head 1.3; access; symbols pkgsrc-2013Q2:1.3.0.8 pkgsrc-2013Q2-base:1.3 pkgsrc-2012Q4:1.3.0.6 pkgsrc-2012Q4-base:1.3 pkgsrc-2011Q4:1.3.0.4 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q2:1.3.0.2 pkgsrc-2011Q2-base:1.3 pkgsrc-2009Q4:1.2.0.28 pkgsrc-2009Q4-base:1.2 pkgsrc-2009Q3:1.2.0.26 pkgsrc-2009Q3-base:1.2 pkgsrc-2009Q2:1.2.0.24 pkgsrc-2009Q2-base:1.2 pkgsrc-2009Q1:1.2.0.22 pkgsrc-2009Q1-base:1.2 pkgsrc-2008Q4:1.2.0.20 pkgsrc-2008Q4-base:1.2 pkgsrc-2008Q3:1.2.0.18 pkgsrc-2008Q3-base:1.2 cube-native-xorg:1.2.0.16 cube-native-xorg-base:1.2 pkgsrc-2008Q2:1.2.0.14 pkgsrc-2008Q2-base:1.2 cwrapper:1.2.0.12 pkgsrc-2008Q1:1.2.0.10 pkgsrc-2008Q1-base:1.2 pkgsrc-2007Q4:1.2.0.8 pkgsrc-2007Q4-base:1.2 pkgsrc-2007Q3:1.2.0.6 pkgsrc-2007Q3-base:1.2 pkgsrc-2007Q2:1.2.0.4 pkgsrc-2007Q2-base:1.2 pkgsrc-2007Q1:1.2.0.2 pkgsrc-2007Q1-base:1.2 pkgsrc-2006Q4:1.1.0.6 pkgsrc-2006Q4-base:1.1 pkgsrc-2006Q3:1.1.0.4 pkgsrc-2006Q3-base:1.1 pkgsrc-2006Q2:1.1.0.2; locks; strict; comment @# @; 1.3 date 2010.02.10.17.30.26; author joerg; state dead; branches; next 1.2; 1.2 date 2007.01.28.01.31.52; author adrianp; state Exp; branches; next 1.1; 1.1 date 2006.08.28.16.00.45; author seb; state Exp; branches 1.1.2.1 1.1.6.1; next ; 1.1.2.1 date 2006.08.28.16.00.45; author ghen; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2006.09.07.11.20.44; author ghen; state Exp; branches; next ; 1.1.6.1 date 2007.02.01.09.28.53; author ghen; state Exp; branches; next ; desc @@ 1.3 log @Retire bind9. @ text @$NetBSD: patch-ao,v 1.2 2007/01/28 01:31:52 adrianp Exp $ --- lib/bind/irs/getaddrinfo.c.orig 2006-11-13 05:04:49.000000000 +0000 +++ lib/bind/irs/getaddrinfo.c @@@@ -332,7 +332,8 @@@@ getaddrinfo(hostname, servname, hints, r pai->ai_family = PF_UNSPEC; pai->ai_socktype = ANY; pai->ai_protocol = ANY; -#if defined(sun) && defined(_SOCKLEN_T) && defined(__sparcv9) +#if (defined(sun) && defined(_SOCKLEN_T) && defined(__sparc9)) || (defined(__NetBSD__) && (((defined(__sparc__) || defined(__i386__)) && defined(_LP64)) || defined(__alpha__))) + /* * clear _ai_pad to preserve binary * compatibility with previously compiled 64-bit @@@@ -365,7 +366,7 @@@@ getaddrinfo(hostname, servname, hints, r } memcpy(pai, hints, sizeof(*pai)); -#if defined(sun) && defined(_SOCKLEN_T) && defined(__sparcv9) +#if (defined(sun) && defined(_SOCKLEN_T) && defined(__sparc9)) || (defined(__NetBSD__) && (((defined(__sparc__) || defined(__i386__)) && defined(_LP64)) || defined(__alpha__))) /* * We need to clear _ai_pad to preserve binary * compatibility. See prior comment. @ 1.2 log @Update to 9.3.4 Lots of changes, see http://www.isc.org/sw/bind/view/?release=9.3.4#RELEASE for all the details: In brief: 2126. [security] Serialise validation of type ANY responses. 2124. [security] It was possible to dereference a freed fetch context. 2089. [security] Raise the minimum safe OpenSSL versions to OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions prior to these have known security flaws which are (potentially) exploitable in named. 2088. [security] Change the default RSA exponent from 3 to 65537. 2066. [security] Handle SIG queries gracefully. 