Subject: CVS commit: [pkgsrc-2016Q4] pkgsrc/net/bind910
From: Benny Siegert
Date: 2017-01-13 21:15:26
Message id: 20170113201526.B7649FBA6@cvs.NetBSD.org

Log Message:
Pullup ticket #5189 - requested by taca
net/bind910: security fix

Revisions pulled up:
- net/bind910/Makefile                                          1.28
- net/bind910/distinfo                                          1.21

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 12 00:04:43 UTC 2017

   Modified Files:
   	pkgsrc/net/bind910: Makefile distinfo

   Log Message:
   Update bind910 to 9.10.4pl5 (BIND 9.10.4-P5), including security fixes.

   	--- 9.10.4-P5 released ---

   4530.	[bug]		Change 4489 broke the handling of CNAME -> DNAME
   			in responses resulting in SERVFAIL being returned.
   			[RT #43779]

   4528.	[bug]		Only set the flag bits for the i/o we are waiting
   			for on EPOLLERR or EPOLLHUP. [RT #43617]

   4519.	[port]		win32: handle ERROR_MORE_DATA. [RT #43534]

   4517.	[security]	Named could mishandle authority sections that were
   			missing RRSIGs triggering an assertion failure.
   			(CVE-2016-9444) [RT # 43632]

   4510.	[security]	Named mishandled some responses where covering RRSIG
   			records are returned without the requested data
   			resulting in a assertion failure. (CVE-2016-9147)
   			[RT #43548]

   4508.	[security]	Named incorrectly tried to cache TKEY records which
   			could trigger a assertion failure when there was
   			a class mismatch. (CVE-2016-9131) [RT #43522]

Files:
RevisionActionfile
1.27.2.1modifypkgsrc/net/bind910/Makefile
1.20.2.1modifypkgsrc/net/bind910/distinfo