[pkgsrc/trunk]: pkgsrc/net/bind96 Update bind96 to 9.6.3.1.ESV.7pl4 (BIND 9.6...

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/2af5028ce726
branches:  trunk
changeset: 609769:2af5028ce726
user:      taca <taca%pkgsrc.org@localhost>
date:      Wed Oct 10 03:04:57 2012 +0000

description:
Update bind96 to 9.6.3.1.ESV.7pl4 (BIND 9.6-ESV-R7-P4).

Here are change changes from release note.  Note security fixes except
CVE-2012-5166 should be already fixed in previous version of bind96 package.

Please refer https://kb.isc.org/article/AA-00795 for list of full bug fixes.


Security Fixes

* A deliberately constructed combination of records could cause named to hang
  while populating the additional section of a response. [CVE-2012-5166] [RT
  #31090]
* Prevents a named assert (crash) when queried for a record whose RDATA
  exceeds 65535 bytes [CVE-2012-4244] [RT #30416]
* Prevents a named assert (crash) when validating caused by using "Bad cache"
  data before it has been initialized. [CVE-2012-3817] [RT #30025]
* A condition has been corrected where improper handling of zero-length RDATA
  could cause undesirable behavior, including termination of the named
  process. [CVE-2012-1667] [RT #29644]


New Features

  None


Feature Changes

* Improves OpenSSL error logging [RT #29932]
* nslookup now returns a nonzero exit code when it is unable to get an answer.
  [RT #29492]

diffstat:

 net/bind96/Makefile |  5 ++---
 net/bind96/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 7 deletions(-)

diffs (38 lines):

diff -r 8b33ca5549f4 -r 2af5028ce726 net/bind96/Makefile
--- a/net/bind96/Makefile       Wed Oct 10 02:24:45 2012 +0000
+++ b/net/bind96/Makefile       Wed Oct 10 03:04:57 2012 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.31 2012/10/03 21:56:52 wiz Exp $
+# $NetBSD: Makefile,v 1.32 2012/10/10 03:04:57 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-ESV/.3.1.ESV/:S/-R/./:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
                http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
@@ -17,7 +16,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.6-ESV-R7-P3
+BIND_VERSION=  9.6-ESV-R7-P4
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r 8b33ca5549f4 -r 2af5028ce726 net/bind96/distinfo
--- a/net/bind96/distinfo       Wed Oct 10 02:24:45 2012 +0000
+++ b/net/bind96/distinfo       Wed Oct 10 03:04:57 2012 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.20 2012/09/13 01:32:54 taca Exp $
+$NetBSD: distinfo,v 1.21 2012/10/10 03:04:57 taca Exp $
 
-SHA1 (bind-9.6-ESV-R7-P3.tar.gz) = 86043835feb1dcdb9043e1e62ed6541cc238b418
-RMD160 (bind-9.6-ESV-R7-P3.tar.gz) = a1ce1a5026456de1500c56eea63023111a2f7489
-Size (bind-9.6-ESV-R7-P3.tar.gz) = 6411767 bytes
+SHA1 (bind-9.6-ESV-R7-P4.tar.gz) = fc069ac53d336b6ebe2070e2c034edd6ea6c3264
+RMD160 (bind-9.6-ESV-R7-P4.tar.gz) = dc708516e8b6dd42a6ce637dda82b989deb22aaf
+Size (bind-9.6-ESV-R7-P4.tar.gz) = 6419312 bytes
 SHA1 (patch-ab) = 6cec876c8caa7082f97365863f3f88c4f168da48
 SHA1 (patch-ac) = 074649e1514870a3154c623a5f6d1507b72b5b05
 SHA1 (patch-ad) = 3fcfac007f7823d48573459e57810f442c5b7d2f