upgrade to 8.3.3. includes important security fix.

	--- 8.3.3-REL released --- (Wed Jun 26 21:15:43 PDT 2002)
1301.	[func]		log attempts to exploit #1300.
1300.	[bug]		Remote buffer overrun.
1299.	[func]		Log to xfer-in when a named-xfer fails and one of
			the masters returned REFUSED.
1298.	[bug]		named could leak a OPT record when returning a
			negative response.
1297.	[func]		'ndc restart' will now attempt to preserve the
			arguments named was started with.
			Use 'ndc restart --' to clear the arguements.
			Use 'ndc restart <new arguements>' to restart named
			with a alternate set of arguements.
1296.	[bug]		delay setting need_restart until the response to
			ndc exec has been sent.
1295.	[func]		new ndc command 'args'.  returns the arguements that
			named was started with %xx escaped.
1294.	[bug]		#1272 broke linkage for those OS's using -lfl (flex).
			Move -ll/-lfl to LIBL for all platforms.
	--- 8.3.2-REL released --- (Mon Jun 17 20:24:32 PDT 2002)
1293.	[doc]		update man pages for 'dig', 'dnsquery' and 'host'
			to reflect IPv6 capabilities (nslookup and nsupdate
			were already IPv4/IPv6 agnostic).
1292.	[func]		host: the default lookups now also include AAAA
			records.
1291.	[func]		'dig -x <ip6>' now works.
1290.	[bug]		'dig @server' fail to report the IPv6 address of the
			server in error messages.
1289.	[contrib]	normalize_zone now handles $TTL.
1288.	[bug]		named: -t and -w could not be used together.
1287.	[func]		report serial(s) in out going transfer operation.
	--- 8.3.2-RC1 released --- (Thu May 30 23:06:11 PDT 2002)
1286.	[func]		libbind: no longer attempts bit string labels for
			IPv6 reverse resolution.  Try IP6.ARPA then IP6.INT
			for nibble style resolution.
1285.	[port]		linux: ss_family vs __ss_family in sockaddr_storage.
1284.	[port]		freebsd: 5.0 uses gid_t rather that int for
			GETGROUPLIST_ARGS
1283.	[port]		bsdi: 4.2 also has struct sockaddr_storage.
1282.	[bug]		nslookup was using inet_ntoa() to print out a IPv6
			address.
1281.	[bug]		escape '(' and ')' when coverting to presentation
			form.
1280.	[func]		server { edns yes_or_no; } is now supported.
1279.	[bug]		nslookup: partial coversion to similar style outputs
			for both -type=aaaa and -type=a.
1278.	[bug]		free() of non-malloced memory in nslookup.
1277.	[port]		cast all instances of yytext in commands.l to (char*)
			to silence compilers on OS's where lex declares it
			as (unsigned char *).
1276.	[port]		hpux 11.22: ansify GetAnswer in getinfo.c to
			silence compiler.
1275.	[bug]		bad declaration of si in tsig_key_from_addr().
1274.	[port]		hpux 11.22: ansify hexstring() and display() in
			addr.c to silence compiler.
1273.	[bug]		const pointer conficts in res_debug.c.
1272.	[port]		hpux 11.22: don't link against -ll unless required.
1272.	[bug]		main_need_num was not last entry in enum.
			main_need_tick nolonger required.
1271.	[port]		hpux: treat all hpux systems as BIG_ENDIAN, don't
			include <sys/mbuf.h>.
1270.	[port]		hpux 11.22 namespace clash DATASIZE -> BIND_DATASIZE.
1269.	[port]		hpux 11.11 interface scaning.
1268.	[port]		solaris: 64 bit binary compatability.
1267.	[bug]		aix4: missing IN6_IS_ADDR_V4COMPAT macro.
1266.	[bug]		If you are using TSIG #1261 introduced the potential
			of a infinite loop.
1265.	[bug]		nslookup failed on platforms that don't have BSD 43
			style sockets.
1264.	[bug]		LINK_INIT and UNLINK were not compatible with
			C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
	--- 8.3.2-T1B released --- (Tue May  7 18:49:58 PDT 2002)
1263.	[bug]		gethostans() could get out of sync parsing the
			response if there was a very long CNAME chain.
1262.	[bug]		winnt: dumpdb and stats should now work reliably.
1261.	[bug]		using a valid TSIG with a compressed ownername could
			result a INSIST() failure.
1260.	[func]		"notify explicit;" from BIND 9.
1259.	[misc]		leave the verification of the OPT options to the
			caller.
1258.	[func]		accept SOA MNAME field as legitimate additional
			data.
1257.	[bug]		malformed response to query w/ tsig + edns.
1256.	[port]		darwin: probe for IPv6 support.
1255.	[bug]		xfers_running could become out of sync if a zone
			was removed while it was being transfered.
1254.	[func]		nsupdate can now update IPv6 servers.
1253.	[func]		host now accepts IPv6 addresses.
1253.	[bug]		reserve space for the signature when performing a
			zone transfer.
1252.	[func]		dnsquery now accepts IPv6 addresses.
1251.	[bug]		win32: it was possible to call RegCloseKey() on a
			invalid key.
1250	[func]		nslookup now accepts IPv6 addresses.
1249.	[func]		dig now accepts IPv6 addresses.
1248.	[doc]		correct some typos in named.conf.5 and corresponding
			html.
1247.	[bug]		get_salen() IPv6 support was broken for OSs w/o sa_len.
1246.	[support]	add highly dangerous compile time option
			NXDOMAIN_ON_DENIAL.  it should not be used
			except in testing.
1245.	[bug]		if we don't have enough file descriptors to open
			a socket attempt to close a idle tcp client.
1244.	[port]		bsdi: 4.3 has struct sockaddr_storage.
1243.	[bug]		SERVFAIL can have too many other causes to be used
			say whether a server supports EDNS or not.
1242.	[port]		64k answer buffers were causing stack space to be
			exceeded for certian OS.  Use heap space instead.
1241.	[bug]		getnameinfo() failed to lookup IPv4 mapped /
			compatible addresses.
1340.	[bug]		reference after free for included conf file name.
1339.	[bug]		doaddinfo would not always attempt to fetch missing
			glue when it should have.
1338.	[bug]		an IPv6 only nameserver could generate spurious
			sysquery errors.
1337.	[port]		linux: IN6ADDR_LOOPBACK_INIT, IN6ADDR_ANY_INIT and
			sockaddr_storage not declared by early kernels.
1336.	[bug]		getaddrinfo() could call freeaddrinfo() with an
			invalid pointer.
1335.	[bug]		res_nupdate() failed to update the name servers
			addresses before sending the update.
1334.	[bug]		A6 is expected in the additional section.

