From 83aa56c48faf0e726f652730c742a8d0e5034f1d Mon Sep 17 00:00:00 2001 From: Doug Barton Date: Tue, 24 Jul 2007 22:02:16 +0000 Subject: Update to 9.4.1-P1, which has fixes for the following: 1. The default access control lists (acls) are not being correctly set. If not set anyone can make recursive queries and/or query the cache contents. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 2. The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 --- dns/bind94/Makefile | 4 ++-- dns/bind94/distinfo | 12 ++++++------ dns/bind95/Makefile | 4 ++-- dns/bind95/distinfo | 12 ++++++------ dns/bind96/Makefile | 4 ++-- dns/bind96/distinfo | 12 ++++++------ 6 files changed, 24 insertions(+), 24 deletions(-) (limited to 'dns') diff --git a/dns/bind94/Makefile b/dns/bind94/Makefile index ccf426c441cc..93f1680d74b0 100644 --- a/dns/bind94/Makefile +++ b/dns/bind94/Makefile @@ -12,7 +12,7 @@ # release you can generally build it cleanly from the source - Doug PORTNAME= bind94 -PORTVERSION= 9.4.1 +PORTVERSION= 9.4.1.1 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} \ http://dougbarton.us/Downloads/%SUBDIR%/ @@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org COMMENT= The BIND DNS suite with updated DNSSEC and threads # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.4.1 +ISCVERSION= 9.4.1-P1 GNU_CONFIGURE= yes CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \ diff --git a/dns/bind94/distinfo b/dns/bind94/distinfo index 7c87fd2ddb58..f3523f39911c 100644 --- a/dns/bind94/distinfo +++ b/dns/bind94/distinfo @@ -1,6 +1,6 @@ -MD5 (bind-9.4.1.tar.gz) = 09b54d35036cb0423b2e618f21766285 -SHA256 (bind-9.4.1.tar.gz) = 79c671ec6c32d84984a5a07e691dbed57a744c3602837cc8e3f4fd0e450a42fa -SIZE (bind-9.4.1.tar.gz) = 6334215 -MD5 (bind-9.4.1.tar.gz.asc) = 3307afb0990b02d78dd8cf96c139c6d5 -SHA256 (bind-9.4.1.tar.gz.asc) = 80ea9d915840730cc23e0f5487dd9e795dfc3dd6cd122c79fd4ca83a399d80b5 -SIZE (bind-9.4.1.tar.gz.asc) = 479 +MD5 (bind-9.4.1-P1.tar.gz) = 44e0514e6105ddaa235394045d9aeb0c +SHA256 (bind-9.4.1-P1.tar.gz) = 912d07be9a6b4fa180d38637bf32ac4e802b087e46fbbf2a76314ecc3444b693 +SIZE (bind-9.4.1-P1.tar.gz) = 6341409 +MD5 (bind-9.4.1-P1.tar.gz.asc) = 2d93fd12d3aa9895c23c09784f7fe0b7 +SHA256 (bind-9.4.1-P1.tar.gz.asc) = b66a7ad4a8dd2a375fb961ab9b8a744fa55b034c0b7233b4490b6351e36f5030 +SIZE (bind-9.4.1-P1.tar.gz.asc) = 478 diff --git a/dns/bind95/Makefile b/dns/bind95/Makefile index ccf426c441cc..93f1680d74b0 100644 --- a/dns/bind95/Makefile +++ b/dns/bind95/Makefile @@ -12,7 +12,7 @@ # release you can generally build it cleanly from the source - Doug PORTNAME= bind94 -PORTVERSION= 9.4.1 +PORTVERSION= 9.4.1.1 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} \ http://dougbarton.us/Downloads/%SUBDIR%/ @@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org COMMENT= The BIND DNS