[pkgsrc/pkgsrc-2017Q1]: pkgsrc/net/bind99 Pullup ticket #5273 - requested by ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e2619ce26c15
branches:  pkgsrc-2017Q1
changeset: 360234:e2619ce26c15
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Thu Apr 13 11:54:13 2017 +0000

description:
Pullup ticket #5273 - requested by taca
net/bind99: security fix

Revisions pulled up:
- net/bind99/Makefile                                           1.66
- net/bind99/distinfo                                           1.44

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Apr 13 01:53:35 UTC 2017

   Modified Files:
        pkgsrc/net/bind99: Makefile distinfo

   Log Message:
   Update bind99 to 9.9.9pl8 (BIND 9.9.9-P8).

   Quote from release announce:

      BIND 9.9.9-P8 addresses the security issues described in CVE-2017-3136,
      CVE-2017-3137, and CVE-2017-3138, and updates the built-in trusted keys
      for the root zone.

   Quote from CHANGELOG:

        --- 9.9.9-P8 released ---

   4582.        [security]      'rndc ""' could trigger a assertion failure in named.
                        (CVE-2017-3138) [RT #44924]

   4580.        [bug]           4578 introduced a regression when handling CNAME to
                        referral below the current domain. [RT #44850]

        --- 9.9.9-P7 released ---

   4578.        [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

   4575.        [security]      DNS64 with "break-dnssec yes;" can result in an
                        assertion failure. (CVE-2017-3136) [RT #44653]

   4564.        [maint]         Update the built in managed keys to include the
                        upcoming root KSK. [RT #44579]

diffstat:

 net/bind99/Makefile |   5 ++---
 net/bind99/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (40 lines):

diff -r ecc24eb43f03 -r e2619ce26c15 net/bind99/Makefile
--- a/net/bind99/Makefile       Thu Apr 13 11:29:32 2017 +0000
+++ b/net/bind99/Makefile       Thu Apr 13 11:54:13 2017 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.65 2017/02/24 15:46:14 fhajny Exp $
+# $NetBSD: Makefile,v 1.65.2.1 2017/04/13 11:54:13 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
@@ -14,7 +13,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.9.9-P6
+BIND_VERSION=  9.9.9-P8
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r ecc24eb43f03 -r e2619ce26c15 net/bind99/distinfo
--- a/net/bind99/distinfo       Thu Apr 13 11:29:32 2017 +0000
+++ b/net/bind99/distinfo       Thu Apr 13 11:54:13 2017 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.43 2017/02/09 00:50:15 taca Exp $
+$NetBSD: distinfo,v 1.43.2.1 2017/04/13 11:54:13 bsiegert Exp $
 
-SHA1 (bind-9.9.9-P6.tar.gz) = 620ffa8c7b2e6b650c4c76fe29dba75bc9281037
-RMD160 (bind-9.9.9-P6.tar.gz) = f7a96e6407769b6577e457a4f03a137ffb050d44
-SHA512 (bind-9.9.9-P6.tar.gz) = f8bddaf278af8b255714249ee8eee13b5fca7560ac77243444010139af1575676ebfdb37c726755ece69c16eb60a5272597b1778156cb9a1eb72375cbb3a2d3c
-Size (bind-9.9.9-P6.tar.gz) = 8778790 bytes
+SHA1 (bind-9.9.9-P8.tar.gz) = da2e566ddc16d4a4cfcc6ae4580bec62de645ae6
+RMD160 (bind-9.9.9-P8.tar.gz) = f8f4e121a116ee89a4f14a3d58bdad8312c19e04
+SHA512 (bind-9.9.9-P8.tar.gz) = 3dc93ed01d23fb308227e98f8437ce4e7a4b1b7b0a1b3d8c037bc6f1394511300594a90f8f26cd2ddf1cb24f585a53c5dfaa262dbb0e008c135ed16649e65b62
+Size (bind-9.9.9-P8.tar.gz) = 8790853 bytes
 SHA1 (patch-bin_dig_dighost.c) = a4bc9558c5dbedcc6bb0f87ea309358ca098d42a
 SHA1 (patch-bin_tests_system_Makefile.in) = 19d90050acfbe3da838dbd4c1436b5581039b71f
 SHA1 (patch-config.threads.in) = 227b83efe9cb3e301aaac9b97cf42f1fb8ad06b2