CVS commit: [pkgsrc-2017Q4] pkgsrc/net/isc-dhcp4

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Fri Mar  2 21:24:02 UTC 2018

Modified Files:
        pkgsrc/net/isc-dhcp4 [pkgsrc-2017Q4]: Makefile.common distinfo

Log Message:
Pullup ticket #5712 - requested by taca
net/isc-dhcp4: security update

Revisions pulled up:
- net/isc-dhcp4/Makefile.common                                 1.35
- net/isc-dhcp4/distinfo                                        1.27

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Mar  1 00:53:05 UTC 2018

   Modified Files:
        pkgsrc/net/isc-dhcp4: Makefile.common distinfo

   Log Message:
   net/isc-dhcp4: update to 4.3.6p1 (ISC DHCP 4.3.6-P1)

                        Changes since 4.3.6

   !- Plugged a socket descriptor leak in OMAPI, that can occur when there is
     data pending to be written to an OMAPI connection, when the connection
     is closed by the reader.
     [ISc-Bugs #46767]

   ! Corrected an issue where large sized 'X/x' format options were causing
     option handling logic to overwrite memory when expanding them to human
     readable form. Reported by Felix Wilhelm, Google Security Team.
     [ISC-Bugs #47139]
     CVE: CVE-2018-5732

   ! Option reference count was not correctly decremented in error path
     when parsing buffer for options. Reported by Felix Wilhelm, Google
     Security Team.
     [ISC-Bugs #47140]
     CVE: CVE-2018-5733

   To generate a diff of this commit:
   cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/isc-dhcp4/Makefile.common
   cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/isc-dhcp4/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.34 -r1.34.6.1 pkgsrc/net/isc-dhcp4/Makefile.common
cvs rdiff -u -r1.26 -r1.26.6.1 pkgsrc/net/isc-dhcp4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/isc-dhcp4/Makefile.common
diff -u pkgsrc/net/isc-dhcp4/Makefile.common:1.34 pkgsrc/net/isc-dhcp4/Makefile.common:1.34.6.1
--- pkgsrc/net/isc-dhcp4/Makefile.common:1.34   Sun Aug 13 14:21:03 2017
+++ pkgsrc/net/isc-dhcp4/Makefile.common        Fri Mar  2 21:24:02 2018
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.34 2017/08/13 14:21:03 taca Exp $
+# $NetBSD: Makefile.common,v 1.34.6.1 2018/03/02 21:24:02 spz Exp $
 #
 # used by net/isc-dhcp4/Makefile
 # used by net/isc-dhcpd4/Makefile
@@ -17,7 +17,7 @@ LICENSE=              isc
 
 CONFLICTS+=            isc-dhcp-base-3.*
 
-VERSION=               4.3.6
+VERSION=               4.3.6-P1
 
 .include "../../mk/bsd.prefs.mk"
 
@@ -82,7 +82,7 @@ BIND_CONFIGURE_ARGS+= --with-export-incl
 BIND_CONFIGURE_ARGS+=  --with-export-libdir=${WRKSRC}/bind/lib
 BIND_CONFIGURE_ARGS+=  --with-gssapi=no
 
-BIND_WRKSRC=           ${WRKSRC}/bind/bind-9.9.11
+BIND_WRKSRC=           ${WRKSRC}/bind/bind-9.9.11-P1
 
 post-configure:
        ${RUN}${_ULIMIT_CMD}                                    \

Index: pkgsrc/net/isc-dhcp4/distinfo
diff -u pkgsrc/net/isc-dhcp4/distinfo:1.26 pkgsrc/net/isc-dhcp4/distinfo:1.26.6.1
--- pkgsrc/net/isc-dhcp4/distinfo:1.26  Sun Aug 13 14:21:03 2017
+++ pkgsrc/net/isc-dhcp4/distinfo       Fri Mar  2 21:24:02 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.26 2017/08/13 14:21:03 taca Exp $
+$NetBSD: distinfo,v 1.26.6.1 2018/03/02 21:24:02 spz Exp $
 
-SHA1 (dhcp-4.3.6.tar.gz) = fb0417530e49368fe032cd9722f51c74f93180ac
-RMD160 (dhcp-4.3.6.tar.gz) = b80936239858a373bfb9bf2a362688a04db546ad
-SHA512 (dhcp-4.3.6.tar.gz) = de4962dc2aa174df17a3a1456719a777a42d238c3d6ad1771ccc460fa70c9e9cefcce52c7437f7acde61b9c3a2e84e9d49fd2dc33c7e9243053ceed5b247be03
-Size (dhcp-4.3.6.tar.gz) = 10182593 bytes
+SHA1 (dhcp-4.3.6-P1.tar.gz) = 8a02b202377c030bfd378b0497dc8974510e9b87
+RMD160 (dhcp-4.3.6-P1.tar.gz) = 54dfc9de84006b684684b7689d873c4d129aeb24
+SHA512 (dhcp-4.3.6-P1.tar.gz) = cb04af2fb0fa8c5621e8b3dcb41e81422475218e1569b0eac6e13c876a21279928a3348f799253d7207517720466523b1cc28005c671542e37b1a391342b1e62
+Size (dhcp-4.3.6-P1.tar.gz) = 10189202 bytes
 SHA1 (patch-aa) = da090b3b824f5d437f8d05ce00e2ac4dfc65d6af
 SHA1 (patch-ab) = 0683dd2259e48184713559aa0356ee352aa52c39
 SHA1 (patch-ac) = a7e6808a6e1e93c520eb085f31259f6c142750f4