diff options
author | taca <taca@pkgsrc.org> | 2012-04-05 00:39:34 +0000 |
---|---|---|
committer | taca <taca@pkgsrc.org> | 2012-04-05 00:39:34 +0000 |
commit | 0aea8bb95a8da945dd3a2a8cddeecdd3ba35d87a (patch) | |
tree | 6a1cb6798410eb75cfecde77ec2ed0a64ccaa0c2 /net | |
parent | 480280353dee6a58c01286b9f8b925fe2a571b3f (diff) | |
download | pkgsrc-0aea8bb95a8da945dd3a2a8cddeecdd3ba35d87a.tar.gz |
Update bind98 pacakge to 9.8.2.
Security Fixes
+ BIND 9 nameservers performing recursive queries could cache an
invalid record and subsequent queries for that record could
crash the resolvers with an assertion failure. [RT #26590]
[CVE-2011-4313]
Feature Changes
+ RPZ implementation now conforms to version 3 of the specification.
[RT #27316]
+ It is now possible to explicitly disable DLV in named.conf by
specifying "dnssec-lookaside no;". This is the default, but the
ability to configure it makes it clearly visible to administrators.
[RT #24858]
+ --enable-developer, a new composite argument to the configure
script, enables a set of build options normally disabled but
frequently selected in test or development builds, specifically:
enable_fixed_rrset, with_atf, enable_filter_aaaa, enable_rpz_nsip,
enable_rpz_nsdname, and with_dlz_filesystem (and on Linux and
Darwin, also enable_exportlib) [RT #27103]
Diffstat (limited to 'net')
-rw-r--r-- | net/bind98/Makefile | 12 | ||||
-rw-r--r-- | net/bind98/PLIST | 165 | ||||
-rw-r--r-- | net/bind98/distinfo | 13 | ||||
-rw-r--r-- | net/bind98/patches/patch-config.threads.in | 8 | ||||
-rw-r--r-- | net/bind98/patches/patch-configure | 22 | ||||
-rw-r--r-- | net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c | 13 |
6 files changed, 31 insertions, 202 deletions
diff --git a/net/bind98/Makefile b/net/bind98/Makefile index 61145023e36..e61401edd47 100644 --- a/net/bind98/Makefile +++ b/net/bind98/Makefile @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.7 2012/03/12 15:40:16 taca Exp $ +# $NetBSD: Makefile,v 1.8 2012/04/05 00:39:34 taca Exp $ DISTNAME= bind-${BIND_VERSION} PKGNAME= ${DISTNAME:S/-P/pl/} @@ -16,7 +16,7 @@ PKG_DESTDIR_SUPPORT= user-destdir MAKE_JOBS_SAFE= no -BIND_VERSION= 9.8.1-P1 +BIND_VERSION= 9.8.2 .include "../../mk/bsd.prefs.mk" @@ -60,6 +60,8 @@ FILES_SUBST+= BIND_GROUP=${BIND_GROUP:Q} \ BIND_USER=${BIND_USER:Q} PAX=${PAX:Q} MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER} DOCDIR= ${DESTDIR}${PREFIX}/share/doc/bind9 +MISCDOC= dnssec ipv6 migration migration-4to9 options \ + rfc-compliance roadmap sdb # include/isc/ipv6.h is installed on non-ipv6 platforms PLIST_VARS+= inet6 @@ -69,14 +71,12 @@ PLIST.inet6= yes RCD_SCRIPTS= lwresd named9 -INSTALLATION_DIRS= ${DOCDIR} share/doc/bind9/arm share/doc/bind9/draft \ - share/doc/bind9/rfc +INSTALLATION_DIRS= ${DOCDIR} share/doc/bind9/arm