diff options
| author | Doug Barton <dougb@FreeBSD.org> | 2011-05-27 23:46:58 +0000 |
|---|---|---|
| committer | Doug Barton <dougb@FreeBSD.org> | 2011-05-27 23:46:58 +0000 |
| commit | 612e91cca50315c1a9286da02c9883380ce3f532 (patch) | |
| tree | 89916ce6e4cb574297750163df2b8937da883a9c /dns/bind94/Makefile | |
| parent | Remove db45. (diff) | |
Upgrade to 9.4-ESV-R4-P1, which addresses the following issues:
1. Very large RRSIG RRsets included in a negative cache can trigger
an assertion failure that will crash named (BIND 9 DNS) due to an
off-by-one error in a buffer size check.
This bug affects all resolving name servers, whether DNSSEC validation
is enabled or not, on all BIND versions prior to today. There is a
possibility of malicious exploitation of this bug by remote users.
2. Named could fail to validate zones listed in a DLV that validated
insecure without using DLV and had DS records in the parent zone.
Notes
Notes:
svn path=/head/; revision=274745
Diffstat (limited to 'dns/bind94/Makefile')
| -rw-r--r-- | dns/bind94/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/dns/bind94/Makefile b/dns/bind94/Makefile index 59fc637a5b88..61f51f6ea8fb 100644 --- a/dns/bind94/Makefile +++ b/dns/bind94/Makefile @@ -12,7 +12,7 @@ # release you can generally build it cleanly from the source - Doug PORTNAME= bind94 -PORTVERSION= 9.4.4.ESV.4 +PORTVERSION= 9.4.4.ESV.4.1 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} \ http://dougbarton.us/Downloads/%SUBDIR%/ @@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org COMMENT= The BIND DNS suite with updated DNSSEC and threads # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.4-ESV-R4 +ISCVERSION= 9.4-ESV-R4-P1 DEPRECATED= Reaches EOL May 2011 EXPIRATION_DATE= 2011-05-31 |