Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/external/bsd/bind/dist Import bind 9.10.3-P3
details: https://anonhg.NetBSD.org/src/rev/ce1a98d2c666
branches: trunk
changeset: 813173:ce1a98d2c666
user: christos <christos%NetBSD.org@localhost>
date: Wed Jan 20 01:52:08 2016 +0000
description:
Import bind 9.10.3-P3
diffstat:
external/bsd/bind/dist/bin/named/bind9.xsl | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html | 42 ++++++++++++------------
external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html | 2 +-
external/bsd/bind/dist/doc/arm/notes.html | 36 ++++++++++++++++----
external/bsd/bind/dist/doc/arm/notes.pdf | Bin
external/bsd/bind/dist/doc/arm/notes.xml | 38 +++++++++++++++++----
12 files changed, 88 insertions(+), 44 deletions(-)
diffs (truncated from 388 to 300 lines):
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/bin/named/bind9.xsl
--- a/external/bsd/bind/dist/bin/named/bind9.xsl Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/bin/named/bind9.xsl Wed Jan 20 01:52:08 2016 +0000
@@ -20,7 +20,7 @@
<!-- %Id: bind9.xsl,v 1.21 2009/01/27 23:47:54 tbox Exp % -->
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"; xmlns="http://www.w3.org/1999/xhtml"; version="1.0">
<xsl:output method="html" indent="yes" version="4.0"/>
- <xsl:template match="statistics[@version="3.5"]">
+ <xsl:template match="statistics[@version="3.6"]">
<html>
<head>
<xsl:if test="system-property('xsl:vendor')!='Transformiix'">
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html Wed Jan 20 01:52:08 2016 +0000
@@ -556,6 +556,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html Wed Jan 20 01:52:08 2016 +0000
@@ -154,6 +154,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html Wed Jan 20 01:52:08 2016 +0000
@@ -671,6 +671,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html Wed Jan 20 01:52:08 2016 +0000
@@ -139,6 +139,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html Wed Jan 20 01:52:08 2016 +0000
@@ -163,6 +163,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html Wed Jan 20 01:52:08 2016 +0000
@@ -514,6 +514,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html Wed Jan 20 01:52:08 2016 +0000
@@ -47,13 +47,13 @@
<dl>
<dt><span class="sect1"><a href="Bv9ARM.ch12.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2614316">Prerequisite</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2614326">Compilation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613600">Installation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613630">Known Defects/Restrictions</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613707">The dns.conf File</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613734">Sample Applications</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2614638">Library References</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2614332">Prerequisite</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613591">Compilation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613616">Installation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613646">Known Defects/Restrictions</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613723">The dns.conf File</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613750">Sample Applications</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2614723">Library References</a></span></dt>
</dl></dd>
</dl>
</div>
@@ -89,7 +89,7 @@
</ul></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2614316"></a>Prerequisite</h3></div></div></div>
+<a name="id2614332"></a>Prerequisite</h3></div></div></div>
<p>GNU make is required to build the export libraries (other
part of BIND 9 can still be built with other types of make). In
the reminder of this document, "make" means GNU make. Note that
@@ -98,7 +98,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2614326"></a>Compilation</h3></div></div></div>
+<a name="id2613591"></a>Compilation</h3></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>./configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong>
$ <strong class="userinput"><code>make</code></strong>
@@ -113,7 +113,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2613600"></a>Installation</h3></div></div></div>
+<a name="id2613616"></a>Installation</h3></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>cd lib/export</code></strong>
$ <strong class="userinput"><code>make install</code></strong>
@@ -135,7 +135,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2613630"></a>Known Defects/Restrictions</h3></div></div></div>
+<a name="id2613646"></a>Known Defects/Restrictions</h3></div></div></div>
<div class="itemizedlist"><ul type="disc">
<li><p>Currently, win32 is not supported for the export
library. (Normal BIND 9 application can be built as
@@ -175,7 +175,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2613707"></a>The dns.conf File</h3></div></div></div>
+<a name="id2613723"></a>The dns.conf File</h3></div></div></div>
<p>The IRS library supports an "advanced" configuration file
related to the DNS library for configuration parameters that
would be beyond the capability of the
@@ -193,14 +193,14 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2613734"></a>Sample Applications</h3></div></div></div>
+<a name="id2613750"></a>Sample Applications</h3></div></div></div>
<p>Some sample application programs using this API are
provided for reference. The following is a brief description of
these applications.
