Path to this page:
Subject: CVS commit: [pkgsrc-2016Q4] pkgsrc/net/bind99
From: Benny Siegert
Date: 2017-01-13 21:21:02
Message id: 20170113202102.E2810FBA6@cvs.NetBSD.org
Log Message:
Pullup ticket #5190 - requested by taca
net/bind99: security fix
Revisions pulled up:
- net/bind99/Makefile 1.62
- net/bind99/distinfo 1.42
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Jan 12 00:05:46 UTC 2017
Modified Files:
pkgsrc/net/bind99: Makefile distinfo
Log Message:
Update bind99 to 9.9.9pl5 (BIND 9.9.9-P5), including security fixes.
--- 9.9.9-P5 released ---
4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
[RT #43779]
4528. [bug] Only set the flag bits for the i/o we are waiting
for on EPOLLERR or EPOLLHUP. [RT #43617]
4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
4517. [security] Named could mishandle authority sections that were
missing RRSIGs triggering an assertion failure.
(CVE-2016-9444) [RT # 43632]
4510. [security] Named mishandled some responses where covering RRSIG
records are returned without the requested data
resulting in a assertion failure. (CVE-2016-9147)
[RT #43548]
4508. [security] Named incorrectly tried to cache TKEY records which
could trigger a assertion failure when there was
a class mismatch. (CVE-2016-9131) [RT #43522]
Files: