Pullup ticket #3508 - requested by taca

net/bind96: security update

Revisions pulled up:
- net/bind96/Makefile                                           1.20
- net/bind96/PLIST                                              1.8
- net/bind96/distinfo                                           1.13

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 10 15:24:51 UTC 2011

   Modified Files:
   	pkgsrc/net/bind96: Makefile PLIST distinfo

   Log Message:
   Update bind96 pacakge to 9.6.3.1.ESV.5 (9.6-ESV-R5).

   For full changes, please refer:
   ftp://ftp.isc.org/isc/bind9/9.6-ESV-R5/RELEASE-NOTES-BIND-9.6-ESV.html

   New Features

   9.6-ESV-R5

        * Added a tool able to generate malformed packets to allow testing of
          how named handles them. [RT #24096]

   Security Fixes

   9.6-ESV-R5

        * named, set up to be a caching resolver, is vulnerable to a user
          querying a domain with very large resource record sets (RRSets)
          when trying to negatively cache the response. Due to an off-by-one
          error, caching the response could cause named to crash. [RT #24650]
          [CVE-2011-1910]
        * Change #2912 populated the message section in replies to UPDATE
          requests, which some Windows clients wanted. This exposed a latent
          bug that allowed the response message to crash named. With this
          fix, change 2912 has been reduced to copy only the zone section to
          the reply. A more complete fix for the latent bug will be released
          later. [RT #24777]

   Feature Changes

   9.6-ESV-R5

        * Merged in the NetBSD ATF test framework (currently version 0.12)
          for development of future unit tests. Use configure --with-atf to
          build ATF internally or configure --with-atf=prefix to use an
          external copy. [RT #23209]
        * Added more verbose error reporting from DLZ LDAP. [RT #23402]
        * Replaced compile time constant with STDTIME_ON_32BITS. [RT #23587]

3 files changed, 10 insertions, 9 deletions

diff --git a/net/bind96/Makefile b/net/bind96/Makefile
index ea51c9795ca..13290218fbb 100644
--- a/net/bind96/Makefile
+++ b/net/bind96/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.19 2011/07/05 14:28:06 taca Exp $
+# $NetBSD: Makefile,v 1.19.2.1 2011/08/22 21:39:00 tron Exp $
 
 DISTNAME=	bind-${BIND_VERSION}
 PKGNAME=	${DISTNAME:S/-ESV/.3.1.ESV/:S/-R/./:S/-P/pl/}
@@ -16,7 +16,7 @@ PKG_DESTDIR_SUPPORT=	user-destdir
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.6-ESV-R4-P3
+BIND_VERSION=	9.6-ESV-R5
 
 .include "../../mk/bsd.prefs.mk"
 
diff --git a/net/bind96/PLIST b/net/bind96/PLIST
index 954d9ed531a..2bd0a078e4a 100644
--- a/net/bind96/PLIST
+++ b/net/bind96/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2011/02/09 16:24:14 taca Exp $
+@comment $NetBSD: PLIST,v 1.7.4.1 2011/08/22 21:39:00 tron Exp $
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -336,6 +336,7 @@ share/doc/bind9/arm/man.nsupdate.html
 share/doc/bind9/arm/man.rndc-confgen.html
 share/doc/bind9/arm/man.rndc.conf.html
 share/doc/bind9/arm/man.rndc.html
+share/doc/bind9/draft/draft-faltstrom-uri-06.txt
 share/doc/bind9/draft/draft-ietf-6man-text-addr-representation-07.txt
 share/doc/bind9/draft/draft-ietf-behave-address-format-07.txt
 share/doc/bind9/draft/draft-ietf-behave-dns64-11.txt
@@ -345,13 +346,13 @@ share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-12.txt
 share/doc/bind9/draft/draft-ietf-dnsext-dnssec-registry-fixes-06.txt
 share/doc/bind9/draft/draft-ietf-dnsext-ecc-key-07.txt
 share/doc/bind9/draft/draft-ietf-dnsext-interop3597-02.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-02.txt
+share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-05.txt
 share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-19.txt
 share/doc/bind9/draft/draft-ietf-dnsext-rfc3597-bis-02.txt
 share/doc/bind9/draft/draft-ietf-dnsext-tsig-md5-deprecated-03.txt
 share/doc/bind9/draft/draft-ietf-dnsop-bad-dns-res-05.txt
 share/doc/bind9/draft/draft-ietf-dnsop-default-local-zones-10.txt
-share/doc/bind9/draft/draft-ietf-dnsop-dnssec-key-timing-00.txt
+share/doc/bind9/draft/draft-ietf-dnsop-dnssec-key-timing-02.txt
 share/doc/bind9/draft/draft-ietf-dnsop-dnssec-trust-history-01.txt
 share/doc/bind9/draft/draft-ietf-dnsop-inaddr-required-07.txt
 share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-02.txt
diff --git a/net/bind96/distinfo b/net/bind96/distinfo
index 43d1b066151..69f8a017490 100644
--- a/net/bind96/distinfo
+++ b/net/bind96/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.12 2011/07/05 14:28:06 taca Exp $
+$NetBSD: distinfo,v 1.12.2.1 2011/08/22 21:39:00 tron Exp $
 
-SHA1 (bind-9.6-ESV-R4-P3.tar.gz) = 6e09aa24ef45835a8022b1e0b905dc934eb2c3fa
-RMD160 (bind-9.6-ESV-R4-P3.tar.gz) = 906b492d2c967eb7f62e0a758a642282af2e3493
-Size (bind-9.6-ESV-R4-P3.tar.gz) = 7160255 bytes
+SHA1 (bind-9.6-ESV-R5.tar.gz) = f75e6faa7000c90186b9e6dbabb7d60c59ee08db
+RMD160 (bind-9.6-ESV-R5.tar.gz) = bbec8120a82186278c2909abe8c553e334e99b0a
+Size (bind-9.6-ESV-R5.tar.gz) = 7885370 bytes
 SHA1 (patch-ab) = 6cec876c8caa7082f97365863f3f88c4f168da48
 SHA1 (patch-ac) = 074649e1514870a3154c623a5f6d1507b72b5b05
 SHA1 (patch-ad) = 7e17cfd77d3eeef203f215bb1d19ad88ad4f082a