suite with updated DNSSEC and threads # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.4.1 +ISCVERSION= 9.4.1-P1 GNU_CONFIGURE= yes CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \ diff --git a/dns/bind95/distinfo b/dns/bind95/distinfo index 7c87fd2ddb58..f3523f39911c 100644 --- a/dns/bind95/distinfo +++ b/dns/bind95/distinfo @@ -1,6 +1,6 @@ -MD5 (bind-9.4.1.tar.gz) = 09b54d35036cb0423b2e618f21766285 -SHA256 (bind-9.4.1.tar.gz) = 79c671ec6c32d84984a5a07e691dbed57a744c3602837cc8e3f4fd0e450a42fa -SIZE (bind-9.4.1.tar.gz) = 6334215 -MD5 (bind-9.4.1.tar.gz.asc) = 3307afb0990b02d78dd8cf96c139c6d5 -SHA256 (bind-9.4.1.tar.gz.asc) = 80ea9d915840730cc23e0f5487dd9e795dfc3dd6cd122c79fd4ca83a399d80b5 -SIZE (bind-9.4.1.tar.gz.asc) = 479 +MD5 (bind-9.4.1-P1.tar.gz) = 44e0514e6105ddaa235394045d9aeb0c +SHA256 (bind-9.4.1-P1.tar.gz) = 912d07be9a6b4fa180d38637bf32ac4e802b087e46fbbf2a76314ecc3444b693 +SIZE (bind-9.4.1-P1.tar.gz) = 6341409 +MD5 (bind-9.4.1-P1.tar.gz.asc) = 2d93fd12d3aa9895c23c09784f7fe0b7 +SHA256 (bind-9.4.1-P1.tar.gz.asc) = b66a7ad4a8dd2a375fb961ab9b8a744fa55b034c0b7233b4490b6351e36f5030 +SIZE (bind-9.4.1-P1.tar.gz.asc) = 478 diff --git a/dns/bind96/Makefile b/dns/bind96/Makefile index ccf426c441cc..93f1680d74b0 100644 --- a/dns/bind96/Makefile +++ b/dns/bind96/Makefile @@ -12,7 +12,7 @@ # release you can generally build it cleanly from the source - Doug PORTNAME= bind94 -PORTVERSION= 9.4.1 +PORTVERSION= 9.4.1.1 CATEGORIES= dns net ipv6 MASTER_SITES= ${MASTER_SITE_ISC} \ http://dougbarton.us/Downloads/%SUBDIR%/ @@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org COMMENT= The BIND DNS suite with updated DNSSEC and threads # ISC releases things like 9.4.0b3, which our versioning doesn't like -ISCVERSION= 9.4.1 +ISCVERSION= 9.4.1-P1 GNU_CONFIGURE= yes CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \ diff --git a/dns/bind96/distinfo b/dns/bind96/distinfo index 7c87fd2ddb58..f3523f39911c 100644 --- a/dns/bind96/distinfo +++ b/dns/bind96/distinfo @@ -1,6 +1,6 @@ -MD5 (bind-9.4.1.tar.gz) = 09b54d35036cb0423b2e618f21766285 -SHA256 (bind-9.4.1.tar.gz) = 79c671ec6c32d84984a5a07e691dbed57a744c3602837cc8e3f4fd0e450a42fa -SIZE (bind-9.4.1.tar.gz) = 6334215 -MD5 (bind-9.4.1.tar.gz.asc) = 3307afb0990b02d78dd8cf96c139c6d5 -SHA256 (bind-9.4.1.tar.gz.asc) = 80ea9d915840730cc23e0f5487dd9e795dfc3dd6cd122c79fd4ca83a399d80b5 -SIZE (bind-9.4.1.tar.gz.asc) = 479 +MD5 (bind-9.4.1-P1.tar.gz) = 44e0514e6105ddaa235394045d9aeb0c +SHA256 (bind-9.4.1-P1.tar.gz) = 912d07be9a6b4fa180d38637bf32ac4e802b087e46fbbf2a76314ecc3444b693 +SIZE (bind-9.4.1-P1.tar.gz) = 6341409 +MD5 (bind-9.4.1-P1.tar.gz.asc) = 2d93fd12d3aa9895c23c09784f7fe0b7 +SHA256 (bind-9.4.1-P1.tar.gz.asc) = b66a7ad4a8dd2a375fb961ab9b8a744fa55b034c0b7233b4490b6351e36f5030 +SIZE (bind-9.4.1-P1.tar.gz.asc) = 478 -- cgit v1.2.3