diff options
| author | ghen <ghen@pkgsrc.org> | 2008-08-11 14:38:33 +0000 |
|---|---|---|
| committer | ghen <ghen@pkgsrc.org> | 2008-08-11 14:38:33 +0000 |
| commit | 3c79f9cac49924664121dfe4602f44b8362fc587 (patch) | |
| tree | d5f649a6c33c06c76b6438352203d409b2ff235e /net/powerdns | |
| parent | 86a7d08ff5d8f15448b5ac6944b9ae6eb76d9d7b (diff) | |
| download | pkgsrc-3c79f9cac49924664121dfe4602f44b8362fc587.tar.gz | |
Upgrade PowerDNS to 2.9.21.1. This release contains the security patch for
CVE-2008-3337 that we already had in patch-ac.
Diffstat (limited to 'net/powerdns')
| -rw-r--r-- | net/powerdns/Makefile | 3 | ||||
| -rw-r--r-- | net/powerdns/Makefile.common | 4 | ||||
| -rw-r--r-- | net/powerdns/distinfo | 9 | ||||
| -rw-r--r-- | net/powerdns/patches/patch-ac | 22 |
4 files changed, 7 insertions, 31 deletions
diff --git a/net/powerdns/Makefile b/net/powerdns/Makefile index 8ce2a0d05ba..5da7ab14189 100644 --- a/net/powerdns/Makefile +++ b/net/powerdns/Makefile @@ -1,11 +1,10 @@ -# $NetBSD: Makefile,v 1.4 2008/08/11 13:59:48 ghen Exp $ +# $NetBSD: Makefile,v 1.5 2008/08/11 14:38:33 ghen Exp $ PKG_DESTDIR_SUPPORT= user-destdir .include "Makefile.common" PKGNAME= ${DISTNAME:S/pdns/powerdns/} -PKGREVISION= 2 COMMENT= Modern, advanced and high performance nameserver CONFIGURE_ARGS+= --with-modules="geo" diff --git a/net/powerdns/Makefile.common b/net/powerdns/Makefile.common index 30693ff68c6..aa26da7a274 100644 --- a/net/powerdns/Makefile.common +++ b/net/powerdns/Makefile.common @@ -1,6 +1,6 @@ -# $NetBSD: Makefile.common,v 1.2 2007/05/09 08:05:23 ghen Exp $ +# $NetBSD: Makefile.common,v 1.3 2008/08/11 14:38:33 ghen Exp $ -PDNS_VERSION= 2.9.21 +PDNS_VERSION= 2.9.21.1 DISTNAME= pdns-${PDNS_VERSION} CATEGORIES= net MASTER_SITES= http://downloads.powerdns.com/releases/ diff --git a/net/powerdns/distinfo b/net/powerdns/distinfo index 7cc2a726777..6fe8369afd6 100644 --- a/net/powerdns/distinfo +++ b/net/powerdns/distinfo @@ -1,8 +1,7 @@ -$NetBSD: distinfo,v 1.3 2008/08/11 13:59:48 ghen Exp $ +$NetBSD: distinfo,v 1.4 2008/08/11 14:38:33 ghen Exp $ -SHA1 (pdns-2.9.21.tar.gz) = 2b86e4b44ef43db308c62e32b10ed0d5221a45c9 -RMD160 (pdns-2.9.21.tar.gz) = ed53de20a4e660ab2537b3c888b0a85225764a51 -Size (pdns-2.9.21.tar.gz) = 991071 bytes +SHA1 (pdns-2.9.21.1.tar.gz) = ab83149763ba5a5f9477fad5f07ec2dd7b65f57c +RMD160 (pdns-2.9.21.1.tar.gz) = f48be206219e95fc1a2c970f622eb4ada2e8238b +Size (pdns-2.9.21.1.tar.gz) = 1008160 bytes SHA1 (patch-aa) = 034845af3a9b66f57e482e3b43e43b61c17f51ab SHA1 (patch-ab) = d47887faff80330122ccf1cfd047c11e114c1153 -SHA1 (patch-ac) = aa7387cd9c283810d41d6097ecfbe6e688621432 diff --git a/net/powerdns/patches/patch-ac b/net/powerdns/patches/patch-ac deleted file mode 100644 index 6e553ad8017..00000000000 --- a/net/powerdns/patches/patch-ac +++ /dev/null @@ -1,22 +0,0 @@ -$NetBSD: patch-ac,v 1.1 2008/08/11 13:59:48 ghen Exp $ - -Fix for CVE-2008-3337 taken from PowerDNS 2.9.21.1: return SERVFAIL to -mailformed queries instead of just dropping them (as this facilitates -DNS spoofing attacks). - ---- pdns/packethandler.cc.orig 2007-04-21 15:56:36.000000000 +0200 -+++ pdns/packethandler.cc -@@ -576,9 +576,11 @@ DNSPacket *PacketHandler::questionOrRecu - - if(!validDNSName(p->qdomain)) { - if(arg().mustDo("log-dns-details")) -- L<<Logger::Error<<"Received a malformed qdomain from "<<p->getRemote()<<", '"<<p->qdomain<<"': dropping"<<endl; -+ L<<Logger::Error<<"Received a malformed qdomain from "<<p->getRemote()<<", '"<<p->qdomain<<"': sending servfail"<<endl; - S.inc("corrupt-packets"); -- return 0; -+ r=p->replyPacket(); -+ r->setRcode(RCode::ServFail); -+ return r; - } - if(p->d.opcode) { // non-zero opcode (again thanks RA!) - if(p->d.opcode==Opcode::Update) { |