2 files changed, 7 insertions, 8 deletions

diff --git a/net/bind8/Makefile b/net/bind8/Makefile
index 5bc5b4a8e86..b75e2c08e37 100644
--- a/net/bind8/Makefile
+++ b/net/bind8/Makefile
@@ -1,12 +1,11 @@
 #
-# $NetBSD: Makefile,v 1.13 2002/06/17 12:18:22 wiz Exp $
+# $NetBSD: Makefile,v 1.14 2002/06/28 06:03:04 itojun Exp $
 #
 # FreeBSD Id: Makefile,v 1.12 1999/06/28 21:25:07 billf Exp
 #
 
 DISTNAME=	bind
 PKGNAME=	bind-${BIND_VERSION}
-PKGREVISION=	1
 WRKSRC=		${WRKDIR}/src
 CATEGORIES=	net
 MASTER_SITES=	ftp://ftp.isc.org/isc/bind/src/${BIND_VERSION}/
@@ -18,7 +17,7 @@ COMMENT=	The Berkeley Internet Name Daemon, an implementation of DNS
 
 Y2K=		http://www.isc.org/ISC/y2k.html
 
-BIND_VERSION=	8.3.1
+BIND_VERSION=	8.3.3
 DIST_SUBDIR=	bind/${BIND_VERSION}
 EXTRACT_ONLY=	${DISTNAME}-src.tar.gz ${DISTNAME}-doc.tar.gz
 
diff --git a/net/bind8/distinfo b/net/bind8/distinfo
index d12686f353f..e4faac200df 100644
--- a/net/bind8/distinfo
+++ b/net/bind8/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.8 2002/05/08 16:20:56 taca Exp $
+$NetBSD: distinfo,v 1.9 2002/06/28 06:03:04 itojun Exp $
 
-SHA1 (bind/8.3.1/bind-src.tar.gz) = e2f7fb1dd86dfa58ad6a8a9d2c7c0fd21c8f7640
-Size (bind/8.3.1/bind-src.tar.gz) = 1392391 bytes
-SHA1 (bind/8.3.1/bind-doc.tar.gz) = 1a2adfb1b3d5e16072936f0245e30d035d182f0f
-Size (bind/8.3.1/bind-doc.tar.gz) = 1489943 bytes
+SHA1 (bind/8.3.3/bind-src.tar.gz) = d78e1e0818c16e6a81b2fbd545b564e73c1229fe
+Size (bind/8.3.3/bind-src.tar.gz) = 1411990 bytes
+SHA1 (bind/8.3.3/bind-doc.tar.gz) = 476f2b545f56b8fc2aad9d6e00653d1e267cfef6
+Size (bind/8.3.3/bind-doc.tar.gz) = 1488903 bytes
 SHA1 (patch-aa) = 6897694a7fa77bfb7c5da2d29a7537c948c669cb
 SHA1 (patch-ab) = 0d0e2e1a8cb58fc6c11b60fcc69fe496251f7659
 SHA1 (patch-ac) = fdf75b6b53fe4b9ab6ca74b90400edda54a825b1