share/doc/bind9/misc post-install: ${INSTALL_DATA} ${WRKSRC}/README ${DOCDIR} ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm - ${INSTALL_DATA} ${WRKSRC}/doc/draft/draft-*.txt ${DOCDIR}/draft - ${INSTALL_DATA} ${WRKSRC}/doc/rfc/rfc*.txt ${DOCDIR}/rfc + cd ${WRKSRC}/doc/misc && ${INSTALL_DATA} ${MISCDOC} ${DOCDIR}/misc .include "../../security/openssl/buildlink3.mk" .include "../../mk/bsd.pkg.mk" diff --git a/net/bind98/PLIST b/net/bind98/PLIST index 6729b278679..542798120a9 100644 --- a/net/bind98/PLIST +++ b/net/bind98/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.2 2011/09/01 03:44:35 taca Exp $ +@comment $NetBSD: PLIST,v 1.3 2012/04/05 00:39:34 taca Exp $ bin/dig bin/host bin/isc-config.sh @@ -104,6 +104,7 @@ include/isc/hash.h include/isc/heap.h include/isc/hex.h include/isc/hmacmd5.h +include/isc/hmacsha.h include/isc/httpd.h include/isc/int.h include/isc/interfaceiter.h @@ -363,159 +364,13 @@ share/doc/bind9/arm/man.nsupdate.html share/doc/bind9/arm/man.rndc-confgen.html share/doc/bind9/arm/man.rndc.conf.html share/doc/bind9/arm/man.rndc.html -share/doc/bind9/draft/draft-faltstrom-uri-06.txt -share/doc/bind9/draft/draft-ietf-6man-text-addr-representation-07.txt -share/doc/bind9/draft/draft-ietf-behave-address-format-07.txt -share/doc/bind9/draft/draft-ietf-behave-dns64-11.txt -share/doc/bind9/draft/draft-ietf-dnsext-axfr-clarify-14.txt -share/doc/bind9/draft/draft-ietf-dnsext-dns-tcp-requirements-03.txt -share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-12.txt -share/doc/bind9/draft/draft-ietf-dnsext-dnssec-registry-fixes-06.txt -share/doc/bind9/draft/draft-ietf-dnsext-ecc-key-07.txt -share/doc/bind9/draft/draft-ietf-dnsext-interop3597-02.txt -share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-05.txt -share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-19.txt -share/doc/bind9/draft/draft-ietf-dnsext-rfc3597-bis-02.txt -share/doc/bind9/draft/draft-ietf-dnsext-tsig-md5-deprecated-03.txt -share/doc/bind9/draft/draft-ietf-dnsop-bad-dns-res-05.txt -share/doc/bind9/draft/draft-ietf-dnsop-dnssec-key-timing-02.txt -share/doc/bind9/draft/draft-ietf-dnsop-dnssec-trust-history-01.txt -share/doc/bind9/draft/draft-ietf-dnsop-inaddr-required-07.txt -share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-02.txt -share/doc/bind9/draft/draft-ietf-dnsop-respsize-06.txt -share/doc/bind9/draft/draft-kato-dnsop-local-zones-00.txt -share/doc/bind9/draft/draft-kerr-ixfr-only-01.txt -share/doc/bind9/draft/draft-mekking-dnsop-auto-cpsync-00.txt -share/doc/bind9/draft/draft-yao-dnsext-bname-04.txt -share/doc/bind9/rfc/rfc1032.txt -share/doc/bind9/rfc/rfc1033.txt -share/doc/bind9/rfc/rfc1034.txt -share/doc/bind9/rfc/rfc1035.txt -share/doc/bind9/rfc/rfc1101.txt -share/doc/bind9/rfc/rfc1122.txt -share/doc/bind9/rfc/rfc1123.txt -share/doc/bind9/rfc/rfc1183.txt -share/doc/bind9/rfc/rfc1348.txt -share/doc/bind9/rfc/rfc1535.txt -share/doc/bind9/rfc/rfc1536.txt -share/doc/bind9/rfc/rfc1537.txt -share/doc/bind9/rfc/rfc1591.txt -share/doc/bind9/rfc/rfc1611.txt -share/doc/bind9/rfc/rfc1612.txt -share/doc/bind9/rfc/rfc1706.txt -share/doc/bind9/rfc/rfc1712.txt -share/doc/bind9/rfc/rfc1750.txt -share/doc/bind9/rfc/rfc1876.txt -share/doc/bind9/rfc/rfc1886.txt -share/doc/bind9/rfc/rfc1912.txt -share/doc/bind9/rfc/rfc1982.txt -share/doc/bind9/rfc/rfc1995.txt -share/doc/bind9/rfc/rfc1996.txt -share/doc/bind9/rfc/rfc2052.txt -share/doc/bind9/rfc/rfc2104.txt -share/doc/bind9/rfc/rfc2119.txt -share/doc/bind9/rfc/rfc2133.txt -share/doc/bind9/rfc/rfc2136.txt -share/doc/bind9/rfc/rfc2137.txt -share/doc/bind9/rfc/rfc2163.txt -share/doc/bind9/rfc/rfc2168.txt -share/doc/bind9/rfc/rfc2181.txt -share/doc/bind9/rfc/rfc2230.txt -share/doc/bind9/rfc/rfc2308.txt -share/doc/bind9/rfc/rfc2317.txt -share/doc/bind9/rfc/rfc2373.txt -share/doc/bind9/rfc/rfc2374.txt -share/doc/bind9/rfc/rfc2375.txt -share/doc/bind9/rfc/rfc2418.txt -share/doc/bind9/rfc/rfc2535.txt -share/doc/bind9/rfc/rfc2536.txt -share/doc/bind9/rfc/rfc2537.txt -share/doc/bind9/rfc/rfc2538.txt -share/doc/bind9/rfc/rfc2539.txt -share/doc/bind9/rfc/rfc2540.txt -share/doc/bind9/rfc/rfc2541.txt -share/doc/bind9/rfc/rfc2553.txt -share/doc/bind9/rfc/rfc2671.txt -share/doc/bind9/rfc/rfc2672.txt -share/doc/bind9/rfc/rfc2673.txt -share/doc/bind9/rfc/rfc2782.txt -share/doc/bind9/rfc/rfc2825.txt -share/doc/bind9/rfc/rfc2826.txt -share/doc/bind9/rfc/rfc2845.txt -share/doc/bind9/rfc/rfc2874.txt -share/doc/bind9/rfc/rfc2915.txt -share/doc/bind9/rfc/rfc2929.txt -share/doc/bind9/rfc/rfc2930.txt -share/doc/bind9/rfc/rfc2931.txt -share/doc/bind9/rfc/rfc3007.txt -share/doc/bind9/rfc/rfc3008.txt -share/doc/bind9/rfc/rfc3071.txt -share/doc/bind9/rfc/rfc3090.txt -share/doc/bind9/rfc/rfc3110.txt -share/doc/bind9/rfc/rfc3123.txt -share/doc/bind9/rfc/rfc3152.txt -share/doc/bind9/rfc/rfc3197.txt -share/doc/bind9/rfc/rfc3225.txt -share/doc/bind9/rfc/rfc3226.txt -share/doc/bind9/rfc/rfc3258.txt -share/doc/bind9/rfc/rfc3363.txt -share/doc/bind9/rfc/rfc3364.txt -share/doc/bind9/rfc/rfc3425.txt -share/doc/bind9/rfc/rfc3445.txt -share/doc/bind9/rfc/rfc3467.txt -share/doc/bind9/rfc/rfc3490.txt -share/doc/bind9/rfc/rfc3491.txt -share/doc/bind9/rfc/rfc3492.txt -share/doc/bind9/rfc/rfc3493.txt -share/doc/bind9/rfc/rfc3513.txt -share/doc/bind9/rfc/rfc3596.txt -share/doc/bind9/rfc/rfc3597.txt -share/doc/bind9/rfc/rfc3645.txt -share/doc/bind9/rfc/rfc3655.txt -share/doc/bind9/rfc/rfc3658.txt -share/doc/bind9/rfc/rfc3755.txt -share/doc/bind9/rfc/rfc3757.txt -share/doc/bind9/rfc/rfc3833.txt -share/doc/bind9/rfc/rfc3845.txt -share/doc/bind9/rfc/rfc3901.txt -share/doc/bind9/rfc/rfc4025.txt -share/doc/bind9/rfc/rfc4033.txt -share/doc/bind9/rfc/rfc4034.txt -share/doc/bind9/rfc/rfc4035.txt -share/doc/bind9/rfc/rfc4074.txt -share/doc/bind9/rfc/rfc4159.txt -share/doc/bind9/rfc/rfc4193.txt -share/doc/bind9/rfc/rfc4255.txt -share/doc/bind9/rfc/rfc4294.txt -share/doc/bind9/rfc/rfc4339.txt -share/doc/bind9/rfc/rfc4343.txt -share/doc/bind9/rfc/rfc4367.txt -share/doc/bind9/rfc/rfc4398.txt -share/doc/bind9/rfc/rfc4408.txt -share/doc/bind9/rfc/rfc4431.txt -share/doc/bind9/rfc/rfc4470.txt -share/doc/bind9/rfc/rfc4471.txt -share/doc/bind9/rfc/rfc4472.txt -share/doc/bind9/rfc/rfc4509.txt -share/doc/bind9/rfc/rfc4634.txt -share/doc/bind9/rfc/rfc4635.txt -share/doc/bind9/rfc/rfc4641.txt -share/doc/bind9/rfc/rfc4648.txt -share/doc/bind9/rfc/rfc4697.txt -share/doc/bind9/rfc/rfc4701.txt -share/doc/bind9/rfc/rfc4892.txt -share/doc/bind9/rfc/rfc4955.txt -share/doc/bind9/rfc/rfc4956.txt -share/doc/bind9/rfc/rfc5001.txt -share/doc/bind9/rfc/rfc5011.txt -share/doc/bind9/rfc/rfc5155.txt -share/doc/bind9/rfc/rfc5205.txt -share/doc/bind9/rfc/rfc5452.txt -share/doc/bind9/rfc/rfc5507.txt -share/doc/bind9/rfc/rfc5625.txt -share/doc/bind9/rfc/rfc5702.txt -share/doc/bind9/rfc/rfc5933.txt -share/doc/bind9/rfc/rfc6303.txt -share/doc/bind9/rfc/rfc952.txt +share/doc/bind9/misc/dnssec +share/doc/bind9/misc/ipv6 +share/doc/bind9/misc/migration +share/doc/bind9/misc/migration-4to9 +share/doc/bind9/misc/options +share/doc/bind9/misc/rfc-compliance +share/doc/bind9/misc/roadmap +share/doc/bind9/misc/sdb share/examples/rc.d/lwresd share/examples/rc.d/named9 diff --git a/net/bind98/distinfo b/net/bind98/distinfo index 0390b60d51b..b160b0733fa 100644 --- a/net/bind98/distinfo +++ b/net/bind98/distinfo @@ -1,12 +1,11 @@ -$NetBSD: distinfo,v 1.7 2011/11/17 00:48:09 taca Exp $ +$NetBSD: distinfo,v 1.8 2012/04/05 00:39:34 taca Exp $ -SHA1 (bind-9.8.1-P1.tar.gz) = 1cff6594aa185d84942edd2f3cc06dff9cebb04b -RMD160 (bind-9.8.1-P1.tar.gz) = 3183167d73a5da81e7e286a6eb123fc8684f4421 -Size (bind-9.8.1-P1.tar.gz) = 8451969 bytes +SHA1 (bind-9.8.2.tar.gz) = 09f0b18bde0438186d6639f08c17db3b98e81c17 +RMD160 (bind-9.8.2.tar.gz) = 59f6502cc4dd315da4c31adc183f0eb88e6856b4 +Size (bind-9.8.2.tar.gz) = 7054574 bytes SHA1 (patch-bin_dig_dighost.c) = 3f37033cc64e1153268ab437fab533d2920bb18c -SHA1 (patch-config.threads.in) = 3d8ee03230fdb6aca545a67759ba7aacda52bb61 -SHA1 (patch-configure) = 81a83d750f5c6d21abb30a743a4aa09e7d91711e -SHA1 (patch-contrib_dlz_drivers_sdlz__helper.c) = d6e9a7145449874ad00a0b28b1582df5a2516965 +SHA1 (patch-config.threads.in) = 045531d8378a88c654ab98ba6ea65786c8cf4e2b +SHA1 (patch-configure) = 08f878fd3a5d3d17e0cf55d01344ddc84991967f SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7 SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d SHA1 (patch-lib_lwres_getnameinfo.c) = c26dcff4637b7beb16b66c32b304d0f187390eed diff --git a/net/bind98/patches/patch-config.threads.in b/net/bind98/patches/patch-config.threads.in index 789b7445e39..353760b3ac5 100644 --- a/net/bind98/patches/patch-config.threads.in +++ b/net/bind98/patches/patch-config.threads.in @@ -1,13 +1,13 @@ -$NetBSD: patch-config.threads.in,v 1.1.1.1 2011/03/04 03:52:15 taca Exp $ +$NetBSD: patch-config.threads.in,v 1.2 2012/04/05 00:39:34 taca Exp $ ---- config.threads.in.orig 2010-12-21 04:20:23.000000000 +0000 +--- config.threads.in.orig 2012-03-22 19:20:00.000000000 +0000 +++ config.threads.in -@@ -44,6 +44,8 @@ case $host in +@@ -45,6 +45,8 @@ case $host in use_threads=false ;; *-freebsd*) use_threads=false ;; +*-dragonfly*) + use_threads=false ;; - *-bsdi[234]*) + [*-bsdi[234]*]) # Thread signals do not work reliably on some versions of BSD/OS. use_threads=false ;; diff --git a/net/bind98/patches/patch-configure b/net/bind98/patches/patch-configure index df8a1625cd0..82baaa21a32 100644 --- a/net/bind98/patches/patch-configure +++ b/net/bind98/patches/patch-configure @@ -1,29 +1,17 @@ -$NetBSD: patch-configure,v 1.2 2011/09/01 03:44:35 taca Exp $ +$NetBSD: patch-configure,v 1.3 2012/04/05 00:39:34 taca Exp $ ---- configure.orig 2011-07-26 22:11:37.000000000 +0000 +--- configure.orig 2012-03-22 19:20:00.000000000 +0000 +++ configure -@@ -22134,6 +22134,8 @@ case $host in +@@ -22159,6 +22159,8 @@ case $host in use_threads=false ;; *-freebsd*) use_threads=false ;; +*-dragonfly*) + use_threads=false ;; - *-bsdi234*) + *-bsdi[234]*) # Thread signals do not work reliably on some versions of BSD/OS. use_threads=false ;; -@@ -23450,9 +23452,9 @@ case $use_libtool in - O=lo - A=la - LIBTOOL_MKDEP_SED='s;\.o;\.lo;' -- LIBTOOL_MODE_COMPILE='--mode=compile' -+ LIBTOOL_MODE_COMPILE='--mode=compile --tag=CC' - LIBTOOL_MODE_INSTALL='--mode=install' -- LIBTOOL_MODE_LINK='--mode=link' -+ LIBTOOL_MODE_LINK='--mode=link --tag=CC' - case "$host" in - *) LIBTOOL_ALLOW_UNDEFINED= ;; - esac -@@ -27074,7 +27076,7 @@ $as_echo "no" >&6; } +@@ -27099,7 +27101,7 @@ $as_echo "no" >&6; } fi if test -n "-L$use_dlz_postgres_lib -lpq" then diff --git a/net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c b/net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c deleted file mode 100644 index 386295650dc..00000000000 --- a/net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c +++ /dev/null @@ -1,13 +0,0 @@ -$NetBSD: patch-contrib_dlz_drivers_sdlz__helper.c,v 1.1 2011/09/01 03:44:35 taca Exp $ - ---- contrib/dlz/drivers/sdlz_helper.c.orig 2010-05-14 06:29:37.000000000 +0000 -+++ contrib/dlz/drivers/sdlz_helper.c -@@ -50,7 +50,7 @@ - * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. - */ - --#ifdef DLZ -+#ifdef CONTRIB_DLZ - - #include <config.h> - |