FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Thu, 8 Jan 2009
[ 08:18:45 dougb ] Original commit 
bind9 dns  Deleted Deprecated Expired files touched by this commit  An older version of this port was marked as vulnerable. Completely new version of the BIND DNS suite with updated DNSSEC
bind94 dns  Deleted Deprecated Expired files touched by this commit The BIND DNS suite with updated DNSSEC and threads
bind95 dns  Deleted Deprecated Expired files touched by this commit The BIND DNS suite with updated DNSSEC and threads
bind96 dns  Deleted Deprecated Expired files touched by this commit  An older version of this port was marked as vulnerable. BIND DNS suite with updated DNSSEC and threads
Update to the -P1 versions of the current BIND ports which contain
the fix for the following vulnerability: https://www.isc.org/node/373

Description:
Return values from OpenSSL library functions EVP_VerifyFinal()
and DSA_do_verify() were not checked properly.

Impact:
It is theoretically possible to spoof answers returned from
zones using the DNSKEY algorithms DSA (3) and NSEC3DSA (6).

In short, if you're not using DNSSEC to verify signatures you have
nothing to worry about.

While I'm here, address the issues raised in the PR by adding a knob
to disable building with OpenSSL altogether (which eliminates DNSSEC
capability), and fix the configure arguments to better deal with the
situation where the user has ssl bits in both the base and LOCALBASE.

PR:             ports/126297
Submitted by:   Ronald F.Guilmette <rfg@tristatelogic.com>

Number of ports [& non-ports] in this commit: 4

Showing files for just one port: dns/bind9

show all files

hide all files


8 files found
ActionRevisionLinksFile
modify 1.86 View diff View revision /ports/head/dns/bind9/Makefile
modify 1.48 View diff View revision /ports/head/dns/bind9/distinfo
modify 1.91 View diff View revision /ports/head/dns/bind94/Makefile
modify 1.51 View diff View revision /ports/head/dns/bind94/distinfo
modify 1.93 View diff View revision /ports/head/dns/bind95/Makefile
modify 1.53 View diff View revision /ports/head/dns/bind95/distinfo
modify 1.95 View diff View revision /ports/head/dns/bind96/Makefile
modify 1.55 View diff View revision /ports/head/dns/bind96/distinfo
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
bugzilla40*Apr 18
bugzilla40*Apr 18
bugzilla42*Apr 18
bugzilla42*Apr 18
bugzilla44*Apr 18
bugzilla44*Apr 18
curlApr 11
dbus-glibApr 11
libaudiofileApr 11
linux-f10-curlApr 11
linux-f10-dbus-glibApr 11
linux-f10-libaudiofileApr 11
linux-f10-nas-libsApr 11
linux-f10-openldapApr 11
mingw32-openssl*Apr 11

13 vulnerabilities affecting 18 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24366
Broken 175
Deprecated 89
Ignore 529
Forbidden 6
Restricted 263
No CDROM 108
Vulnerable 29
Expired 8
Set to expire 76
Interactive 22
new 24 hours 1
new 48 hours6
new 7 days15
new fortnight41
new month143


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.