pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/pkgsrc-2012Q1]: pkgsrc/net/bind98 Pullup ticket #3798 - requested by ...
details: https://anonhg.NetBSD.org/pkgsrc/rev/feebd18de31d
branches: pkgsrc-2012Q1
changeset: 602122:feebd18de31d
user: tron <tron%pkgsrc.org@localhost>
date: Tue May 22 09:29:13 2012 +0000
description:
Pullup ticket #3798 - requested by taca
net/bind98: security update
Revisions pulled up:
- net/bind98/Makefile 1.10-1.11
- net/bind98/distinfo 1.10-1.11
- net/bind98/files/named9.sh 1.2
- net/bind98/patches/patch-bin_tests_system_Makefile.in 1.1-1.2
- net/bind98/patches/patch-lib_dns_resolver.c deleted
---
Module Name: pkgsrc
Committed By: marino
Date: Sun May 20 13:22:40 UTC 2012
Modified Files:
pkgsrc/net/bind98: distinfo
Added Files:
pkgsrc/net/bind98/patches: patch-bin_tests_system_Makefile.in
Log Message:
net/bind98: Fix undefined reference to 'main'
Bind98 needs the same fix bind99 received on 23 Mar 2012 to fix the
linking of driver.so
---
Module Name: pkgsrc
Committed By: marino
Date: Sun May 20 09:10:44 UTC 2012
Modified Files:
pkgsrc/net/bind98: Makefile
pkgsrc/net/bind98/files: named9.sh
Log Message:
PR#45780 net/bind98: Fix chroot operation
Implemented per PR.
---
Module Name: pkgsrc
Committed By: taca
Date: Tue May 22 03:32:31 UTC 2012
Modified Files:
pkgsrc/net/bind98: Makefile distinfo
pkgsrc/net/bind98/patches: patch-bin_tests_system_Makefile.in
Removed Files:
pkgsrc/net/bind98/patches: patch-lib_dns_resolver.c
Log Message:
Update bind98 to 9.8.3.
pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.
Changes from release announce:
Security Fixes
* Windows binary packages distributed by ISC are now built and linked
against OpenSSL 1.0.0i
New Features
* None
Feature Changes
* BIND now recognizes the TLSA resource record type, created to
support IETF DANE (DNS-based Authentication of Named Entities)
[RT #28989]
Bug Fixes
* The locking strategy around the handling of iterative queries
has been tuned to reduce unnecessary contention in a multi-threaded
environment. (Note that this may not provide a measurable
improvement over previous versions of BIND, but it corrects the
performance impact of change 3309 / RT #27995) [RT #29239]
* Addresses a race condition that can cause named to to crash when
the masters list for a zone is updated via rndc reload/reconfig
[RT #26732]
* named-checkconf now correctly validates dns64 clients acl
definitions. [RT #27631]
* Fixes a race condition in zone.c that can cause named to crash
during the processing of rndc delzone [RT #29028]
* Prevents a named segfault from resolver.c due to procedure
fctx_finddone() not being thread-safe. [RT #27995]
* Improves DNS64 reverse zone performance. [RT #28563]
* Adds wire format lookup method to sdb. [RT #28563]
* Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
an assertion when flushing cache data. [RT #28571]
* Resolves inconsistencies in locating DNSSEC keys where zone names
contain characters that require special mappings [RT #28600]
* A new flag -R has been added to queryperf for running tests
using non-recursive queries. It also now builds correctly on
MacOS version 10.7 (darwin) [RT #28565]
* Named no longer crashes if gssapi is enabled in named.conf but
was not compiled into the binary [RT #28338]
* SDB now handles unexpected errors from back-end database drivers
gracefully instead of exiting on an assert. [RT #28534]
diffstat:
net/bind98/Makefile | 5 +-
net/bind98/distinfo | 10 ++--
net/bind98/files/named9.sh | 10 +++++-
net/bind98/patches/patch-bin_tests_system_Makefile.in | 15 ++++++++
net/bind98/patches/patch-lib_dns_resolver.c | 34 -------------------
5 files changed, 31 insertions(+), 43 deletions(-)
diffs (126 lines):
diff -r 8ff10249a358 -r feebd18de31d net/bind98/Makefile
--- a/net/bind98/Makefile Tue May 22 09:09:52 2012 +0000
+++ b/net/bind98/Makefile Tue May 22 09:29:13 2012 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.8.2.1 2012/05/03 18:24:56 tron Exp $
+# $NetBSD: Makefile,v 1.8.2.2 2012/05/22 09:29:13 tron Exp $
DISTNAME= bind-${BIND_VERSION}
PKGNAME= ${DISTNAME:S/-P/pl/}
-PKGREVISION= 1
CATEGORIES= net
MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
@@ -17,7 +16,7 @@
MAKE_JOBS_SAFE= no
-BIND_VERSION= 9.8.2
+BIND_VERSION= 9.8.3