1941. [bug] ncache_adderesult() should set eresult even if no rdataset is passed to it. @ text @d1 1 a1 1 $NetBSD$ @ 1.1 log @Bump PKGREVISION to 1. Fix build on NetBSD/sparc64 3.x: sync CPP symbols usage between struct addrinfo definition and its usage in getaddrinfo(). While here define struct addrinfo's pad members the same way as in NetBSD's /usr/include/netbsd.h and sync code in lib/bind/irs/getaddrinfo.c:getaddrinfo(). This had been reported to bind9-bugs at isc dot org. @ text @d3 1 a3 1 --- lib/bind/irs/getaddrinfo.c.orig 2005-07-28 07:43:19.000000000 +0000 d5 1 a5 1 @@@@ -332,7 +332,7 @@@@ getaddrinfo(hostname, servname, hints, r d9 1 a9 1 -#ifdef __sparcv9 d11 1 d15 1 a15 1 @@@@ -365,7 +365,7 @@@@ getaddrinfo(hostname, servname, hints, r d19 1 a19 1 -#ifdef __sparcv9 @ 1.1.2.1 log @file patch-ao was added on branch pkgsrc-2006Q2 on 2006-08-28 16:00:45 +0000 @ text @d1 22 @ 1.1.2.2 log @Pullup ticket 1816 - requested by adrianp security update for bind9 Revisions pulled up: - pkgsrc/net/bind9/Makefile 1.79,1.81-1.82 - pkgsrc/net/bind9/PLIST 1.19 - pkgsrc/net/bind9/distinfo 1.27 - pkgsrc/net/bind9/patches/patch-aa removed - pkgsrc/net/bind9/patches/patch-ac 1.6 - pkgsrc/net/bind9/patches/patch-ad 1.6 - pkgsrc/net/bind9/patches/patch-ae removed - pkgsrc/net/bind9/patches/patch-af 1.6 - pkgsrc/net/bind9/patches/patch-ah removed - pkgsrc/net/bind9/patches/patch-ai 1.7 - pkgsrc/net/bind9/patches/patch-aj 1.4 - pkgsrc/net/bind9/patches/patch-al 1.2 - pkgsrc/net/bind9/patches/patch-am 1.1 - pkgsrc/net/bind9/patches/patch-ao 1.1 - pkgsrc/net/bind9/patches/patch-ap 1.1 - pkgsrc/net/bind9/patches/patch-aq 1.1 Module Name: pkgsrc Committed By: taca Date: Thu Aug 17 14:14:18 UTC 2006 Modified Files: pkgsrc/net/bind9: Makefile PLIST distinfo pkgsrc/net/bind9/patches: patch-ac patch-ad patch-af patch-ai patch-aj patch-al Added Files: pkgsrc/net/bind9/patches: patch-am Removed Files: pkgsrc/net/bind9/patches: patch-aa patch-ae patch-ah Log Message: Update bind to 9.3.2. Changes are huge, so please see http://www.isc.org/sw/bind/bind9.3.php. --- Module Name: pkgsrc Committed By: seb Date: Mon Aug 28 16:00:45 UTC 2006 Modified Files: pkgsrc/net/bind9: Makefile distinfo Added Files: pkgsrc/net/bind9/patches: patch-an patch-ao Log Message: Bump PKGREVISION to 1. Fix build on NetBSD/sparc64 3.x: sync CPP symbols usage between struct addrinfo definition and its usage in getaddrinfo(). While here define struct addrinfo's pad members the same way as in NetBSD's /usr/include/netbsd.h and sync code in lib/bind/irs/getaddrinfo.c:getaddrinfo(). This had been reported to bind9-bugs at isc dot org. --- Module Name: pkgsrc Committed By: rillig Date: Sun Sep 3 22:58:26 UTC 2006 Modified Files: pkgsrc/net/bind9: Makefile Log Message: Added the relevant variables to BUILD_DEFS. --- Module Name: pkgsrc Committed By: adrianp Date: Tue Sep 5 20:45:32 UTC 2006 Modified Files: pkgsrc/net/bind9: Makefile distinfo Added Files: pkgsrc/net/bind9/patches: patch-ap patch-aq Log Message: Fixes for CVE-2006-4095 and CVE-2006-4096 from bind-9.3.2-P1 * Assertion failure in ISC BIND SIG query processing (CVE-2006-4095) - Recursive servers Queries for SIG records will trigger an assertion failure if more than one RRset is returned. However exposure can be minimized by restricting which sources can ask for recursion. - Authoritative servers If a nameserver is serving a RFC 2535 DNSSEC zone and is queried for the SIG records where there are multiple RRsets, then the named program will trigger an assertion failure when