CVS commit: [pkgsrc-2019Q3] pkgsrc/net/bind914

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Fri Oct 18 14:26:06 UTC 2019

Modified Files:
        pkgsrc/net/bind914 [pkgsrc-2019Q3]: Makefile distinfo

Log Message:
Pullup ticket #6070 - requested by maya
net/bind914: security fix

Revisions pulled up:
- net/bind914/Makefile                                          1.11
- net/bind914/distinfo                                          1.9

---
   Module Name: pkgsrc
   Committed By:        maya
   Date:                Wed Oct 16 20:51:59 UTC 2019

   Modified Files:
        pkgsrc/net/bind914: Makefile distinfo

   Log Message:
   bind914: update to 9.14.7. security fix.

        --- 9.14.7 released ---

   5299.        [security]      A flaw in DNSSEC verification when transferring
                        mirror zones could allow data to be incorrectly
                        marked valid. (CVE-2019-6475) [GL #1252]

   5298.        [security]      Named could assert if a forwarder returned a
                        referral, rather than resolving the query, when QNAME
                        minimization was enabled. (CVE-2019-6476) [GL #1051]

   5297.        [bug]           Check whether a previous QNAME minimization fetch
                        is still running before starting a new one; return
                        SERVFAIL and log an error if so. [GL #1191]

   5294.        [func]          Fallback to ACE name on output in locale, which does not
                        support converting it to unicode.  [GL #846]

   5293.        [bug]           On Windows, named crashed upon any attempt to fetch XML
                        statistics from it. [GL #1245]

   5292.        [bug]           Queue 'rndc nsec3param' requests while signing inline
                        zone changes. [GL #1205]

        --- 9.14.6 released ---

   5289.        [bug]           Address NULL pointer dereference in rpz.c:rpz_detach.
                        [GL #1210]

   5286.        [contrib]       Address potential NULL pointer dereferences in
                        dlz_mysqldyn_mod.c. [GL #1207]

   5285.        [port]          win32: implement "-T maxudpXXX". [GL #837]

   5283.        [bug]           When a response-policy zone expires, ensure that
                        its policies are removed from the RPZ summary
                        database. [GL #1146]

   5282.        [bug]           Fixed a bug in searching for possible wildcard matches
                        for query names in the RPZ summary database. [GL #1146]

   5281.        [cleanup]       Don't escape commas when reporting named's command
                        line. [GL #1189]

   5280.        [protocol]      Add support for displaying EDNS option LLQ. [GL #1201]

   5279.        [bug]           When loading, reject zones containing CDS or CDNSKEY
                        RRsets at the zone apex if they would cause DNSSEC
                        validation failures if published in the parent zone
                        as the DS RRset.  [GL #1187]


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.10.2.1 pkgsrc/net/bind914/Makefile
cvs rdiff -u -r1.8 -r1.8.2.1 pkgsrc/net/bind914/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind914/Makefile
diff -u pkgsrc/net/bind914/Makefile:1.10 pkgsrc/net/bind914/Makefile:1.10.2.1
--- pkgsrc/net/bind914/Makefile:1.10    Wed Sep 18 15:19:31 2019
+++ pkgsrc/net/bind914/Makefile Fri Oct 18 14:26:06 2019
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.10 2019/09/18 15:19:31 taca Exp $
+# $NetBSD: Makefile,v 1.10.2.1 2019/10/18 14:26:06 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.14.5
+BIND_VERSION=  9.14.7
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind914/distinfo
diff -u pkgsrc/net/bind914/distinfo:1.8 pkgsrc/net/bind914/distinfo:1.8.2.1
--- pkgsrc/net/bind914/distinfo:1.8     Wed Sep 18 15:19:31 2019
+++ pkgsrc/net/bind914/distinfo Fri Oct 18 14:26:06 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.8 2019/09/18 15:19:31 taca Exp $
+$NetBSD: distinfo,v 1.8.2.1 2019/10/18 14:26:06 bsiegert Exp $
 
-SHA1 (bind-9.14.5.tar.gz) = aef9038cca034705b118168a1d1d83b3dffd83e4
-RMD160 (bind-9.14.5.tar.gz) = cabe4e43fcc1c193832dc6c9b3a7b8c13f46ceeb
-SHA512 (bind-9.14.5.tar.gz) = 1b18eda5dea639f9b34e1c41b534704b0d5f64c036b766c9cfccf9bbeb586ce4ea7f0d098a5b2747e88aa403e48ad8ae0b6e560e93348f0dc7616f914671d084
-Size (bind-9.14.5.tar.gz) = 6313555 bytes
+SHA1 (bind-9.14.7.tar.gz) = ab0b14f4fe6a818fb15673ea9cef3eead8f6a94b
+RMD160 (bind-9.14.7.tar.gz) = 6caf6e1a7ea03e311c6bcdd1cca63547e230f86b
+SHA512 (bind-9.14.7.tar.gz) = e1837ebfbbc60487f5f0e67fb9e935588fd6e5ffe55cdc9dc77e3ce63cd6fc4f076f4eb282cc4f51701ddda3e51e8f15255db5a3841f9fe92a4fb4207d806740
+Size (bind-9.14.7.tar.gz) = 6320994 bytes
 SHA1 (patch-bin_named_Makefile.in) = 741e3708c670baaec45446f6bb364ada448ae330
 SHA1 (patch-bin_named_main.c) = 51c8ab464a009575b6513c7ed4b79f89446eb7d0
 SHA1 (patch-bin_named_pfilter.c) = b54f872c883c8fbc2d9c04df65c185dc057cc36b