BIND 9.10 includes a number of changes from earlier releases, including:
- DNS Response-rate limiting (DNS RRL)
- A new "prefetch" option can improve recursive resolver performance
- ACLs can now be specified based on geographic location using the
MaxMind GeoIP databases.
- A new compile-time option, NATIVE_PKCS11 allows the BIND 9
cryptography functions to use the PKCS#11 API natively.
*NOTE*
This is a release candidate, it may contain bugs.
*NOTE*
Changes: https://lists.isc.org/pipermail/bind-announce/2014-April/000906.html
Sponsored by: Absolight
- Security fix for safe_eval, which further hardens the checking of
the evaluation function.
- Changing order of variable precendence for system facts, to ensure
that inventory variables take precedence over any facts that may be
set on a host.
- Change Makefile header, add Created by
- Change master sites, add icon
- Simplify REINPLACE
- Add Desktop entry file
PR: ports/188209
Submitted by: Nikolai Lifanov <lifanov@mail.lifanov.com>
The majority of the 234k c++ testsuite patch can be eliminated with
REINPLACE_CMD at the post-extract phase. Now it's 1/100th the size
at 2.3k. No revbump necessary; the testsuite isn't even a default
option. The same treatment can be done to lang/gcc47-aux later.
Quite a few users still depend on this and are getting it from untrusted
sources. Its security track record is actually pretty good still.
SuPHP is still the simplest solution for shared hosting.
Other vendors still provide this as well.
- Add a pkg-message explaining the situation and advising users to move
away from this if possible.
- Stage
- Take maintainership
ARMv5 gnatdroid can't currently be built because sigtramp-armdroid.c
uses thumb instructions that ARMv5 doesn't know. Until this is fixed,
set the port to ignore.
Both gnatdroid ports now using gcc-aux's Makefile.version for it's
portrevision versions. Both now stop using CONFIGURE_ARGS because it
processes the values in an unexpected way.
Both get a revbump due to gcc-aux's binutils-caused revbump.
