CVS commit: pkgsrc/net/bind910

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Dec  8 21:59:09 UTC 2014

Modified Files:
        pkgsrc/net/bind910: Makefile PLIST distinfo

Log Message:
Update bind910 to 9.10.1pl1 (BIND 9.10.1-P1).

        --- 9.10.1-P1 released ---

4006.   [security]      A flaw in delegation handling could be exploited
                        to put named into an infinite loop.  This has
                        been addressed by placing limits on the number
                        of levels of recursion named will allow (default 7),
                        and the number of iterative queries that it will
                        send (default 50) before terminating a recursive
                        query (CVE-2014-8500).

                        The recursion depth limit is configured via the
                        "max-recursion-depth" option, and the query limit
                        via the "max-recursion-queries" option.  [RT #37580]

4003.   [security]      When geoip-directory was reconfigured during
                        named run-time, the previously loaded GeoIP
                        data could remain, potentially causing wrong
                        ACLs to be used or wrong results to be served
                        based on geolocation (CVE-2014-8680). [RT #37720]

4002.   [security]      Lookups in GeoIP databases that were not
                        loaded could cause an assertion failure
                        (CVE-2014-8680). [RT #37679]

4001.   [security]      The caching of GeoIP lookups did not always
                        handle address families correctly, potentially
                        resulting in an assertion failure (CVE-2014-8680).
                        [RT #37672]


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind910/Makefile pkgsrc/net/bind910/PLIST \
    pkgsrc/net/bind910/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.