CVS commit: [pkgsrc-2017Q1] pkgsrc/net/bind910

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Thu Apr 13 11:29:32 UTC 2017

Modified Files:
        pkgsrc/net/bind910 [pkgsrc-2017Q1]: Makefile distinfo

Log Message:
Pullup ticket #5272 - requested by taca
net/bind910: security fix

Revisions pulled up:
- net/bind910/Makefile                                          1.32
- net/bind910/distinfo                                          1.23

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Apr 13 01:52:42 UTC 2017

   Modified Files:
        pkgsrc/net/bind910: Makefile distinfo

   Log Message:
   Update bind910 to 9.10.4pl8 (BIND 9.10.4-P8).

   Quote from release announce:

      BIND 9.10.4-P8 addresses the security issues described in
      CVE-2017-3136, CVE-2017-3137, and CVE-2017-3138, and updates the
      built-in trusted keys for the root zone.

   From CHANGELOG:

        --- 9.10.4-P8 released ---

   4582.        [security]      'rndc ""' could trigger a assertion failure in named.
                        (CVE-2017-3138) [RT #44924]

   4580.        [bug]           4578 introduced a regression when handling CNAME to
                        referral below the current domain. [RT #44850]

        --- 9.10.4-P7 released ---

   4578.        [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

   4575.        [security]      DNS64 with "break-dnssec yes;" can result in an
                        assertion failure. (CVE-2017-3136) [RT #44653]

   4564.        [maint]         Update the built in managed keys to include the
                        upcoming root KSK. [RT #44579]


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.31.2.1 pkgsrc/net/bind910/Makefile
cvs rdiff -u -r1.22 -r1.22.2.1 pkgsrc/net/bind910/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind910/Makefile
diff -u pkgsrc/net/bind910/Makefile:1.31 pkgsrc/net/bind910/Makefile:1.31.2.1
--- pkgsrc/net/bind910/Makefile:1.31    Fri Feb 24 15:46:14 2017
+++ pkgsrc/net/bind910/Makefile Thu Apr 13 11:29:32 2017
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.31 2017/02/24 15:46:14 fhajny Exp $
+# $NetBSD: Makefile,v 1.31.2.1 2017/04/13 11:29:32 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
@@ -14,7 +13,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.10.4-P6
+BIND_VERSION=  9.10.4-P8
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind910/distinfo
diff -u pkgsrc/net/bind910/distinfo:1.22 pkgsrc/net/bind910/distinfo:1.22.2.1
--- pkgsrc/net/bind910/distinfo:1.22    Thu Feb  9 00:48:59 2017
+++ pkgsrc/net/bind910/distinfo Thu Apr 13 11:29:32 2017
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.22 2017/02/09 00:48:59 taca Exp $
+$NetBSD: distinfo,v 1.22.2.1 2017/04/13 11:29:32 bsiegert Exp $
 
-SHA1 (bind-9.10.4-P6.tar.gz) = c08bef47136b3b88844a4c3b8a6227445fca6f40
-RMD160 (bind-9.10.4-P6.tar.gz) = c082903758103ac9780cf92dbd634f6b3369478a
-SHA512 (bind-9.10.4-P6.tar.gz) = a881d81307b48922c062d672701e777a17d5130a10dc1c5e4022edbbc28c7136076c17a0c89b211cd3b07527b81fa9a3ac599d0c3c23d70a75e47c63cd2a59f5
-Size (bind-9.10.4-P6.tar.gz) = 9317598 bytes
+SHA1 (bind-9.10.4-P8.tar.gz) = 33a4c37bb85f632e7002bc157e9d357e389466da
+RMD160 (bind-9.10.4-P8.tar.gz) = dec49998fd31d431d1d7f77545fb7de8fd36237b
+SHA512 (bind-9.10.4-P8.tar.gz) = cdda6e92a27cd1c6624dea92aa9f81b32088ec227dc4c3133f72cfb3ebf1bef29ba8908e6167232bca7cb6a00851646a694102749669cadd9137eebfaa202fd1
+Size (bind-9.10.4-P8.tar.gz) = 9323291 bytes
 SHA1 (patch-bin_dig_dighost.c) = 983e23a30d519982cbe88ed2277fcffc9cad616e
 SHA1 (patch-bin_tests_system_Makefile.in) = aeb2de1b6c6cfdbae7ffbf38aeebf52e94af9e2f
 SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2