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2613742"></a>sample: a simple stub resolver utility</h4></div></div></div>
+<a name="id2613758"></a>sample: a simple stub resolver utility</h4></div></div></div>
<p>
It sends a query of a given name (of a given optional RR type) to a
specified recursive server, and prints the result as a list of
@@ -264,7 +264,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2613901"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
+<a name="id2613917"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
<p>
Similar to "sample", but accepts a list
of (query) domain names as a separate file and resolves the names
@@ -305,7 +305,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2613955"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
+<a name="id2613971"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
<p>
It sends a query to a specified server, and
prints the response with minimal processing. It doesn't act as a
@@ -346,7 +346,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2614019"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
+<a name="id2614035"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
<p>
This is a test program
to check getaddrinfo() and getnameinfo() behavior. It takes a
@@ -363,7 +363,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2614034"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
+<a name="id2614050"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
<p>
It accepts a single update command as a
command-line argument, sends an update request message to the
@@ -458,7 +458,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2614574"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
+<a name="id2614659"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
<p>
It checks a set
of domains to see the name servers of the domains behave
@@ -515,7 +515,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2614638"></a>Library References</h3></div></div></div>
+<a name="id2614723"></a>Library References</h3></div></div></div>
<p>As of this writing, there is no formal "manual" of the
libraries, except this document, header files (some of them
provide pretty detailed explanations), and sample application
@@ -540,6 +540,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html Wed Jan 20 01:52:08 2016 +0000
@@ -149,6 +149,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.3-P2</p>
+<p style="text-align: center;">BIND 9.10.3-P3</p>
</body>
</html>
diff -r a179c8e7e2f1 -r ce1a98d2c666 external/bsd/bind/dist/doc/arm/notes.html
--- a/external/bsd/bind/dist/doc/arm/notes.html Tue Jan 19 19:03:27 2016 +0000
+++ b/external/bsd/bind/dist/doc/arm/notes.html Wed Jan 20 01:52:08 2016 +0000
@@ -21,7 +21,7 @@
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article" lang="en"><div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2542126"></a>Release Notes for BIND Version 9.10.3-P2</h2></div></div></div>
+<a name="id2542126"></a>Release Notes for BIND Version 9.10.3-P3</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
@@ -29,6 +29,12 @@
This document summarizes changes since BIND 9.10.3:
</p>
<p>
+ BIND 9.10.3-P3 addresses the security issues described in
+ CVE-2015-8704 and CVE-2015-8705. It also fixes a serious
+ regression in authoritative server selection that was
+ introduced in BIND 9.10.3.
+ </p>
+<p>
BIND 9.10.3-P2 addresses the security issues described in
CVE-2015-3193 (OpenSSL), CVE-2015-8000 and CVE-2015-8461.
</p>
@@ -52,13 +58,20 @@
<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
<div class="itemizedlist"><ul type="disc">
<li><p>
- Named is potentially vulnerable to the OpenSSL vulnerabilty
- described in CVE-2015-3193.
+ Specific APL data could trigger an INSIST. This flaw
+ was discovered by Brian Mitchell and is disclosed in
+ CVE-2015-8704. [RT #41396]
</p></li>
<li><p>
- Incorrect reference counting could result in an INSIST
- failure if a socket error occurred while performing a
- lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945]
+ Certain errors that could be encountered when printing out
+ or logging an OPT record containing a CLIENT-SUBNET option
+ could be mishandled, resulting in an assertion failure.
+ This flaw was discovered by Brian Mitchell and is disclosed
+ in CVE-2015-8705. [RT #41397]
+ </p></li>
+<li><p>
+ Named is potentially vulnerable to the OpenSSL vulnerabilty
+ described in CVE-2015-3193.
</p></li>
<li><p>
Insufficient testing when parsing a message allowed
@@ -67,6 +80,11 @@
were subsequently cached. This flaw is disclosed
in CVE-2015-8000. [RT #40987]
</p></li>
+<li><p>
+ Incorrect reference counting could result in an INSIST
+ failure if a socket error occurred while performing a
+ lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945]
+ </p></li>
</ul></div>
</div>
<div class="sect2" lang="en">
Home |
Main Index |
Thread Index |
Old Index