Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/external/bsd/bind/dist Import bind 9.10.2-P4
details: https://anonhg.NetBSD.org/src/rev/1a622041437c
branches: trunk
changeset: 810544:1a622041437c
user: christos <christos%NetBSD.org@localhost>
date: Thu Sep 03 07:21:32 2015 +0000
description:
Import bind 9.10.2-P4
diffstat:
external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html | 2 +-
external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html | 42 +++++-----
external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html | 2 +-
external/bsd/bind/dist/doc/arm/latex-fixup.pl | 2 +
external/bsd/bind/dist/doc/arm/notes.html | 21 +++++-
external/bsd/bind/dist/doc/arm/notes.pdf | Bin
external/bsd/bind/dist/doc/arm/notes.xml | 21 +++++
external/bsd/bind/dist/lib/dns/pkcs11dh_link.c | 33 ++++---
external/bsd/bind/dist/lib/dns/pkcs11dsa_link.c | 33 +++++---
external/bsd/bind/dist/lib/dns/pkcs11rsa_link.c | 26 +++---
external/bsd/bind/dist/lib/dns/rdata/generic/openpgpkey_61.c | 4 +-
16 files changed, 124 insertions(+), 72 deletions(-)
diffs (truncated from 612 to 300 lines):
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html Thu Sep 03 07:21:32 2015 +0000
@@ -556,6 +556,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html Thu Sep 03 07:21:32 2015 +0000
@@ -154,6 +154,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html Thu Sep 03 07:21:32 2015 +0000
@@ -671,6 +671,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html Thu Sep 03 07:21:32 2015 +0000
@@ -139,6 +139,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html Thu Sep 03 07:21:32 2015 +0000
@@ -163,6 +163,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html Thu Sep 03 07:21:32 2015 +0000
@@ -514,6 +514,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html Thu Sep 03 07:21:32 2015 +0000
@@ -47,13 +47,13 @@
<dl>
<dt><span class="sect1"><a href="Bv9ARM.ch12.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612371">Prerequisite</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612380">Compilation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612405">Installation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612436">Known Defects/Restrictions</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612513">The dns.conf File</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612539">Sample Applications</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613580">Library References</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612253">Prerequisite</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612263">Compilation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612288">Installation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612455">Known Defects/Restrictions</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612532">The dns.conf File</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2612558">Sample Applications</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2613600">Library References</a></span></dt>
</dl></dd>
</dl>
</div>
@@ -89,7 +89,7 @@
</ul></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2612371"></a>Prerequisite</h3></div></div></div>
+<a name="id2612253"></a>Prerequisite</h3></div></div></div>
<p>GNU make is required to build the export libraries (other
part of BIND 9 can still be built with other types of make). In
the reminder of this document, "make" means GNU make. Note that
@@ -98,7 +98,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2612380"></a>Compilation</h3></div></div></div>
+<a name="id2612263"></a>Compilation</h3></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>./configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong>
$ <strong class="userinput"><code>make</code></strong>
@@ -113,7 +113,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2612405"></a>Installation</h3></div></div></div>
+<a name="id2612288"></a>Installation</h3></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>cd lib/export</code></strong>
$ <strong class="userinput"><code>make install</code></strong>
@@ -135,7 +135,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2612436"></a>Known Defects/Restrictions</h3></div></div></div>
+<a name="id2612455"></a>Known Defects/Restrictions</h3></div></div></div>
<div class="itemizedlist"><ul type="disc">
<li><p>Currently, win32 is not supported for the export
library. (Normal BIND 9 application can be built as
@@ -175,7 +175,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2612513"></a>The dns.conf File</h3></div></div></div>
+<a name="id2612532"></a>The dns.conf File</h3></div></div></div>
<p>The IRS library supports an "advanced" configuration file
related to the DNS library for configuration parameters that
would be beyond the capability of the
@@ -193,14 +193,14 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2612539"></a>Sample Applications</h3></div></div></div>
+<a name="id2612558"></a>Sample Applications</h3></div></div></div>
<p>Some sample application programs using this API are
provided for reference. The following is a brief description of
these applications.
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2612548"></a>sample: a simple stub resolver utility</h4></div></div></div>
+<a name="id2612567"></a>sample: a simple stub resolver utility</h4></div></div></div>
<p>
It sends a query of a given name (of a given optional RR type) to a
specified recursive server, and prints the result as a list of
@@ -264,7 +264,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2612638"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
+<a name="id2612658"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
<p>
Similar to "sample", but accepts a list
of (query) domain names as a separate file and resolves the names
@@ -305,7 +305,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2612692"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
+<a name="id2612711"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
<p>
It sends a query to a specified server, and
prints the response with minimal processing. It doesn't act as a
@@ -346,7 +346,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2612756"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
+<a name="id2612775"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
<p>
This is a test program
to check getaddrinfo() and getnameinfo() behavior. It takes a
@@ -363,7 +363,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2612771"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
+<a name="id2612790"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
<p>
It accepts a single update command as a
command-line argument, sends an update request message to the
@@ -458,7 +458,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2613516"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
+<a name="id2613536"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
<p>
It checks a set
of domains to see the name servers of the domains behave
@@ -515,7 +515,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2613580"></a>Library References</h3></div></div></div>
+<a name="id2613600"></a>Library References</h3></div></div></div>
<p>As of this writing, there is no formal "manual" of the
libraries, except this document, header files (some of them
provide pretty detailed explanations), and sample application
@@ -540,6 +540,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html
--- a/external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html Thu Sep 03 07:21:32 2015 +0000
@@ -149,6 +149,6 @@
</tr>
</table>
</div>
-<p style="text-align: center;">BIND 9.10.2-P3</p>
+<p style="text-align: center;">BIND 9.10.2-P4</p>
</body>
</html>
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/latex-fixup.pl
--- a/external/bsd/bind/dist/doc/arm/latex-fixup.pl Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/latex-fixup.pl Thu Sep 03 07:21:32 2015 +0000
@@ -43,6 +43,8 @@
s/{\\texttt{{\.\\dbz{}}}}/\\mbox{{\\texttt{{\.\\dbz{}}}}}/;
# Add any further tweaking here.
+ # https://en.wikibooks.org/wiki/LaTeX/Special_Characters
+ s/쎶/{\\"o}/; # omlaut o 쎶 or 쎶
# Write out whatever we have now.
print;
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/notes.html
--- a/external/bsd/bind/dist/doc/arm/notes.html Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/notes.html Thu Sep 03 07:21:32 2015 +0000
@@ -21,7 +21,7 @@
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article" lang="en"><div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2542126"></a>Release Notes for BIND Version 9.10.2-P3</h2></div></div></div>
+<a name="id2542126"></a>Release Notes for BIND Version 9.10.2-P4</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
@@ -29,6 +29,10 @@
This document summarizes changes since BIND 9.10.2:
</p>
<p>
+ BIND 9.10.2-P4 addresses security issues described in
+ CVE-2015-5722 and CVE-2015-5986.
+ </p>
+<p>
BIND 9.10.2-P3 addresses a security issue described in
CVE-2015-5477.
</p>
@@ -63,6 +67,21 @@
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
<div class="itemizedlist"><ul type="disc">
+<li><p>
+ An incorrect boundary check in the OPENPGPKEY rdatatype
+ could trigger an assertion failure. This flaw is disclosed
+ in CVE-2015-5986. [RT #40286]
+ </p></li>
+<li>
+<p>
+ A buffer accounting error could trigger an assertion failure
+ when parsing certain malformed DNSSEC keys.
+ </p>
+<p>
+ This flaw was discovered by Hanno B쎶eck of the Fuzzing
+ Project, and is disclosed in CVE-2015-5722. [RT #40212]
+ </p>
+</li>
<li>
<p>
A specially crafted query could trigger an assertion failure
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/notes.pdf
Binary file external/bsd/bind/dist/doc/arm/notes.pdf has changed
diff -r 678b47459b2d -r 1a622041437c external/bsd/bind/dist/doc/arm/notes.xml
--- a/external/bsd/bind/dist/doc/arm/notes.xml Thu Sep 03 06:24:15 2015 +0000
+++ b/external/bsd/bind/dist/doc/arm/notes.xml Thu Sep 03 07:21:32 2015 +0000
@@ -23,6 +23,10 @@
This document summarizes changes since BIND 9.10.2:
</para>
<para>
+ BIND 9.10.2-P4 addresses security issues described in
+ CVE-2015-5722 and CVE-2015-5986.
+ </para>
+ <para>
BIND 9.10.2-P3 addresses a security issue described in
CVE-2015-5477.
</para>
@@ -58,6 +62,23 @@
<itemizedlist>
Home |
Main Index |
Thread Index |
Old Index