| Commit History - (may be incomplete: see CVSWeb link above for full details) |
| Date | By | Description |
16 Jul 2008 21:39:24
  9.4.2.1_1
|
dougb  |
Add an OPTION to turn on the ability of dns/host/nslookup to do
DNSSEC validation.
This is off by default, so no PORTREVISION bump.
Submitted by: Andrei V. Lavreniyuk <andy.lavr@reactor-xg.kiev.ua> |
11 Jul 2008 20:07:17
9.4.2.1_1
|
dougb |
Bump PORTREVISION for the patch to named-checkconf
Add the logic for the THREADS OPTION to be on for 7-RELEASE and above
(and off otherwise) that I'm using in dns/bind95 |
11 Jul 2008 20:05:41
9.4.2.1
|
dougb |
Add a patch to fix named-checkconf. The error condition was not being
properly tested for, so it would not report the error in some cases.
Thanks to marck@FreeBSD and mark@ISC for tracking this one down. |
09 Jul 2008 20:02:01
9.4.2.1
|
dougb |
Upgrade to the -P1 versions of each port, which add stronger randomization
of the UDP query-source ports. The server will still use the same query
port for the life of the process, so users for whom the issue of cache
poisoning is highly significant may wish to periodically restart their
server using /etc/rc.d/named restart, or other suitable method.
In order to take advantage of this randomization users MUST have an
appropriate firewall configuration to allow UDP queries to be sent and
answers to be received on random ports; and users MUST NOT specify a
port number using the query-source[-v6] option.
The avoid-v[46]-udp-ports options exist for users who wish to eliminate
certain port numbers from being chosen by named for this purpose. See
the ARM Chatper 6 for more information.
(Only the first 15 lines of the commit message are shown above  ) |
04 Jul 2008 16:43:37
9.4.2_1
|
dougb |
Update CONFLICTS:
1. To take bind95 into account
2. s/bind9-sdb-ldap/bind9-sdb-mysql/
3. Delete references to BIND 8 |
02 Jun 2008 05:18:45
9.4.2_1
|
dougb |
Update the pkg-message to be even less version-specific, and tell the user
that /etc/rc.d/named will handle everything for them. |
05 Dec 2007 00:44:01
9.4.2_1
|
dougb |
Fix pkg-plist by including a new file.
Pointy hat number N:M (where M = many) goes to: dougb
Approved by: portmgr (erwin) |
03 Dec 2007 09:43:44
9.4.2
|
dougb |
ISC recently announced that BIND 8 has been End-of-Life'd:
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php
Therefore, per the previous announcement, remove the ports for BIND 8.
This includes the chinese/bind8 slave port, and mail/smc-milter which
has a dependency on libbind_r.a from BIND 8.x. The latter has been
unmaintained since 2005, and is 3 versions behind.
Approved by: portmgr (linimon) |
01 Dec 2007 21:53:34
9.4.2
|
dougb |
Update to BIND 9.4.2. Many bugs are fixed, please see the CHANGES
file for more details.
Approved by: portmgr (erwin) |
24 Jul 2007 23:02:16
9.4.1.1
|
dougb |
Update to 9.4.1-P1, which has fixes for the following:
1. The default access control lists (acls) are not being
correctly set. If not set anyone can make recursive queries
and/or query the cache contents.
See also:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925
2. The DNS query id generation is vulnerable to cryptographic
analysis which provides a 1 in 8 chance of guessing the next
query id for 50% of the query ids. This can be used to perform
cache poisoning by an attacker.
This bug only affects outgoing queries, generated by BIND 9 to
answer questions as a resolver, or when it is looking up data
for internal uses, such as when sending NOTIFYs to slave name
servers.
All users are encouraged to upgrade.
See also:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 |
23 Jul 2007 10:36:52
9.4.1
|
rafan |
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
supports them. This is determined by running ``configure --help'' in
do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
subdirectory detection.
PR: ports/111470
Approved by: portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by: pointyhat exp run |
01 May 2007 02:00:01
9.4.1
|
dougb |
Update to version 9.4.1, a security update from ISC:
2172. [bug] query_addsoa() was being called with a non zone db.
[RT #16834]
If you are running BIND 9.4.0 (either pre-release or final),
you are advised to upgrade as soon as possible to BIND 9.4.1. |
26 Feb 2007 07:57:59
9.4.0
|
dougb |
Update to the release version of 9.4.0. |
28 Jan 2007 22:45:54
9.4.0.rc2
|
dougb |
Complete the update for bind94 after the repocopy, and hook it up. |
