CVS commit: src

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    src
Committed By:   spz
Date:           Sun May 29 15:17:10 UTC 2011

Modified Files:
        src/distrib/sets/lists/base: ad.mips64eb ad.mips64el md.amd64
            md.sparc64 shl.mi
        src/external/bsd/bind/dist/bin/named: bind.keys.h query.c server.c
        src/external/bsd/bind/dist/lib/dns: ncache.c rbtdb.c resolver.c
            validator.c xfrin.c zone.c
        src/external/bsd/bind/dist/lib/isc/unix: socket.c
        src/external/bsd/bind/lib/libdns: shlib_version
        src/external/bsd/bind/lib/libisc: shlib_version

Log Message:
merge 9.8.0-P2:
- fixes CVE-2011-1910: Large RRSIG RRsets and Negative Caching can crash named
- fixes CVE-2011-0414: bind lockup during IXFR
- return a more correct error in case of policy violation

bump version of libdns and libisc


To generate a diff of this commit:
cvs rdiff -u -r1.49 -r1.50 src/distrib/sets/lists/base/ad.mips64eb
cvs rdiff -u -r1.47 -r1.48 src/distrib/sets/lists/base/ad.mips64el
cvs rdiff -u -r1.122 -r1.123 src/distrib/sets/lists/base/md.amd64
cvs rdiff -u -r1.115 -r1.116 src/distrib/sets/lists/base/md.sparc64
cvs rdiff -u -r1.584 -r1.585 src/distrib/sets/lists/base/shl.mi
cvs rdiff -u -r1.2 -r1.3 src/external/bsd/bind/dist/bin/named/bind.keys.h
cvs rdiff -u -r1.3 -r1.4 src/external/bsd/bind/dist/bin/named/query.c
cvs rdiff -u -r1.8 -r1.9 src/external/bsd/bind/dist/bin/named/server.c
cvs rdiff -u -r1.2 -r1.3 src/external/bsd/bind/dist/lib/dns/ncache.c \
    src/external/bsd/bind/dist/lib/dns/xfrin.c \
    src/external/bsd/bind/dist/lib/dns/zone.c
cvs rdiff -u -r1.7 -r1.8 src/external/bsd/bind/dist/lib/dns/rbtdb.c
cvs rdiff -u -r1.8 -r1.9 src/external/bsd/bind/dist/lib/dns/resolver.c
cvs rdiff -u -r1.3 -r1.4 src/external/bsd/bind/dist/lib/dns/validator.c
cvs rdiff -u -r1.5 -r1.6 src/external/bsd/bind/dist/lib/isc/unix/socket.c
cvs rdiff -u -r1.6 -r1.7 src/external/bsd/bind/lib/libdns/shlib_version
cvs rdiff -u -r1.6 -r1.7 src/external/bsd/bind/lib/libisc/shlib_version

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.