Path to this page:
Subject: CVS commit: [pkgsrc-2016Q4] pkgsrc/net/bind910
From: Benny Siegert
Date: 2017-01-13 21:15:26
Message id: 20170113201526.B7649FBA6@cvs.NetBSD.org
Log Message:
Pullup ticket #5189 - requested by taca
net/bind910: security fix
Revisions pulled up:
- net/bind910/Makefile 1.28
- net/bind910/distinfo 1.21
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Jan 12 00:04:43 UTC 2017
Modified Files:
pkgsrc/net/bind910: Makefile distinfo
Log Message:
Update bind910 to 9.10.4pl5 (BIND 9.10.4-P5), including security fixes.
--- 9.10.4-P5 released ---
4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
[RT #43779]
4528. [bug] Only set the flag bits for the i/o we are waiting
for on EPOLLERR or EPOLLHUP. [RT #43617]
4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
4517. [security] Named could mishandle authority sections that were
missing RRSIGs triggering an assertion failure.
(CVE-2016-9444) [RT # 43632]
4510. [security] Named mishandled some responses where covering RRSIG
records are returned without the requested data
resulting in a assertion failure. (CVE-2016-9147)
[RT #43548]
4508. [security] Named incorrectly tried to cache TKEY records which
could trigger a assertion failure when there was
a class mismatch. (CVE-2016-9131) [RT #43522]
Files: