[pkgsrc/trunk]: pkgsrc/net/bind99 Update bind99 to 9.9.9pl8 (BIND 9.9.9-P8).

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b6bccf1181a3
branches:  trunk
changeset: 360988:b6bccf1181a3
user:      taca <taca%pkgsrc.org@localhost>
date:      Thu Apr 13 01:53:35 2017 +0000

description:
Update bind99 to 9.9.9pl8 (BIND 9.9.9-P8).

Quote from release announce:

   BIND 9.9.9-P8 addresses the security issues described in CVE-2017-3136,
   CVE-2017-3137, and CVE-2017-3138, and updates the built-in trusted keys
   for the root zone.

Quote from CHANGELOG:

        --- 9.9.9-P8 released ---

4582.   [security]      'rndc ""' could trigger a assertion failure in named.
                        (CVE-2017-3138) [RT #44924]

4580.   [bug]           4578 introduced a regression when handling CNAME to
                        referral below the current domain. [RT #44850]

        --- 9.9.9-P7 released ---

4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

4575.   [security]      DNS64 with "break-dnssec yes;" can result in an
                        assertion failure. (CVE-2017-3136) [RT #44653]

4564.   [maint]         Update the built in managed keys to include the
                        upcoming root KSK. [RT #44579]

diffstat:

 net/bind99/Makefile |   5 ++---
 net/bind99/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (40 lines):

diff -r 90089a8e8eb1 -r b6bccf1181a3 net/bind99/Makefile
--- a/net/bind99/Makefile       Thu Apr 13 01:52:42 2017 +0000
+++ b/net/bind99/Makefile       Thu Apr 13 01:53:35 2017 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.65 2017/02/24 15:46:14 fhajny Exp $
+# $NetBSD: Makefile,v 1.66 2017/04/13 01:53:35 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
@@ -14,7 +13,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.9.9-P6
+BIND_VERSION=  9.9.9-P8
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r 90089a8e8eb1 -r b6bccf1181a3 net/bind99/distinfo
--- a/net/bind99/distinfo       Thu Apr 13 01:52:42 2017 +0000
+++ b/net/bind99/distinfo       Thu Apr 13 01:53:35 2017 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.43 2017/02/09 00:50:15 taca Exp $
+$NetBSD: distinfo,v 1.44 2017/04/13 01:53:35 taca Exp $
 
-SHA1 (bind-9.9.9-P6.tar.gz) = 620ffa8c7b2e6b650c4c76fe29dba75bc9281037
-RMD160 (bind-9.9.9-P6.tar.gz) = f7a96e6407769b6577e457a4f03a137ffb050d44
-SHA512 (bind-9.9.9-P6.tar.gz) = f8bddaf278af8b255714249ee8eee13b5fca7560ac77243444010139af1575676ebfdb37c726755ece69c16eb60a5272597b1778156cb9a1eb72375cbb3a2d3c
-Size (bind-9.9.9-P6.tar.gz) = 8778790 bytes
+SHA1 (bind-9.9.9-P8.tar.gz) = da2e566ddc16d4a4cfcc6ae4580bec62de645ae6
+RMD160 (bind-9.9.9-P8.tar.gz) = f8f4e121a116ee89a4f14a3d58bdad8312c19e04
+SHA512 (bind-9.9.9-P8.tar.gz) = 3dc93ed01d23fb308227e98f8437ce4e7a4b1b7b0a1b3d8c037bc6f1394511300594a90f8f26cd2ddf1cb24f585a53c5dfaa262dbb0e008c135ed16649e65b62
+Size (bind-9.9.9-P8.tar.gz) = 8790853 bytes
 SHA1 (patch-bin_dig_dighost.c) = a4bc9558c5dbedcc6bb0f87ea309358ca098d42a
 SHA1 (patch-bin_tests_system_Makefile.in) = 19d90050acfbe3da838dbd4c1436b5581039b71f
 SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2