FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Fri, 27 May 2011
[ 23:47:39 dougb ] Original commit 
bind96 dns  Deleted Deprecated Expired files touched by this commit  An older version of this port was marked as vulnerable. BIND DNS suite with updated DNSSEC and threads
bind97 dns  Deleted Deprecated Expired files touched by this commit  An older version of this port was marked as vulnerable. BIND DNS suite with updated DNSSEC and threads
Upgrade to 9.6-ESV-R4-P1 and 9.7.3-P1, which address the following issues:

1. Very large RRSIG RRsets included in a negative cache can trigger
an assertion failure that will crash named (BIND 9 DNS) due to an
off-by-one error in a buffer size check.

This bug affects all resolving name servers, whether DNSSEC validation
is enabled or not, on all BIND versions prior to today. There is a
possibility of malicious exploitation of this bug by remote users.

2. Named could fail to validate zones listed in a DLV that validated
insecure without using DLV and had DS records in the parent zone.

Add a patch provided by ru@ and confirmed by ISC to fix a crash at
shutdown time when a SIG(0) key is being used.

Number of ports [& non-ports] in this commit: 2

Showing files for just one port: dns/bind96

show all files

hide all files


3 files found
ActionRevisionLinksFile
modify 1.115 View diff View revision /ports/head/dns/bind96/Makefile
modify 1.67 View diff View revision /ports/head/dns/bind96/distinfo
import 1.1 View revision /ports/head/dns/bind96/files/patch-bin__nsupdate__nsupdate.c
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
asterisk11Sep 18
squidSep 18
squid33Sep 18
dbusSep 17
nginxSep 16
nginx-develSep 16
phpmyadminSep 13
ossec-hids-clientSep 11
ossec-hids-localSep 11
ossec-hids-serverSep 11
chromiumSep 09
trafficserverSep 05
apache22*Sep 03
apache22-event-mpm*Sep 03
apache22-itk-mpm*Sep 03

8 vulnerabilities affecting 19 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24132
Broken 116
Deprecated 46
Ignore 370
Forbidden 3
Restricted 205
No CDROM 94
Vulnerable 20
Expired 1
Set to expire 41
Interactive 0
new 24 hours 1
new 48 hours73
new 7 days92
new fortnight137
new month294


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.