From 612e91cca50315c1a9286da02c9883380ce3f532 Mon Sep 17 00:00:00 2001 From: Doug Barton Date: Fri, 27 May 2011 23:46:58 +0000 Subject: Upgrade to 9.4-ESV-R4-P1, which addresses the following issues: 1. Very large RRSIG RRsets included in a negative cache can trigger an assertion failure that will crash named (BIND 9 DNS) due to an off-by-one error in a buffer size check. This bug affects all resolving name servers, whether DNSSEC validation is enabled or not, on all BIND versions prior to today. There is a possibility of malicious exploitation of this bug by remote users. 2. Named could fail to validate zones listed in a DLV that validated insecure without using DLV and had DS records in the parent zone. --- dns/bind94/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'dns/bind94/Makefile') diff --git a/dns/bind94/Makefile b/dns/bind94/Makefile index 59fc637a5b88..61f51f6ea8fb 100644 --- a/dns/bind94/Makefile +++ b/dns/bind94/Makefile @@ -12,7 +12,7 @@ # release you can generally build it cleanly from the source - Doug PORTNAME= bind94 -PORTVERSION= 9.4.4.ESV.4 +PORTVERSION= 9.4.4.ESV.4.1 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} \ http://dougbarton.us/Downloads/%SUBDIR%/ @@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org COMMENT= The BIND DNS suite with updated DNSSEC and threads # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.4-ESV-R4 +ISCVERSION= 9.4-ESV-R4-P1 DEPRECATED= Reaches EOL May 2011 EXPIRATION_DATE= 2011-05-31 -- cgit v1.2.3