it tries to construct the response. * INSIST failure in ISC BIND recursive query handling code (CVE-2006-4096) It is possible to trigger an INSIST failure by sending enough recursive queries such that the response to the query arrives after all the clients waiting for the response have left the recursion queue. However exposure can be minimized by restricting which sources can ask for recursion. @ text @a0 22 $NetBSD: patch-ao,v 1.1.2.1 2006/09/07 11:20:44 ghen Exp $ --- lib/bind/irs/getaddrinfo.c.orig 2005-07-28 07:43:19.000000000 +0000 +++ lib/bind/irs/getaddrinfo.c @@@@ -332,7 +332,7 @@@@ getaddrinfo(hostname, servname, hints, r pai->ai_family = PF_UNSPEC; pai->ai_socktype = ANY; pai->ai_protocol = ANY; -#ifdef __sparcv9 +#if (defined(sun) && defined(_SOCKLEN_T) && defined(__sparc9)) || (defined(__NetBSD__) && (((defined(__sparc__) || defined(__i386__)) && defined(_LP64)) || defined(__alpha__))) /* * clear _ai_pad to preserve binary * compatibility with previously compiled 64-bit @@@@ -365,7 +365,7 @@@@ getaddrinfo(hostname, servname, hints, r } memcpy(pai, hints, sizeof(*pai)); -#ifdef __sparcv9 +#if (defined(sun) && defined(_SOCKLEN_T) && defined(__sparc9)) || (defined(__NetBSD__) && (((defined(__sparc__) || defined(__i386__)) && defined(_LP64)) || defined(__alpha__))) /* * We need to clear _ai_pad to preserve binary * compatibility. See prior comment. @ 1.1.6.1 log @Pullup ticket 2010 - requested by adrianp security update for bind9 - pkgsrc/net/bind9/Makefile 1.85-1.86 - pkgsrc/net/bind9/distinfo 1.30 - pkgsrc/net/bind9/patches/patch-ao 1.2 - pkgsrc/net/bind9/patches/patch-ap removed - pkgsrc/net/bind9/patches/patch-aq removed Module Name: pkgsrc Committed By: adrianp Date: Sun Jan 28 01:31:52 UTC 2007 Modified Files: pkgsrc/net/bind9: Makefile distinfo pkgsrc/net/bind9/patches: patch-ao Removed Files: pkgsrc/net/bind9/patches: patch-ap patch-aq Log Message: Update to 9.3.4 Lots of changes, see http://www.isc.org/sw/bind/view/?release=9.3.4#RELEASE for all the details: In brief: 2126. [security] Serialise validation of type ANY responses. 2124. [security] It was possible to dereference a freed fetch context. 2089. [security] Raise the minimum safe OpenSSL versions to OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions prior to these have known security flaws which are (potentially) exploitable in named. 2088. [security] Change the default RSA exponent from 3 to 65537. 2066. [security] Handle SIG queries gracefully. 1941. [bug] ncache_adderesult() should set eresult even if no rdataset is passed to it. --- Module Name: pkgsrc Committed By: tron Date: Tue Jan 30 15:04:34 UTC 2007 Modified Files: pkgsrc/net/bind9: Makefile Log Message: Fix permission problems: - "share/doc/bind9" shouldn't be group-writable. - "share/doc/bind9/arm/Bv9ARM.pdf" shouldn't be executable. Bump package revision because of these fixes. @ text @d1 1 a1 1 $NetBSD: patch-ao,v 1.2 2007/01/28 01:31:52 adrianp Exp $ d3 1 a3 1 --- lib/bind/irs/getaddrinfo.c.orig 2006-11-13 05:04:49.000000000 +0000 d5 1 a5 1 @@@@ -332,7 +332,8 @@@@ getaddrinfo(hostname, servname, hints, r d9 1 a9 1 -#if defined(sun) && defined(_SOCKLEN_T) && defined(__sparcv9) a10 1 + d14 1 a14 1 @@@@ -365,7 +366,7 @@@@ getaddrinfo(hostname, servname, hints, r d18 1 a18 1 -#if defined(sun) && defined(_SOCKLEN_T) && defined(__sparcv9) @