[pkgsrc/pkgsrc-2017Q1]: pkgsrc/net/bind910 Pullup ticket #5272 - requested by...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/ecc24eb43f03
branches:  pkgsrc-2017Q1
changeset: 360233:ecc24eb43f03
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Thu Apr 13 11:29:32 2017 +0000

description:
Pullup ticket #5272 - requested by taca
net/bind910: security fix

Revisions pulled up:
- net/bind910/Makefile                                          1.32
- net/bind910/distinfo                                          1.23

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Apr 13 01:52:42 UTC 2017

   Modified Files:
        pkgsrc/net/bind910: Makefile distinfo

   Log Message:
   Update bind910 to 9.10.4pl8 (BIND 9.10.4-P8).

   Quote from release announce:

      BIND 9.10.4-P8 addresses the security issues described in
      CVE-2017-3136, CVE-2017-3137, and CVE-2017-3138, and updates the
      built-in trusted keys for the root zone.

   From CHANGELOG:

        --- 9.10.4-P8 released ---

   4582.        [security]      'rndc ""' could trigger a assertion failure in named.
                        (CVE-2017-3138) [RT #44924]

   4580.        [bug]           4578 introduced a regression when handling CNAME to
                        referral below the current domain. [RT #44850]

        --- 9.10.4-P7 released ---

   4578.        [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

   4575.        [security]      DNS64 with "break-dnssec yes;" can result in an
                        assertion failure. (CVE-2017-3136) [RT #44653]

   4564.        [maint]         Update the built in managed keys to include the
                        upcoming root KSK. [RT #44579]

diffstat:

 net/bind910/Makefile |   5 ++---
 net/bind910/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (40 lines):

diff -r 89c53bb61fdd -r ecc24eb43f03 net/bind910/Makefile
--- a/net/bind910/Makefile      Thu Apr 13 11:25:37 2017 +0000
+++ b/net/bind910/Makefile      Thu Apr 13 11:29:32 2017 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.31 2017/02/24 15:46:14 fhajny Exp $
+# $NetBSD: Makefile,v 1.31.2.1 2017/04/13 11:29:32 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
@@ -14,7 +13,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.10.4-P6
+BIND_VERSION=  9.10.4-P8
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r 89c53bb61fdd -r ecc24eb43f03 net/bind910/distinfo
--- a/net/bind910/distinfo      Thu Apr 13 11:25:37 2017 +0000
+++ b/net/bind910/distinfo      Thu Apr 13 11:29:32 2017 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.22 2017/02/09 00:48:59 taca Exp $
+$NetBSD: distinfo,v 1.22.2.1 2017/04/13 11:29:32 bsiegert Exp $
 
-SHA1 (bind-9.10.4-P6.tar.gz) = c08bef47136b3b88844a4c3b8a6227445fca6f40
-RMD160 (bind-9.10.4-P6.tar.gz) = c082903758103ac9780cf92dbd634f6b3369478a
-SHA512 (bind-9.10.4-P6.tar.gz) = a881d81307b48922c062d672701e777a17d5130a10dc1c5e4022edbbc28c7136076c17a0c89b211cd3b07527b81fa9a3ac599d0c3c23d70a75e47c63cd2a59f5
-Size (bind-9.10.4-P6.tar.gz) = 9317598 bytes
+SHA1 (bind-9.10.4-P8.tar.gz) = 33a4c37bb85f632e7002bc157e9d357e389466da
+RMD160 (bind-9.10.4-P8.tar.gz) = dec49998fd31d431d1d7f77545fb7de8fd36237b
+SHA512 (bind-9.10.4-P8.tar.gz) = cdda6e92a27cd1c6624dea92aa9f81b32088ec227dc4c3133f72cfb3ebf1bef29ba8908e6167232bca7cb6a00851646a694102749669cadd9137eebfaa202fd1
+Size (bind-9.10.4-P8.tar.gz) = 9323291 bytes
 SHA1 (patch-bin_dig_dighost.c) = 983e23a30d519982cbe88ed2277fcffc9cad616e
 SHA1 (patch-bin_tests_system_Makefile.in) = aeb2de1b6c6cfdbae7ffbf38aeebf52e94af9e2f
 SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2