Module Name:	pkgsrc
Committed By:	itojun
Date:		Fri Jun 28 06:03:04 UTC 2002

Modified Files:
	pkgsrc/net/bind8: Makefile distinfo

Log Message:
upgrade to 8.3.3.  includes important security fix.

	--- 8.3.3-REL released --- (Wed Jun 26 21:15:43 PDT 2002)
1301.	[func]		log attempts to exploit #1300.
1300.	[bug]		Remote buffer overrun.
1299.	[func]		Log to xfer-in when a named-xfer fails and one of
			the masters returned REFUSED.
1298.	[bug]		named could leak a OPT record when returning a
			negative response.
1297.	[func]		'ndc restart' will now attempt to preserve the
			arguments named was started with.
			Use 'ndc restart --' to clear the arguements.
			Use 'ndc restart <new arguements>' to restart named
			with a alternate set of arguements.
1296.	[bug]		delay setting need_restart until the response to
			ndc exec has been sent.
1295.	[func]		new ndc command 'args'.  returns the arguements that
			named was started with %xx escaped.
1294.	[bug]		#1272 broke linkage for those OS's using -lfl (flex).
			Move -ll/-lfl to LIBL for all platforms.
	--- 8.3.2-REL released --- (Mon Jun 17 20:24:32 PDT 2002)
1293.	[doc]		update man pages for 'dig', 'dnsquery' and 'host'
			to reflect IPv6 capabilities (nslookup and nsupdate
			were already IPv4/IPv6 agnostic).
1292.	[func]		host: the default lookups now also include AAAA
			records.
1291.	[func]		'dig -x <ip6>' now works.
1290.	[bug]		'dig @server' fail to report the IPv6 address of the
			server in error messages.
1289.	[contrib]	normalize_zone now handles $TTL.
1288.	[bug]		named: -t and -w could not be used together.
1287.	[func]		report serial(s) in out going transfer operation.
	--- 8.3.2-RC1 released --- (Thu May 30 23:06:11 PDT 2002)
1286.	[func]		libbind: no longer attempts bit string labels for
			IPv6 reverse resolution.  Try IP6.ARPA then IP6.INT
			for nibble style resolution.
1285.	[port]		linux: ss_family vs __ss_family in sockaddr_storage.
1284.	[port]		freebsd: 5.0 uses gid_t rather that int for
			GETGROUPLIST_ARGS
1283.	[port]		bsdi: 4.2 also has struct sockaddr_storage.
1282.	[bug]		nslookup was using inet_ntoa() to print out a IPv6
			address.
1281.	[bug]		escape '(' and ')' when coverting to presentation
			form.
1280.	[func]		server { edns yes_or_no; } is now supported.
1279.	[bug]		nslookup: partial coversion to similar style outputs
			for both -type=aaaa and -type=a.
1278.	[bug]		free() of non-malloced memory in nslookup.
1277.	[port]		cast all instances of yytext in commands.l to (char*)
			to silence compilers on OS's where lex declares it
			as (unsigned char *).
1276.	[port]		hpux 11.22: ansify GetAnswer in getinfo.c to
			silence compiler.
1275.	[bug]		bad declaration of si in tsig_key_from_addr().
1274.	[port]		hpux 11.22: ansify hexstring() and display() in
			addr.c to silence compiler.
1273.	[bug]		const pointer conficts in res_debug.c.
1272.	[port]		hpux 11.22: don't link against -ll unless required.
1272.	[bug]		main_need_num was not last entry in enum.
			main_need_tick nolonger required.
1271.	[port]		hpux: treat all hpux systems as BIG_ENDIAN, don't
			include <sys/mbuf.h>.
1270.	[port]		hpux 11.22 namespace clash DATASIZE -> BIND_DATASIZE.
1269.	[port]		hpux 11.11 interface scaning.
1268.	[port]		solaris: 64 bit binary compatability.
1267.	[bug]		aix4: missing IN6_IS_ADDR_V4COMPAT macro.
1266.	[bug]		If you are using TSIG #1261 introduced the potential
			of a infinite loop.
1265.	[bug]		nslookup failed on platforms that don't have BSD 43
			style sockets.
1264.	[bug]		LINK_INIT and UNLINK were not compatible with
			C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
	--- 8.3.2-T1B released --- (Tue May  7 18:49:58 PDT 2002)
1263.	[bug]		gethostans() could get out of sync parsing the
			response if there was a very long CNAME chain.
1262.	[bug]		winnt: dumpdb and stats should now work reliably.
1261.	[bug]		using a valid TSIG with a compressed ownername could
			result a INSIST() failure.
1260.	[func]		"notify explicit;" from BIND 9.
1259.	[misc]		leave the verification of the OPT options to the
			caller.
1258.	[func]		accept SOA MNAME field as legitimate additional
			data.
1257.	[bug]		malformed response to query w/ tsig + edns.
1256.	[port]		darwin: probe for IPv6 support.
1255.	[bug]		xfers_running could become out of sync if a zone
			was removed while it was being transfered.
1254.	[func]		nsupdate can now update IPv6 servers.
1253.	[func]		host now accepts IPv6 addresses.
1253.	[bug]		reserve space for the signature when performing a
			zone transfer.
1252.	[func]		dnsquery now accepts IPv6 addresses.
1251.	[bug]		win32: it was possible to call RegCloseKey() on a
			invalid key.
1250	[func]		nslookup now accepts IPv6 addresses.
1249.	[func]		dig now accepts IPv6 addresses.
1248.	[doc]		correct some typos in named.conf.5 and corresponding
			html.
1247.	[bug]		get_salen() IPv6 support was broken for OSs w/o sa_len.
1246.	[support]	add highly dangerous compile time option
			NXDOMAIN_ON_DENIAL.  it should not be used
			except in testing.
1245.	[bug]		if we don't have enough file descriptors to open
			a socket attempt to close a idle tcp client.
1244.	[port]		bsdi: 4.3 has struct sockaddr_storage.
1243.	[bug]		SERVFAIL can have too many other causes to be used
			say whether a server supports EDNS or not.
1242.	[port]		64k answer buffers were causing stack space to be
			exceeded for certian OS.  Use heap space instead.
1241.	[bug]		getnameinfo() failed to lookup IPv4 mapped /
			compatible addresses.
1340.	[bug]		reference after free for included conf file name.
1339.	[bug]		doaddinfo would not always attempt to fetch missing
			glue when it should have.
1338.	[bug]		an IPv6 only nameserver could generate spurious
			sysquery errors.
1337.	[port]		linux: IN6ADDR_LOOPBACK_INIT, IN6ADDR_ANY_INIT and
			sockaddr_storage not declared by early kernels.
1336.	[bug]		getaddrinfo() could call freeaddrinfo() with an
			invalid pointer.
1335.	[bug]		res_nupdate() failed to update the name servers
			addresses before sending the update.
1334.	[bug]		A6 is expected in the additional section.


To generate a diff of this commit:
cvs rdiff -r1.13 -r1.14 pkgsrc/net/bind8/Makefile
cvs rdiff -r1.8 -r1.9 pkgsrc/net/bind8/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.