Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/external/bsd/bind/dist Import bind 9.10.4-P5



details:   https://anonhg.NetBSD.org/src/rev/2e6e5193317b
branches:  trunk
changeset: 350466:2e6e5193317b
user:      spz <spz%NetBSD.org@localhost>
date:      Thu Jan 12 07:28:27 2017 +0000

description:
Import bind 9.10.4-P5

diffstat:

 external/bsd/bind/dist/bin/tests/system/dname/ns2/example.db |    4 +-
 external/bsd/bind/dist/bin/tests/system/dname/tests.sh       |   18 +++++
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html              |    2 +-
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html              |    2 +-
 external/bsd/bind/dist/doc/arm/man.lwresd.html               |    2 +-
 external/bsd/bind/dist/doc/arm/man.named.conf.html           |    2 +-
 external/bsd/bind/dist/doc/arm/notes.html                    |   22 ++++++-
 external/bsd/bind/dist/doc/arm/notes.pdf                     |  Bin 
 external/bsd/bind/dist/doc/arm/notes.xml                     |   35 +++++++++++
 external/bsd/bind/dist/lib/isc/api                           |    2 +-
 16 files changed, 88 insertions(+), 13 deletions(-)

diffs (259 lines):

diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/bin/tests/system/dname/ns2/example.db
--- a/external/bsd/bind/dist/bin/tests/system/dname/ns2/example.db      Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/bin/tests/system/dname/ns2/example.db      Thu Jan 12 07:28:27 2017 +0000
@@ -29,4 +29,6 @@
 short-dname            DNAME   short
 a.longlonglonglonglonglonglonglonglonglonglonglonglong A 10.0.0.2
 long-dname             DNAME   longlonglonglonglonglonglonglonglonglonglonglonglong
-;
+cname                  CNAME   a.cnamedname
+cnamedname             DNAME   target
+a.target               A       10.0.0.3
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/bin/tests/system/dname/tests.sh
--- a/external/bsd/bind/dist/bin/tests/system/dname/tests.sh    Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/bin/tests/system/dname/tests.sh    Thu Jan 12 07:28:27 2017 +0000
@@ -63,6 +63,24 @@
 if [ $ret != 0 ]; then echo "I:failed"; fi
 status=`expr $status + $ret`
 
+echo "I:checking cname to dname from authoritative"
+ret=0
+$DIG cname.example @10.53.0.2 a -p 5300 > dig.out.ns2.cname
+grep "status: NOERROR" dig.out.ns2.cname > /dev/null || ret=1
+if [ $ret != 0 ]; then echo "I:failed"; fi
+status=`expr $status + $ret`
+
+echo "I:checking cname to dname from recursive"
+ret=0
+$DIG cname.example @10.53.0.4 a -p 5300 > dig.out.ns4.cname
+grep "status: NOERROR" dig.out.ns4.cname > /dev/null || ret=1
+grep '^cname.example.' dig.out.ns4.cname > /dev/null || ret=1
+grep '^cnamedname.example.' dig.out.ns4.cname > /dev/null || ret=1
+grep '^a.cnamedname.example.' dig.out.ns4.cname > /dev/null || ret=1
+grep '^a.target.example.' dig.out.ns4.cname > /dev/null || ret=1
+if [ $ret != 0 ]; then echo "I:failed"; fi
+status=`expr $status + $ret`
+
 echo "I:exit status: $status"
 
