27995) [RT #29239]
* Addresses a race condition that can cause named to to crash when
the masters list for a zone is updated via rndc reload/reconfig
[RT #26732]
* Fixes a race condition in zone.c that can cause named to crash
during the processing of rndc delzone [RT #29028]
* Prevents a named segfault from resolver.c due to procedure
fctx_finddone() not being thread-safe. [RT #27995]
* Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
an assertion when flushing cache data. [RT #28571]
* A new flag -R has been added to queryperf for running tests
using non-recursive queries. It also now builds correctly on
MacOS version 10.7 (darwin) [RT #28565]
* Named no longer crashes if gssapi is enabled in named.conf but
was not compiled into the binary [RT #28338]
* SDB now handles unexpected errors from back-end database drivers
gracefully instead of exiting on an assert. [RT #28534]
Files: