svn commit: r459223 - in branches/2018Q1/dns: bind910 bind910/files bind911 bind911/files bind912 bind912/files bind99 bind99/files
Mathieu Arnold
mat at FreeBSD.org
Wed Jan 17 08:06:04 UTC 2018
Author: mat
Date: Wed Jan 17 08:06:01 2018
New Revision: 459223
URL: https://svnweb.freebsd.org/changeset/ports/459223
Log:
MFH: r459221
Update BIND9* to 9.9.11-P1, 9.10.6-P1, 9.11.2-P1 and 9.12.0rc3
Security: CVE-2017-3145
Sponsored by: Absolight
Modified:
branches/2018Q1/dns/bind910/Makefile
branches/2018Q1/dns/bind910/distinfo
branches/2018Q1/dns/bind910/files/extrapatch-bind-min-override-ttl
branches/2018Q1/dns/bind911/Makefile
branches/2018Q1/dns/bind911/distinfo
branches/2018Q1/dns/bind911/files/extrapatch-bind-min-override-ttl
branches/2018Q1/dns/bind912/Makefile
branches/2018Q1/dns/bind912/distinfo
branches/2018Q1/dns/bind912/files/extrapatch-bind-min-override-ttl
branches/2018Q1/dns/bind99/Makefile
branches/2018Q1/dns/bind99/distinfo
branches/2018Q1/dns/bind99/files/extrapatch-bind-min-override-ttl
Directory Properties:
branches/2018Q1/ (props changed)
Modified: branches/2018Q1/dns/bind910/Makefile
==============================================================================
--- branches/2018Q1/dns/bind910/Makefile Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind910/Makefile Wed Jan 17 08:06:01 2018 (r459223)
@@ -3,7 +3,7 @@
PORTNAME= bind
PORTVERSION= ${ISCVERSION:S/-P/P/:S/b/.b/:S/a/.a/:S/rc/.rc/}
-PORTREVISION= 5
+PORTREVISION= 0
CATEGORIES= dns net ipv6
MASTER_SITES= ISC/bind9/${ISCVERSION}
PKGNAMESUFFIX= 910
@@ -19,7 +19,7 @@ DEPRECATED= Going out of support, please migrate to dn
EXPIRATION_DATE= 2018-06-30
# ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION= 9.10.6
+ISCVERSION= 9.10.6-P1
USES= cpe libedit
Modified: branches/2018Q1/dns/bind910/distinfo
==============================================================================
--- branches/2018Q1/dns/bind910/distinfo Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind910/distinfo Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1501282039
-SHA256 (bind-9.10.6.tar.gz) = 17bbcd2bd7b1d32f5ba4b30d5dbe8a39bce200079048073d1e0d050fdf47e69d
-SIZE (bind-9.10.6.tar.gz) = 9449394
+TIMESTAMP = 1516059365
+SHA256 (bind-9.10.6-P1.tar.gz) = 9b8b4f6ecfc82a491774bf713d8a888b954c427526035eb715544438f36a2334
+SIZE (bind-9.10.6-P1.tar.gz) = 9452495
Modified: branches/2018Q1/dns/bind910/files/extrapatch-bind-min-override-ttl
==============================================================================
--- branches/2018Q1/dns/bind910/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind910/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,4 +1,4 @@
---- bin/named/config.c.orig 2017-04-14 03:54:11 UTC
+--- bin/named/config.c.orig 2018-01-04 05:35:08 UTC
+++ bin/named/config.c
@@ -154,6 +154,8 @@ options {\n\
min-roots 2;\n\
@@ -9,7 +9,7 @@
max-cache-ttl 604800; /* 1 week */\n\
transfer-format many-answers;\n\
max-cache-size 0;\n\
---- bin/named/server.c.orig 2017-04-14 03:54:11 UTC
+--- bin/named/server.c.orig 2018-01-04 05:35:08 UTC
+++ bin/named/server.c
@@ -2890,6 +2890,16 @@ configure_view(dns_view_t *view, dns_vie
}
@@ -28,7 +28,7 @@
result = ns_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asuint32(obj);
---- lib/dns/include/dns/view.h.orig 2017-04-14 03:54:11 UTC
+--- lib/dns/include/dns/view.h.orig 2018-01-04 05:35:08 UTC
+++ lib/dns/include/dns/view.h
@@ -151,6 +151,8 @@ struct dns_view {
isc_boolean_t requestnsid;
@@ -39,9 +39,9 @@
dns_ttl_t maxncachettl;
dns_ttl_t prefetch_trigger;
dns_ttl_t prefetch_eligible;
---- lib/dns/resolver.c.orig 2017-04-14 03:54:11 UTC
+--- lib/dns/resolver.c.orig 2018-01-04 05:35:08 UTC
+++ lib/dns/resolver.c
-@@ -5378,6 +5378,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
+@@ -5387,6 +5387,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
}
/*
@@ -60,7 +60,7 @@
* Enforce the configure maximum cache TTL.
