Subject: CVS commit: [pkgsrc-2019Q1] pkgsrc/net/bind912
From: S.P.Zeidler
Date: 2019-05-12 22:37:29
Message id: 20190512203729.532E4FB16@cvs.NetBSD.org

Log Message:
Pullup ticket #5957 - requested by taca
net/bind912: security update

Revisions pulled up:
- net/bind912/DESCR                                             1.2
- net/bind912/MESSAGE                                           1.2
- net/bind912/Makefile                                          1.10-1.11
- net/bind912/PLIST                                             1.3
- net/bind912/distinfo                                          1.7-1.8
- net/bind912/options.mk                                        1.4
- net/bind912/patches/patch-bin_named_server.c                  1.1-1.2
- net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c          1.1
- net/bind912/patches/patch-lib_dns_view.c                      1.1
- net/bind912/patches/patch-lib_isc_unix_socket.c               1.3

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Apr 30 02:46:16 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: DESCR MESSAGE Makefile PLIST distinfo options.mk
   	pkgsrc/net/bind912/patches: patch-lib_isc_unix_socket.c
   Added Files:
   	pkgsrc/net/bind912/patches: patch-bin_named_server.c
   	    patch-bin_pkcs11_pkcs11-keygen.c patch-lib_dns_view.c

   Log Message:
   net/bind912: update to 9.12.4pl1

   Update bind912 to 9.12.4pl1 (BIND 9.12.4-P1).

   Fix security problem CVE-2018-5743 and CVE-2019-6467 and overhaul pkgsrc.
   Now no need to change namedb is permission under NetBSD.

   pkgsrc changes:

   * Simplify DESCR.
   * Update note about required directories.
   * Drop pkg-config from USE_TOOLS.
   * Drop none existing configure arguments and PKG_OPTIONS:
   	- fetchlimit
   	- sit
   * Sort PLIST.

   Please refer CHANGES file in detail before 9.12.4 release:

   	--- 9.12.4-P1 released ---

   5200.	[security]	tcp-clients settings could be exceeded in some cases,
   			which could lead to exhaustion of file descriptors.
   			(CVE-2018-5743) [GL #615]

   5199.	[security]	In certain configurations, named could crash
   			if nxdomain-redirect was in use and a redirected
   			query resulted in an NXDOMAIN from the cache.
   			(CVE-2019-6467) [GL #880]

   5167.	[bug]		nxdomain-redirect could sometimes lookup the wrong
   			redirect name. [GL #892]

   To generate a diff of this commit:
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind912/DESCR pkgsrc/net/bind912/MESSAGE
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/bind912/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind912/PLIST
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/bind912/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind912/options.mk
   cvs rdiff -u -r0 -r1.1 pkgsrc/net/bind912/patches/patch-bin_named_server.c \
       pkgsrc/net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c \
       pkgsrc/net/bind912/patches/patch-lib_dns_view.c
   cvs rdiff -u -r1.2 -r1.3 \
       pkgsrc/net/bind912/patches/patch-lib_isc_unix_socket.c

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May  2 13:31:07 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: Makefile distinfo
   	pkgsrc/net/bind912/patches: patch-bin_named_server.c

   Log Message:
   net/bind912: fix an error when reloading configuration

   Fix an error when reloading configuration.  There is on more check to
   "directory" in option statement is writable.

   Bump PKGREVISION.

   To generate a diff of this commit:
   cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/bind912/Makefile
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/net/bind912/distinfo
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind912/patches/patch-bin_named_server.c

Files:
RevisionActionfile
1.1.6.1modifypkgsrc/net/bind912/DESCR
1.1.6.1modifypkgsrc/net/bind912/MESSAGE
1.9.2.1modifypkgsrc/net/bind912/Makefile
1.2.2.1modifypkgsrc/net/bind912/PLIST
1.6.2.1modifypkgsrc/net/bind912/distinfo
1.3.2.1modifypkgsrc/net/bind912/options.mk
1.2.4.1modifypkgsrc/net/bind912/patches/patch-lib_isc_unix_socket.c
1.2.2.2addpkgsrc/net/bind912/patches/patch-bin_named_server.c
1.1.2.2addpkgsrc/net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c
1.1.2.2addpkgsrc/net/bind912/patches/patch-lib_dns_view.c