 exit $status
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html   Thu Jan 12 07:28:27 2017 +0000
@@ -555,6 +555,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html   Thu Jan 12 07:28:27 2017 +0000
@@ -153,6 +153,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html   Thu Jan 12 07:28:27 2017 +0000
@@ -669,6 +669,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html   Thu Jan 12 07:28:27 2017 +0000
@@ -138,6 +138,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html   Thu Jan 12 07:28:27 2017 +0000
@@ -155,6 +155,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html   Thu Jan 12 07:28:27 2017 +0000
@@ -497,6 +497,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html   Thu Jan 12 07:28:27 2017 +0000
@@ -543,6 +543,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html   Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html   Thu Jan 12 07:28:27 2017 +0000
@@ -154,6 +154,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/man.lwresd.html
--- a/external/bsd/bind/dist/doc/arm/man.lwresd.html    Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/man.lwresd.html    Thu Jan 12 07:28:27 2017 +0000
@@ -253,6 +253,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/man.named.conf.html
--- a/external/bsd/bind/dist/doc/arm/man.named.conf.html        Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/man.named.conf.html        Thu Jan 12 07:28:27 2017 +0000
@@ -676,6 +676,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P4</p>
+<p xmlns:db="http://docbook.org/ns/docbook"; style="text-align: center;">BIND 9.10.4-P5</p>
 </body>
 </html>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/notes.html
--- a/external/bsd/bind/dist/doc/arm/notes.html Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/notes.html Thu Jan 12 07:28:27 2017 +0000
@@ -21,7 +21,7 @@
 </head>
 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article"><div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.10.4-P4</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.10.4-P5</h2></div></div></div>
 <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_intro"></a>Introduction</h3></div></div></div>
@@ -29,6 +29,10 @@
       This document summarizes changes since BIND 9.10.4:
     </p>
 <p>
+      BIND 9.10.4-P5 addresses the security issues described in
+      CVE-2016-9131, CVE-2016-9147 and CVE-2016-9444.
+    </p>
+<p>
       BIND 9.10.4-P4 addresses the security issue described in
       CVE-2016-8864.
     </p>
@@ -64,6 +68,22 @@
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
 <li class="listitem"><p>
+         Named could mishandle authority sections that were missing
+         RRSIGs triggering an assertion failure.  This flaw is
+         disclosed in CVE-2016-9444. [RT # 43632]
+       </p></li>
+<li class="listitem"><p>
+         Named mishandled some responses where covering RRSIG
+         records are returned without the requested data
+         resulting in a assertion failure. This flaw is disclosed in
+         CVE-2016-9147. [RT #43548]
+       </p></li>
+<li class="listitem"><p>
+         Named incorrectly tried to cache TKEY records which could
+         trigger a assertion failure when there was a class mismatch.
+         This flaw is disclosed in CVE-2016-9131.  [RT #43522]
+       </p></li>
+<li class="listitem"><p>
          It was possible to trigger assertions when processing
          a response. This flaw is disclosed in CVE-2016-8864. [RT #43465]
        </p></li>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/notes.pdf
Binary file external/bsd/bind/dist/doc/arm/notes.pdf has changed
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/doc/arm/notes.xml
--- a/external/bsd/bind/dist/doc/arm/notes.xml  Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/doc/arm/notes.xml  Thu Jan 12 07:28:27 2017 +0000
@@ -24,6 +24,10 @@
       This document summarizes changes since BIND 9.10.4:
     </para>
     <para>
+      BIND 9.10.4-P5 addresses the security issues described in
+      CVE-2016-9131, CVE-2016-9147, CVE-2016-9444 and CVE-2016-9778.
+    </para>
+    <para>
       BIND 9.10.4-P4 addresses the security issue described in
       CVE-2016-8864.
     </para>
@@ -59,6 +63,37 @@
     <itemizedlist>
       <listitem>
        <para>
+         A coding error in the <option>nxdomain-redirect</option>
+         feature could lead to an assertion failure if the redirection
+         namespace was served from a local authoritative data source
+         such as a local zone or a DLZ instead of via recursive
+         lookup. This flaw is disclosed in CVE-2016-9778. [RT #43837]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         Named could mishandle authority sections that were missing
+         RRSIGs triggering an assertion failure.  This flaw is
+         disclosed in CVE-2016-9444. [RT # 43632]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         Named mishandled some responses where covering RRSIG
+         records are returned without the requested data
+         resulting in a assertion failure. This flaw is disclosed in
+         CVE-2016-9147. [RT #43548]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         Named incorrectly tried to cache TKEY records which could
+         trigger a assertion failure when there was a class mismatch.
+         This flaw is disclosed in CVE-2016-9131.  [RT #43522]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
          It was possible to trigger assertions when processing
          a response. This flaw is disclosed in CVE-2016-8864. [RT #43465]
        </para>
diff -r b5bf6b49c6ca -r 2e6e5193317b external/bsd/bind/dist/lib/isc/api
--- a/external/bsd/bind/dist/lib/isc/api        Thu Jan 12 05:41:25 2017 +0000
+++ b/external/bsd/bind/dist/lib/isc/api        Thu Jan 12 07:28:27 2017 +0000
@@ -6,5 +6,5 @@
 # 9.9-sub: 130-139
 # 9.10: 140-149, 160-169
 LIBINTERFACE = 161
-LIBREVISION = 1
+LIBREVISION = 2
 LIBAGE = 1



Home | Main Index | Thread Index | Old Index