diff options
| author | Jason Unovitch <junovitch@FreeBSD.org> | 2016-08-10 01:32:14 +0000 |
|---|---|---|
| committer | Jason Unovitch <junovitch@FreeBSD.org> | 2016-08-10 01:32:14 +0000 |
| commit | d5716373e1d5442989a31a0dd6ce91a4854a2ad3 (patch) | |
| tree | 2cf076b72f3da7d1c2c4658c20400cf5f173c4ff /dns/nsd | |
| parent | Document denial of service vector via oversized AXFR, IXFR, or Dynamic DNS (diff) | |
dns/nsd: update 4.1.10 -> 4.1.11
- Restore configurable IPV6 option. Upstream integrated fix for issue.
- FEATURES:
* When tcp is more than half full, use short timeout for tcp session.
* Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori.
* Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer
data size, from Toshifumi Sakaguchi.
Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865.
- BUGFIXES:
* Fix build without IPv6, patch from Zdenek Kaspar.
* Fix #783: Trying to run a root server without having configured it silently
gives wrong answers.
* Fix #782: Serve DS record but parent zone has no NS record.
* Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
PR: 211693
Submitted by: jaap@NLnetLabs.nl (maintainer)
Security: CVE-2016-6173
Security: https://vuxml.FreeBSD.org/freebsd/7d08e608-5e95-11e6-b334-002590263bf5.html
MFH: 2016Q3
Notes
Notes:
svn path=/head/; revision=419980
Diffstat (limited to 'dns/nsd')
| -rw-r--r-- | dns/nsd/Makefile | 8 | ||||
| -rw-r--r-- | dns/nsd/distinfo | 6 |
2 files changed, 7 insertions, 7 deletions
diff --git a/dns/nsd/Makefile b/dns/nsd/Makefile index 13834c3315e4..d7280e8bc311 100644 --- a/dns/nsd/Makefile +++ b/dns/nsd/Makefile @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= nsd -PORTVERSION= 4.1.10 +PORTVERSION= 4.1.11 CATEGORIES= dns ipv6 MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/ \ ftp://ftp.rhnet.is/pub/nsd/ @@ -34,8 +34,7 @@ CONFIGURE_ARGS= --with-libevent=${LOCALBASE} \ --localstatedir=${NSDLSDIR} \ --with-dbfile=${NSDDBDIR}/nsd.db \ --with-ssl=${OPENSSLBASE} \ - --with-pidfile=${NSDRUNDIR}/nsd.pid \ - --enable-ipv6 + --with-pidfile=${NSDRUNDIR}/nsd.pid PLIST_SUB= NSDUSER=${NSDUSER} \ NSDGROUP=${NSDGROUP} \ @@ -50,7 +49,7 @@ PORTDOCS= CREDITS ChangeLog LICENSE NSD-DATABASE NSD-DIFFFILE \ REQUIREMENTS TESTPLAN TODO UPGRADING coding-style \ differences.tex -OPTIONS_DEFINE= ROOT_SERVER LARGEFILE BIND8_STATS CHECKING \ +OPTIONS_DEFINE= ROOT_SERVER LARGEFILE IPV6 BIND8_STATS CHECKING \ MINRESPSIZE NSEC3 MMAP DOCS RRL ZONE_STATS MUNIN_PLUGIN OPTIONS_DEFAULT= LARGEFILE NSEC3 MINRESPSIZE RRL OPTIONS_SUB= yes @@ -79,6 +78,7 @@ MINRESPSIZE_CONFIGURE_ENABLE= minimal-responses MMAP_CONFIGURE_ENABLE= mmap RRL_CONFIGURE_ENABLE= ratelimit ZONE_STATS_CONFIGURE_ENABLE= zone-stats +IPV6_CONFIGURE_ENABLE= ipv6 post-build-MUNIN_PLUGIN-on: ${REINPLACE_CMD} \ diff --git a/dns/nsd/distinfo b/dns/nsd/distinfo index 991a192b45dd..b33c8c4b6e30 100644 --- a/dns/nsd/distinfo +++ b/dns/nsd/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1466286030 -SHA256 (nsd-4.1.10.tar.gz) = 3a757014046752a0b0b11c1a2e22a36bb796f89f6939147ed3226556b4298727 -SIZE (nsd-4.1.10.tar.gz) = 1075892 +TIMESTAMP = 1470733493 +SHA256 (nsd-4.1.11.tar.gz) = c7712fd05eb0ab97040738e01d9369d02b89c0a7fa0943fd5bfc43b2111a92df +SIZE (nsd-4.1.11.tar.gz) = 1080220 |