ports/dns/bind94, branch main

BIND 9.4.x is now EOL

2011-06-01T00:22:22Z

Upgrade to 9.4-ESV-R4-P1, which addresses the following issues:

2011-05-27T23:46:58Z

1. Very large RRSIG RRsets included in a negative cache can trigger an assertion failure that will crash named (BIND 9 DNS) due to an off-by-one error in a buffer size check. This bug affects all resolving name servers, whether DNSSEC validation is enabled or not, on all BIND versions prior to today. There is a possibility of malicious exploitation of this bug by remote users. 2. Named could fail to validate zones listed in a DLV that validated insecure without using DLV and had DS records in the parent zone.

Miscellaneous cleanups and fixes, some of the windowmaker stuff

2011-05-16T05:22:09Z

gracefully provided by danfe.

The actual EOL date is 2011-05-31, as clarified in

2011-01-08T02:31:09Z

https://lists.isc.org/pipermail/bind-users/2011-January/082285.html

Give people fair warning:

2010-12-18T01:29:34Z

DEPRECATED= Reaches EOL May 2011 EXPIRATION_DATE= 2011-04-30 While I'm here update CONFLICTS for bind98

Update to version 9.4-ESV-R4, the latest from ISC, which addresses

2010-12-03T23:57:16Z

the following security vulnerability. For more information regarding these issues please see: http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories Key algorithm rollover http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614 Affects resolver operators who are validating with DNSSEC, and querying zones which are in a key rollover period. The bug will cause answers to incorrectly be marked as insecure. For the port: 1. Add CONFLICT for the ../bind-tools port 2. Remove CONFLICT for the removed ../bind9 port 3. Remove OPTION for threads on < RELENG_7 4. Remove MD5 from distinfo 5. Switch to pkg-install to create the symlinks to /etc/namedb/ as requested in [1] PR: ports/151635 [1] Submitted by: Benjamin Lee [1]

Update to 9.4-ESV-R3, the latest from ISC.

2010-10-19T00:12:11Z

Update to the latest patch set from ISC, which addresses the following:

2010-05-20T06:34:15Z

Named could return SERVFAIL for negative responses from unsigned zones.

Update to the latest patchfix releases to deal with the problems

2010-03-17T05:35:03Z

related to the handling of broken DNSSEC trust chains. This fix is only necessary for those who have DNSSEC validation enabled and configure trust anchors from third parties, either manually, or through a system like DLV.

Upgrade to 9.4-ESV, the first of the "Extended Support Releases"

2010-02-02T07:14:33Z

from ISC. It has numerous bug fixes compared to 9.4.3*, however in the case of this version "extended" only applies till 2010/12/31 so serious BIND users are still encouraged to upgrade to 9.6.x.