diff options
| author | Doug Barton <dougb@FreeBSD.org> | 2010-01-25 00:25:08 +0000 |
|---|---|---|
| committer | Doug Barton <dougb@FreeBSD.org> | 2010-01-25 00:25:08 +0000 |
| commit | 9b77b5a94274fd5adc704c1a800954fe17a1cc25 (patch) | |
| tree | 4ec07d5e571a56977d5e5acd8dc44bcde7fe2981 /dns/bind96 | |
| parent | Use ISC macro instead of ftp.isc.org in MASTER_SITES (diff) | |
Upgrade to BIND 9.4.3-P5, 9.5.2-P2, and 9.6.1-P3. These versions address
the following vulnerabilities:
BIND 9 Cache Update from Additional Section
https://www.isc.org/advisories/CVE-2009-4022v6
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022
A nameserver with DNSSEC validation enabled may incorrectly add
unauthenticated records to its cache that are received during the
resolution of a recursive client query
BIND 9 DNSSEC validation code could cause bogus NXDOMAIN responses
https://www.isc.org/advisories/CVE-2010-0097
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
There was an error in the DNSSEC NSEC/NSEC3 validation code that could
cause bogus NXDOMAIN responses (that is, NXDOMAIN responses for records
proven by NSEC or NSEC3 to exist) to be cached as if they had validated
correctly
These issues only affect systems with DNSSEC validation enabled.
Notes
Notes:
svn path=/head/; revision=248498
Diffstat (limited to 'dns/bind96')
| -rw-r--r-- | dns/bind96/Makefile | 4 | ||||
| -rw-r--r-- | dns/bind96/distinfo | 12 |
2 files changed, 8 insertions, 8 deletions
diff --git a/dns/bind96/Makefile b/dns/bind96/Makefile index 5aa518128e0a..291333d0c263 100644 --- a/dns/bind96/Makefile +++ b/dns/bind96/Makefile @@ -12,7 +12,7 @@ # release you can generally build it cleanly from the source - Doug PORTNAME= bind96 -PORTVERSION= 9.6.1.2 +PORTVERSION= 9.6.1.3 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} \ http://dougbarton.us/Downloads/%SUBDIR%/ @@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org COMMENT= The BIND DNS suite with updated DNSSEC and threads # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.6.1-P2 +ISCVERSION= 9.6.1-P3 MAKE_JOBS_UNSAFE= yes diff --git a/dns/bind96/distinfo b/dns/bind96/distinfo index 0d2d1b9672e8..1dea3dc4fd68 100644 --- a/dns/bind96/distinfo +++ b/dns/bind96/distinfo @@ -1,6 +1,6 @@ -MD5 (bind-9.6.1-P2.tar.gz) = 435bc2e26e470d46ddf2acb24abb6ea6 -SHA256 (bind-9.6.1-P2.tar.gz) = 8ad9593ae7ae6903150cfd9202200c26a1caf47816becdd5821b5360d544fc30 -SIZE (bind-9.6.1-P2.tar.gz) = 6601674 -MD5 (bind-9.6.1-P2.tar.gz.asc) = 8475a614b95592e4440a2be31f9fe80e -SHA256 (bind-9.6.1-P2.tar.gz.asc) = 0acd6fc9e3005a1040d85fd8de2ff8b3b5bf77a4890a6737a766c26725dd7dc4 -SIZE (bind-9.6.1-P2.tar.gz.asc) = 481 +MD5 (bind-9.6.1-P3.tar.gz) = a0952d589b3051538033387be4c983f9 +SHA256 (bind-9.6.1-P3.tar.gz) = 869f5079a900b280c051d4c9cf7eefea000a0e70ccec9e6fcddd79e3caa10198 +SIZE (bind-9.6.1-P3.tar.gz) = 6508797 +MD5 (bind-9.6.1-P3.tar.gz.asc) = 3a8a0b5b1b342903f5ee661bceee4057 +SHA256 (bind-9.6.1-P3.tar.gz.asc) = 150217597c1ca61dc50ce46392e81f7533f9bf1031b41dd2dd387750ab61b583 +SIZE (bind-9.6.1-P3.tar.gz.asc) = 481 |