[pkgsrc/pkgsrc-2017Q4]: pkgsrc/net/isc-dhcp4 Pullup ticket #5712 - requested ...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/d5e07183970c
branches:  pkgsrc-2017Q4
changeset: 373147:d5e07183970c
user:      spz <spz%pkgsrc.org@localhost>
date:      Fri Mar 02 21:24:02 2018 +0000

description:
Pullup ticket #5712 - requested by taca
net/isc-dhcp4: security update

Revisions pulled up:
- net/isc-dhcp4/Makefile.common                                 1.35
- net/isc-dhcp4/distinfo                                        1.27

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Mar  1 00:53:05 UTC 2018

   Modified Files:
        pkgsrc/net/isc-dhcp4: Makefile.common distinfo

   Log Message:
   net/isc-dhcp4: update to 4.3.6p1 (ISC DHCP 4.3.6-P1)

                        Changes since 4.3.6

   !- Plugged a socket descriptor leak in OMAPI, that can occur when there is
     data pending to be written to an OMAPI connection, when the connection
     is closed by the reader.
     [ISc-Bugs #46767]

   ! Corrected an issue where large sized 'X/x' format options were causing
     option handling logic to overwrite memory when expanding them to human
     readable form. Reported by Felix Wilhelm, Google Security Team.
     [ISC-Bugs #47139]
     CVE: CVE-2018-5732

   ! Option reference count was not correctly decremented in error path
     when parsing buffer for options. Reported by Felix Wilhelm, Google
     Security Team.
     [ISC-Bugs #47140]
     CVE: CVE-2018-5733


   To generate a diff of this commit:
   cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/isc-dhcp4/Makefile.common
   cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/isc-dhcp4/distinfo

diffstat:

 net/isc-dhcp4/Makefile.common |   6 +++---
 net/isc-dhcp4/distinfo        |  10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diffs (45 lines):

diff -r 5d93c0337f47 -r d5e07183970c net/isc-dhcp4/Makefile.common
--- a/net/isc-dhcp4/Makefile.common     Fri Mar 02 21:23:49 2018 +0000
+++ b/net/isc-dhcp4/Makefile.common     Fri Mar 02 21:24:02 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.34 2017/08/13 14:21:03 taca Exp $
+# $NetBSD: Makefile.common,v 1.34.6.1 2018/03/02 21:24:02 spz Exp $
 #
 # used by net/isc-dhcp4/Makefile
 # used by net/isc-dhcpd4/Makefile
@@ -17,7 +17,7 @@
 
 CONFLICTS+=            isc-dhcp-base-3.*
 
-VERSION=               4.3.6
+VERSION=               4.3.6-P1
 
 .include "../../mk/bsd.prefs.mk"
 
@@ -82,7 +82,7 @@
 BIND_CONFIGURE_ARGS+=  --with-export-libdir=${WRKSRC}/bind/lib
 BIND_CONFIGURE_ARGS+=  --with-gssapi=no
 
-BIND_WRKSRC=           ${WRKSRC}/bind/bind-9.9.11
+BIND_WRKSRC=           ${WRKSRC}/bind/bind-9.9.11-P1
 
 post-configure:
        ${RUN}${_ULIMIT_CMD}                                    \
diff -r 5d93c0337f47 -r d5e07183970c net/isc-dhcp4/distinfo
--- a/net/isc-dhcp4/distinfo    Fri Mar 02 21:23:49 2018 +0000
+++ b/net/isc-dhcp4/distinfo    Fri Mar 02 21:24:02 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.26 2017/08/13 14:21:03 taca Exp $
+$NetBSD: distinfo,v 1.26.6.1 2018/03/02 21:24:02 spz Exp $
 
-SHA1 (dhcp-4.3.6.tar.gz) = fb0417530e49368fe032cd9722f51c74f93180ac
-RMD160 (dhcp-4.3.6.tar.gz) = b80936239858a373bfb9bf2a362688a04db546ad
-SHA512 (dhcp-4.3.6.tar.gz) = de4962dc2aa174df17a3a1456719a777a42d238c3d6ad1771ccc460fa70c9e9cefcce52c7437f7acde61b9c3a2e84e9d49fd2dc33c7e9243053ceed5b247be03
-Size (dhcp-4.3.6.tar.gz) = 10182593 bytes
+SHA1 (dhcp-4.3.6-P1.tar.gz) = 8a02b202377c030bfd378b0497dc8974510e9b87
+RMD160 (dhcp-4.3.6-P1.tar.gz) = 54dfc9de84006b684684b7689d873c4d129aeb24
+SHA512 (dhcp-4.3.6-P1.tar.gz) = cb04af2fb0fa8c5621e8b3dcb41e81422475218e1569b0eac6e13c876a21279928a3348f799253d7207517720466523b1cc28005c671542e37b1a391342b1e62
+Size (dhcp-4.3.6-P1.tar.gz) = 10189202 bytes
 SHA1 (patch-aa) = da090b3b824f5d437f8d05ce00e2ac4dfc65d6af
 SHA1 (patch-ab) = 0683dd2259e48184713559aa0356ee352aa52c39
 SHA1 (patch-ac) = a7e6808a6e1e93c520eb085f31259f6c142750f4