*/
if (rdataset->ttl > res->view->maxcachettl)
---- lib/isccfg/namedconf.c.orig 2017-04-14 03:54:11 UTC
+--- lib/isccfg/namedconf.c.orig 2018-01-04 05:35:08 UTC
+++ lib/isccfg/namedconf.c
@@ -1591,6 +1591,8 @@ view_clauses[] = {
#endif
Modified: branches/2018Q1/dns/bind911/Makefile
==============================================================================
--- branches/2018Q1/dns/bind911/Makefile Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind911/Makefile Wed Jan 17 08:06:01 2018 (r459223)
@@ -5,10 +5,10 @@ PORTNAME= bind
PORTVERSION= ${ISCVERSION:S/-P/P/:S/b/.b/:S/a/.a/:S/rc/.rc/}
.if defined(BIND_TOOLS_SLAVE)
# dns/bind-tools here
-PORTREVISION= 2
+PORTREVISION= 0
.else
# dns/bind911 here
-PORTREVISION= 5
+PORTREVISION= 0
.endif
CATEGORIES= dns net ipv6
MASTER_SITES= ISC/bind9/${ISCVERSION}
@@ -30,7 +30,7 @@ LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/COPYRIGHT
# ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION= 9.11.2
+ISCVERSION= 9.11.2-P1
USES= cpe libedit
Modified: branches/2018Q1/dns/bind911/distinfo
==============================================================================
--- branches/2018Q1/dns/bind911/distinfo Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind911/distinfo Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1501282074
-SHA256 (bind-9.11.2.tar.gz) = 7f46ad8620f7c3b0ac375d7a5211b15677708fda84ce25d7aeb7222fe2e3c77a
-SIZE (bind-9.11.2.tar.gz) = 9782180
+TIMESTAMP = 1516059868
+SHA256 (bind-9.11.2-P1.tar.gz) = cec31548832fca3f85d95178d4019b7d702039e8595d4c93914feba337df1212
+SIZE (bind-9.11.2-P1.tar.gz) = 9783329
Modified: branches/2018Q1/dns/bind911/files/extrapatch-bind-min-override-ttl
==============================================================================
--- branches/2018Q1/dns/bind911/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind911/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,4 +1,4 @@
---- bin/named/config.c.orig 2017-07-24 05:36:50 UTC
+--- bin/named/config.c.orig 2018-01-04 05:28:11 UTC
+++ bin/named/config.c
@@ -154,6 +154,8 @@ options {\n\
lame-ttl 600;\n\
@@ -9,7 +9,7 @@
max-cache-ttl 604800; /* 1 week */\n\
transfer-format many-answers;\n\
max-cache-size 90%;\n\
---- bin/named/server.c.orig 2017-07-24 05:36:50 UTC
+--- bin/named/server.c.orig 2018-01-04 05:28:11 UTC
+++ bin/named/server.c
@@ -3713,6 +3713,16 @@ configure_view(dns_view_t *view, dns_vie
}
@@ -28,7 +28,7 @@
result = ns_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asuint32(obj);
---- lib/dns/include/dns/view.h.orig 2017-07-24 05:36:50 UTC
+--- lib/dns/include/dns/view.h.orig 2018-01-04 05:28:11 UTC
+++ lib/dns/include/dns/view.h
@@ -146,6 +146,8 @@ struct dns_view {
isc_boolean_t requestnsid;
@@ -39,9 +39,9 @@
dns_ttl_t maxncachettl;
isc_uint32_t nta_lifetime;
isc_uint32_t nta_recheck;
---- lib/dns/resolver.c.orig 2017-07-24 05:36:50 UTC
+--- lib/dns/resolver.c.orig 2018-01-04 05:28:11 UTC
+++ lib/dns/resolver.c
-@@ -5439,6 +5439,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
+@@ -5448,6 +5448,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
}
/*
@@ -60,7 +60,7 @@
* Enforce the configure maximum cache TTL.
