src-test/lib/bind/dns, branch stable/7FreeBSD source treehttps://cgit-dev.freebsd.org/src-test/atom?h=stable%2F72011-08-02T07:55:50ZNon-functional changes related to version 9.4-ESV-R52011-08-02T07:55:50ZDoug Bartondougb@FreeBSD.org2011-08-02T07:55:50Zurn:sha1:613b2dd8f2823b3f2ac09d27668723e194a8362c
(format of time stamp in CVS $Id, copyright updates)
Upgrade to BIND 9.4-ESV. This version incorporates all bug and security2010-02-16T05:14:51ZDoug Bartondougb@FreeBSD.org2010-02-16T05:14:51Zurn:sha1:fcbd7a33209fec710018a4fb25a72bf507d4f95e
fixes since the release of 9.4.3, including the most recent -P5 security
fix detailed below.
From the README:
BIND 9.4-ESV will be supported until December 31, 2010, at
which time you will need to upgrade to the current release
of BIND.
This versions address the following vulnerabilities:
BIND 9 Cache Update from Additional Section
https://www.isc.org/advisories/CVE-2009-4022v6
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022
A nameserver with DNSSEC validation enabled may incorrectly add
unauthenticated records to its cache that are received during the
resolution of a recursive client query
BIND 9 DNSSEC validation code could cause bogus NXDOMAIN responses
https://www.isc.org/advisories/CVE-2010-0097
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
There was an error in the DNSSEC NSEC/NSEC3 validation code that could
cause bogus NXDOMAIN responses (that is, NXDOMAIN responses for records
proven by NSEC or NSEC3 to exist) to be cached as if they had validated
correctly
These issues only affect systems with DNSSEC validation enabled.
Approved by: re (kensmith)
MFC the BIND 9.4.3 and 9.4.3-P1 updates2009-01-10T03:01:18ZDoug Bartondougb@FreeBSD.org2009-01-10T03:01:18Zurn:sha1:35adfd7eebcbac49d5aa3a3854e3126e3bc4476eUpdate generated files for BIND 9.4.12007-06-02T23:24:14ZDoug Bartondougb@FreeBSD.org2007-06-02T23:24:14Zurn:sha1:47f2e4235cc03a571af21948bc97e498ff5b643bUpdate bmake glue for the BIND 9.4.1 import.2007-06-02T23:19:58ZDoug Bartondougb@FreeBSD.org2007-06-02T23:19:58Zurn:sha1:d6ceb6db22c215fe821c9a0e85205954d153c217
This includes a return to building with threads, since one of the
major focuses of the 9.4.x branch is to improve thread performance.
Update generated files for BIND 9.3.42007-01-29T18:33:18ZDoug Bartondougb@FreeBSD.org2007-01-29T18:33:18Zurn:sha1:7f4199b21314f504c489ebcb0962aae7a7a8f5d7Changes to generated files related to the 9.3.3 import.2006-12-10T07:11:04ZDoug Bartondougb@FreeBSD.org2006-12-10T07:11:04Zurn:sha1:b02f06c3da89565911b19aad30d64f5b37b76214Reimplementation of world/kernel build options. For details, see:2006-03-17T18:54:44ZRuslan Ermilovru@FreeBSD.org2006-03-17T18:54:44Zurn:sha1:e1fe3dba5ce2826061f6489765be9b4a341736a9
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
The src.conf(5) manpage is to follow in a few days.
Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
Finish the removal of threads support in ../config.mk,v 1.15.2005-11-07T15:22:35ZRuslan Ermilovru@FreeBSD.org2005-11-07T15:22:35Zurn:sha1:1e4146ce4bf592099de22122abd9c3da53bd5992Regenerate for 9.3.12005-03-17T08:39:12ZDoug Bartondougb@FreeBSD.org2005-03-17T08:39:12Zurn:sha1:abc776e5fc36483cae7577bac1299224e99cf2ba