svn commit: r248784 - vendor/bind9/dist

Erwin Lansing erwin at FreeBSD.org
Wed Mar 27 07:15:03 UTC 2013


Author: erwin
Date: Wed Mar 27 07:15:01 2013
New Revision: 248784
URL: http://svnweb.freebsd.org/changeset/base/248784

Log:
  Vendor import of Bind 9.8.4-P2
  
  Approved by:	delphij (mentor)
  Sponsored by:	DK Hostmaster A/S

Modified:
  vendor/bind9/dist/CHANGES
  vendor/bind9/dist/config.h.in
  vendor/bind9/dist/configure.in
  vendor/bind9/dist/version

Modified: vendor/bind9/dist/CHANGES
==============================================================================
--- vendor/bind9/dist/CHANGES	Wed Mar 27 07:11:29 2013	(r248783)
+++ vendor/bind9/dist/CHANGES	Wed Mar 27 07:15:01 2013	(r248784)
@@ -1,3 +1,10 @@
+	--- 9.8.4-P2 released ---
+
+3516.	[security]	Removed the check for regex.h in configure in order
+			to disable regex syntax checking, as it exposes
+			BIND to a critical flaw in libregex on some
+			platforms. [RT #32688]
+
 	--- 9.8.4-P1 released ---
 
 3407.	[security]	Named could die on specific queries with dns64 enabled.

Modified: vendor/bind9/dist/config.h.in
==============================================================================
--- vendor/bind9/dist/config.h.in	Wed Mar 27 07:11:29 2013	(r248783)
+++ vendor/bind9/dist/config.h.in	Wed Mar 27 07:15:01 2013	(r248784)
@@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int
 /* Define if your OpenSSL version supports GOST. */
 #undef HAVE_OPENSSL_GOST
 
-/* Define to 1 if you have the <regex.h> header file. */
-#undef HAVE_REGEX_H
-
 /* Define to 1 if you have the `setegid' function. */
 #undef HAVE_SETEGID
 

Modified: vendor/bind9/dist/configure.in
==============================================================================
--- vendor/bind9/dist/configure.in	Wed Mar 27 07:11:29 2013	(r248783)
+++ vendor/bind9/dist/configure.in	Wed Mar 27 07:15:01 2013	(r248784)
@@ -298,7 +298,7 @@ esac
 
 AC_HEADER_STDC
 
-AC_CHECK_HEADERS(fcntl.h regex.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,,
+AC_CHECK_HEADERS(fcntl.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,,
 [$ac_includes_default
 #ifdef HAVE_SYS_PARAM_H
 # include <sys/param.h>

Modified: vendor/bind9/dist/version
==============================================================================
--- vendor/bind9/dist/version	Wed Mar 27 07:11:29 2013	(r248783)
+++ vendor/bind9/dist/version	Wed Mar 27 07:15:01 2013	(r248784)
@@ -7,4 +7,4 @@ MAJORVER=9
 MINORVER=8
 PATCHVER=4
 RELEASETYPE=-P
-RELEASEVER=1
+RELEASEVER=2


More information about the svn-src-all mailing list