*/
if (rdataset->ttl > res->view->maxcachettl)
---- lib/isccfg/namedconf.c.orig 2017-07-24 05:36:50 UTC
+--- lib/isccfg/namedconf.c.orig 2018-01-04 05:28:11 UTC
+++ lib/isccfg/namedconf.c
@@ -1765,6 +1765,8 @@ view_clauses[] = {
{ "nosit-udp-size", &cfg_type_uint32, CFG_CLAUSEFLAG_OBSOLETE },
Modified: branches/2018Q1/dns/bind912/Makefile
==============================================================================
--- branches/2018Q1/dns/bind912/Makefile Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind912/Makefile Wed Jan 17 08:06:01 2018 (r459223)
@@ -8,7 +8,7 @@ PORTVERSION= ${ISCVERSION:S/-P/P/:S/b/.b/:S/a/.a/:S/rc
PORTREVISION= 0
.else
# dns/bind912 here
-PORTREVISION= 1
+PORTREVISION= 0
.endif
CATEGORIES= dns net ipv6
MASTER_SITES= ISC/bind9/${ISCVERSION}
@@ -30,7 +30,7 @@ LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/COPYRIGHT
# ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION= 9.12.0rc1
+ISCVERSION= 9.12.0rc3
USES= cpe libedit
Modified: branches/2018Q1/dns/bind912/distinfo
==============================================================================
--- branches/2018Q1/dns/bind912/distinfo Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind912/distinfo Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1513610500
-SHA256 (bind-9.12.0rc1.tar.gz) = 523cd296138baaab9e301173873050ebfee833aac5a495cc34da6ccb7dd820d3
-SIZE (bind-9.12.0rc1.tar.gz) = 9282848
+TIMESTAMP = 1516175610
+SHA256 (bind-9.12.0rc3.tar.gz) = 2e9c35e9292fe0ef0dfbd68a4eba5ee4055e4299c0522e623b1dc31fe085d893
+SIZE (bind-9.12.0rc3.tar.gz) = 9288446
Modified: branches/2018Q1/dns/bind912/files/extrapatch-bind-min-override-ttl
==============================================================================
--- branches/2018Q1/dns/bind912/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind912/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,4 +1,4 @@
---- bin/named/config.c.orig 2017-12-06 17:32:49 UTC
+--- bin/named/config.c.orig 2018-01-12 19:49:09 UTC
+++ bin/named/config.c
@@ -176,12 +176,14 @@ options {\n\
max-recursion-queries 75;\n\
@@ -15,7 +15,7 @@
provide-ixfr true;\n\
query-source address *;\n\
query-source-v6 address *;\n\
---- bin/named/server.c.orig 2017-12-06 17:32:49 UTC
+--- bin/named/server.c.orig 2018-01-12 19:49:09 UTC
+++ bin/named/server.c
@@ -4067,6 +4067,16 @@ configure_view(dns_view_t *view, dns_vie
}
@@ -34,7 +34,7 @@
result = named_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asuint32(obj);
---- lib/dns/include/dns/view.h.orig 2017-12-06 17:32:49 UTC
+--- lib/dns/include/dns/view.h.orig 2018-01-12 19:49:09 UTC
+++ lib/dns/include/dns/view.h
@@ -145,6 +145,8 @@ struct dns_view {
isc_boolean_t requestnsid;
@@ -45,9 +45,9 @@
dns_ttl_t maxncachettl;
isc_uint32_t nta_lifetime;
isc_uint32_t nta_recheck;
---- lib/dns/resolver.c.orig 2017-12-06 17:32:49 UTC
+--- lib/dns/resolver.c.orig 2018-01-12 19:49:09 UTC
+++ lib/dns/resolver.c
-@@ -5748,6 +5748,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
+@@ -5758,6 +5758,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
}
/*
@@ -66,7 +66,7 @@
* Enforce the configure maximum cache TTL.
