CVS commit: [pkgsrc-2017Q1] pkgsrc/net/bind99

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Thu Apr 13 11:54:13 UTC 2017

Modified Files:
        pkgsrc/net/bind99 [pkgsrc-2017Q1]: Makefile distinfo

Log Message:
Pullup ticket #5273 - requested by taca
net/bind99: security fix

Revisions pulled up:
- net/bind99/Makefile                                           1.66
- net/bind99/distinfo                                           1.44

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Apr 13 01:53:35 UTC 2017

   Modified Files:
        pkgsrc/net/bind99: Makefile distinfo

   Log Message:
   Update bind99 to 9.9.9pl8 (BIND 9.9.9-P8).

   Quote from release announce:

      BIND 9.9.9-P8 addresses the security issues described in CVE-2017-3136,
      CVE-2017-3137, and CVE-2017-3138, and updates the built-in trusted keys
      for the root zone.

   Quote from CHANGELOG:

        --- 9.9.9-P8 released ---

   4582.        [security]      'rndc ""' could trigger a assertion failure in named.
                        (CVE-2017-3138) [RT #44924]

   4580.        [bug]           4578 introduced a regression when handling CNAME to
                        referral below the current domain. [RT #44850]

        --- 9.9.9-P7 released ---

   4578.        [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

   4575.        [security]      DNS64 with "break-dnssec yes;" can result in an
                        assertion failure. (CVE-2017-3136) [RT #44653]

   4564.        [maint]         Update the built in managed keys to include the
                        upcoming root KSK. [RT #44579]


To generate a diff of this commit:
cvs rdiff -u -r1.65 -r1.65.2.1 pkgsrc/net/bind99/Makefile
cvs rdiff -u -r1.43 -r1.43.2.1 pkgsrc/net/bind99/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind99/Makefile
diff -u pkgsrc/net/bind99/Makefile:1.65 pkgsrc/net/bind99/Makefile:1.65.2.1
--- pkgsrc/net/bind99/Makefile:1.65     Fri Feb 24 15:46:14 2017
+++ pkgsrc/net/bind99/Makefile  Thu Apr 13 11:54:13 2017
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.65 2017/02/24 15:46:14 fhajny Exp $
+# $NetBSD: Makefile,v 1.65.2.1 2017/04/13 11:54:13 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
@@ -14,7 +13,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.9.9-P6
+BIND_VERSION=  9.9.9-P8
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind99/distinfo
diff -u pkgsrc/net/bind99/distinfo:1.43 pkgsrc/net/bind99/distinfo:1.43.2.1
--- pkgsrc/net/bind99/distinfo:1.43     Thu Feb  9 00:50:15 2017
+++ pkgsrc/net/bind99/distinfo  Thu Apr 13 11:54:13 2017
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.43 2017/02/09 00:50:15 taca Exp $
+$NetBSD: distinfo,v 1.43.2.1 2017/04/13 11:54:13 bsiegert Exp $
 
-SHA1 (bind-9.9.9-P6.tar.gz) = 620ffa8c7b2e6b650c4c76fe29dba75bc9281037
-RMD160 (bind-9.9.9-P6.tar.gz) = f7a96e6407769b6577e457a4f03a137ffb050d44
-SHA512 (bind-9.9.9-P6.tar.gz) = f8bddaf278af8b255714249ee8eee13b5fca7560ac77243444010139af1575676ebfdb37c726755ece69c16eb60a5272597b1778156cb9a1eb72375cbb3a2d3c
-Size (bind-9.9.9-P6.tar.gz) = 8778790 bytes
+SHA1 (bind-9.9.9-P8.tar.gz) = da2e566ddc16d4a4cfcc6ae4580bec62de645ae6
+RMD160 (bind-9.9.9-P8.tar.gz) = f8f4e121a116ee89a4f14a3d58bdad8312c19e04
+SHA512 (bind-9.9.9-P8.tar.gz) = 3dc93ed01d23fb308227e98f8437ce4e7a4b1b7b0a1b3d8c037bc6f1394511300594a90f8f26cd2ddf1cb24f585a53c5dfaa262dbb0e008c135ed16649e65b62
+Size (bind-9.9.9-P8.tar.gz) = 8790853 bytes
 SHA1 (patch-bin_dig_dighost.c) = a4bc9558c5dbedcc6bb0f87ea309358ca098d42a
 SHA1 (patch-bin_tests_system_Makefile.in) = 19d90050acfbe3da838dbd4c1436b5581039b71f
 SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2