.include "../../mk/bsd.prefs.mk"
diff -r 8ff10249a358 -r feebd18de31d net/bind98/distinfo
--- a/net/bind98/distinfo Tue May 22 09:09:52 2012 +0000
+++ b/net/bind98/distinfo Tue May 22 09:29:13 2012 +0000
@@ -1,12 +1,12 @@
-$NetBSD: distinfo,v 1.8.2.1 2012/05/03 18:24:56 tron Exp $
+$NetBSD: distinfo,v 1.8.2.2 2012/05/22 09:29:13 tron Exp $
-SHA1 (bind-9.8.2.tar.gz) = 09f0b18bde0438186d6639f08c17db3b98e81c17
-RMD160 (bind-9.8.2.tar.gz) = 59f6502cc4dd315da4c31adc183f0eb88e6856b4
-Size (bind-9.8.2.tar.gz) = 7054574 bytes
+SHA1 (bind-9.8.3.tar.gz) = 6efdf42764c2d787a0395d077da0f7091bb371a5
+RMD160 (bind-9.8.3.tar.gz) = b5c704f8ea2b5e34ca7a7b6e73618e8be5521ce2
+Size (bind-9.8.3.tar.gz) = 6984538 bytes
SHA1 (patch-bin_dig_dighost.c) = 3f37033cc64e1153268ab437fab533d2920bb18c
+SHA1 (patch-bin_tests_system_Makefile.in) = 650ac962464e23f6c4278e7025f55f282789f9c9
SHA1 (patch-config.threads.in) = 045531d8378a88c654ab98ba6ea65786c8cf4e2b
SHA1 (patch-configure) = 08f878fd3a5d3d17e0cf55d01344ddc84991967f
SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
-SHA1 (patch-lib_dns_resolver.c) = e6abfc6bb117bd4e12a0d5b4641423b1f0408178
SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d
SHA1 (patch-lib_lwres_getnameinfo.c) = c26dcff4637b7beb16b66c32b304d0f187390eed
diff -r 8ff10249a358 -r feebd18de31d net/bind98/files/named9.sh
--- a/net/bind98/files/named9.sh Tue May 22 09:09:52 2012 +0000
+++ b/net/bind98/files/named9.sh Tue May 22 09:29:13 2012 +0000
@@ -1,6 +1,6 @@
#!@RCD_SCRIPTS_SHELL@
#
-# $NetBSD: named9.sh,v 1.1.1.1 2011/03/04 03:52:15 taca Exp $
+# $NetBSD: named9.sh,v 1.1.1.1.10.1 2012/05/22 09:29:13 tron Exp $
#
# PROVIDE: named
@@ -49,6 +49,14 @@
@CP@ -p /etc/localtime "${named_chrootdir}/etc/localtime"
fi
+ if [ -f /usr/lib/engines/libgost.so ]; then
+ if [ ! -d ${named_chrootdir}/usr/lib/engines ]; then
+ @MKDIR@ ${named_chrootdir}/usr/lib/engines
+ fi
+ @CMP@ -s /usr/lib/engines/libgost.so "${named_chrootdir}/usr/lib/engines/libgost.so" || \
+ @CP@ -p /usr/lib/engines/libgost.so "${named_chrootdir}/usr/lib/engines/libgost.so"
+ fi
+
if [ ! -d ${named_chrootdir}@VARBASE@/run/named ]; then
@MKDIR@ ${named_chrootdir}@VARBASE@/run/named
@CHOWN@ @BIND_USER@ ${named_chrootdir}@VARBASE@/run/named
diff -r 8ff10249a358 -r feebd18de31d net/bind98/patches/patch-bin_tests_system_Makefile.in
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/net/bind98/patches/patch-bin_tests_system_Makefile.in Tue May 22 09:29:13 2012 +0000
@@ -0,0 +1,15 @@
+$NetBSD: patch-bin_tests_system_Makefile.in,v 1.2.2.2 2012/05/22 09:29:13 tron Exp $
+
+Build fix for DragonFly while linking of driver.so.
+
+--- bin/tests/system/Makefile.in.orig 2012-03-22 19:20:00.000000000 +0000
++++ bin/tests/system/Makefile.in
+@@ -21,7 +21,7 @@ top_srcdir = @top_srcdir@
+
+ @BIND9_MAKE_INCLUDES@
+
+-SUBDIRS = dlzexternal filter-aaaa lwresd rpz tkey tsiggss
++SUBDIRS = filter-aaaa lwresd rpz tkey tsiggss
+ TARGETS =
+
+ @BIND9_MAKE_RULES@
diff -r 8ff10249a358 -r feebd18de31d net/bind98/patches/patch-lib_dns_resolver.c
--- a/net/bind98/patches/patch-lib_dns_resolver.c Tue May 22 09:09:52 2012 +0000
+++ /dev/null Thu Jan 01 00:00:00 1970 +0000
@@ -1,34 +0,0 @@
-$NetBSD: patch-lib_dns_resolver.c,v 1.1.2.2 2012/05/03 18:24:56 tron Exp $
-
-Prevent segmentation fault in resolver.c: https://kb.isc.org/article/AA-00664
-
---- lib/dns/resolver.c.orig 2012-03-22 19:20:00.000000000 +0000
-+++ lib/dns/resolver.c
-@@ -2166,7 +2166,6 @@ fctx_finddone(isc_task_t *task, isc_even
- isc_boolean_t want_try = ISC_FALSE;
- isc_boolean_t want_done = ISC_FALSE;
- isc_boolean_t bucket_empty = ISC_FALSE;
-- isc_boolean_t destroy = ISC_FALSE;
- unsigned int bucketnum;
-
- find = event->ev_sender;
-@@ -2205,17 +2204,12 @@ fctx_finddone(isc_task_t *task, isc_even
- }
- } else if (SHUTTINGDOWN(fctx) && fctx->pending == 0 &&
- fctx->nqueries == 0 && ISC_LIST_EMPTY(fctx->validators)) {
-- /*
-- * Note that we had to wait until we had the lock before
-- * looking at fctx->references.
-- */
-+
- if (fctx->references == 0)
-- destroy = ISC_TRUE;
-+ bucket_empty = fctx_destroy(fctx);
- }
- UNLOCK(&res->buckets[bucketnum].lock);
-
-- if (destroy)
-- bucket_empty = fctx_destroy(fctx);
- isc_event_free(&event);
- dns_adb_destroyfind(&find);
-
Home |
Main Index |
Thread Index |
Old Index