*/
if (rdataset->ttl > res->view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig 2017-12-06 17:32:49 UTC
+--- lib/isccfg/namedconf.c.orig 2018-01-12 19:49:09 UTC
+++ lib/isccfg/namedconf.c
@@ -1909,6 +1909,8 @@ view_clauses[] = {
{ "max-acache-size", &cfg_type_sizenodefault,
Modified: branches/2018Q1/dns/bind99/Makefile
==============================================================================
--- branches/2018Q1/dns/bind99/Makefile Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind99/Makefile Wed Jan 17 08:06:01 2018 (r459223)
@@ -3,7 +3,7 @@
PORTNAME= bind
PORTVERSION= ${ISCVERSION:S/-P/P/:S/b/.b/:S/a/.a/:S/rc/.rc/}
-PORTREVISION= 4
+PORTREVISION= 0
CATEGORIES= dns net ipv6
MASTER_SITES= ISC/bind9/${ISCVERSION}
PKGNAMESUFFIX= 99
@@ -19,7 +19,7 @@ DEPRECATED= Going out of support, please migrate to dn
EXPIRATION_DATE= 2018-06-30
# ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION= 9.9.11
+ISCVERSION= 9.9.11-P1
USES= cpe libedit
Modified: branches/2018Q1/dns/bind99/distinfo
==============================================================================
--- branches/2018Q1/dns/bind99/distinfo Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind99/distinfo Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1501282004
-SHA256 (bind-9.9.11.tar.gz) = 995395d540b6dd8eb77d737824f47dc10917c864ba4ab450a703b8c6179dc8ba
-SIZE (bind-9.9.11.tar.gz) = 8867109
+TIMESTAMP = 1516059275
+SHA256 (bind-9.9.11-P1.tar.gz) = 40a8dd0eedf44236a77e4009c61daa065447b09461bffddab3b0aefcbf358fa8
+SIZE (bind-9.9.11-P1.tar.gz) = 8868987
Modified: branches/2018Q1/dns/bind99/files/extrapatch-bind-min-override-ttl
==============================================================================
--- branches/2018Q1/dns/bind99/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:04:27 2018 (r459222)
+++ branches/2018Q1/dns/bind99/files/extrapatch-bind-min-override-ttl Wed Jan 17 08:06:01 2018 (r459223)
@@ -1,4 +1,4 @@
---- bin/named/config.c.orig 2017-04-14 03:50:56 UTC
+--- bin/named/config.c.orig 2018-01-04 05:41:15 UTC
+++ bin/named/config.c
@@ -141,6 +141,8 @@ options {\n\
min-roots 2;\n\
@@ -9,7 +9,7 @@
max-cache-ttl 604800; /* 1 week */\n\
transfer-format many-answers;\n\
max-cache-size 0;\n\
---- bin/named/server.c.orig 2017-04-14 03:50:56 UTC
+--- bin/named/server.c.orig 2018-01-04 05:41:15 UTC
+++ bin/named/server.c
@@ -2647,6 +2647,16 @@ configure_view(dns_view_t *view, cfg_obj
}
@@ -28,7 +28,7 @@
result = ns_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asuint32(obj);
---- lib/dns/include/dns/view.h.orig 2017-04-14 03:50:56 UTC
+--- lib/dns/include/dns/view.h.orig 2018-01-04 05:41:15 UTC
+++ lib/dns/include/dns/view.h
@@ -148,6 +148,8 @@ struct dns_view {
isc_boolean_t provideixfr;
@@ -39,9 +39,9 @@
dns_ttl_t maxncachettl;
in_port_t dstport;
dns_aclenv_t aclenv;
---- lib/dns/resolver.c.orig 2017-04-14 03:50:56 UTC
+--- lib/dns/resolver.c.orig 2018-01-04 05:41:15 UTC
+++ lib/dns/resolver.c
-@@ -5117,6 +5117,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
+@@ -5126,6 +5126,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
}
/*
@@ -60,7 +60,7 @@
* Enforce the configure maximum cache TTL.
*/
if (rdataset->ttl > res->view->maxcachettl)
---- lib/isccfg/namedconf.c.orig 2017-04-14 03:50:56 UTC
+--- lib/isccfg/namedconf.c.orig 2018-01-04 05:41:15 UTC
+++ lib/isccfg/namedconf.c
@@ -1475,6 +1475,8 @@ view_clauses[] = {
{ "lame-ttl", &cfg_type_uint32, 0 },
More information about the svn-ports-branches
mailing list