Log message:
Pullup ticket #3820 - requested by taca
net/bind96 security update

Revisions pulled up:
- net/bind96/Makefile                                           1.26
- net/bind96/distinfo                                           1.18

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jun  4 13:29:19 UTC 2012

   Modified Files:
   	pkgsrc/net/bind96: Makefile distinfo

   Log message:
   Update bind96 to 9.6.3.1.ESV.7pl1 (BIND 9.6-ESV-R7-P1).
   Security release for CVE-2012-1667.

   	--- 9.6-ESV-R7-P1 released ---

   3331.	[security]	dns_rdataslab_fromrdataset could produce bad
   			rdataslabs. [RT #29644]

Log message:
Pullup ticket #3800 - requested by taca
net/bind96: security update

Revisions pulled up:
- net/bind96/Makefile                                           1.25
- net/bind96/distinfo                                           1.17
- net/bind96/patches/patch-lib_dns_resolver.c                   deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 22 03:34:32 UTC 2012

   Modified Files:
   	pkgsrc/net/bind96: Makefile distinfo
   Removed Files:
   	pkgsrc/net/bind96/patches: patch-lib_dns_resolver.c

   Log message:
   Update bind96 package to 9.6.3.1.ESV.7 (BIND 9.6-ESV-R7).

   New Features

   *  None

   Feature Changes

   *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

   Bug Fixes

   *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

   *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

   *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

   *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

   *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

   *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

   *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

   *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

   *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

Log message:
Pullup ticket #3765 - requested by taca
net/bind96: security patch

Revisions pulled up:
- net/bind96/Makefile                                           1.24
- net/bind96/distinfo                                           1.16
- net/bind96/patches/patch-lib_dns_resolver.c                   1.1

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May  1 02:49:27 UTC 2012

   Modified Files:
   	pkgsrc/net/bind96: Makefile distinfo
   Added Files:
   	pkgsrc/net/bind96/patches: patch-lib_dns_resolver.c

   Log message:
   Add fix to a race condition in the resolver code that can cause a recursive
   nameserver: <https://kb.isc.org/article/AA-00664>.

   Bump PKGREVISION.