Commit graph

15 commits

Author SHA1 Message Date
reed
ae10d9fd17 Update to 9.5.1-P3.
From CHANGES:
2640.   [security]      A specially crafted update packet will cause named
                        to exit. [RT #20000]
2009-07-29 00:24:03 +00:00
obache
9286987de4 Update HOMEPAGE url. 2009-07-24 12:30:00 +00:00
joerg
76039544d1 Remove @dirrm related logic. 2009-06-14 22:57:58 +00:00
joerg
62d1ba2bac Remove @dirrm entries from PLISTs 2009-06-14 18:03:28 +00:00
hasso
9d2140de08 Make these compile on DragonFly master. 2009-04-07 17:38:10 +00:00
tron
0554442edb Add URL for mirror on "ftp.belnet.be" to master site list. 2009-03-23 14:43:13 +00:00
adrianp
40c2e9e502 --- 9.5.1-P2 released ---
2579.	[bug]		DNSSEC lookaside validation failed to handle unknown
			algorithms. [RT #19479]
2009-03-22 15:34:03 +00:00
joerg
2d1ba244e9 Simply and speed up buildlink3.mk files and processing.
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
2009-03-20 19:23:50 +00:00
adrianp
f01a58e8f1 Fix build on OpenSolaris
http://src.opensolaris.org/source/xref/sfw/usr/src/cmd/bind/getaddrinfo.c.patch
2009-02-21 14:43:03 +00:00
adrianp
ba9002ed10 Changes since 9.5.1:
2522.	[security]	Handle -1 from DSA_do_verify().
2009-01-08 09:02:50 +00:00
adrianp
ffb0122ed9 Update to 9.5.1
Specifying a fixed query source port was broken.
Address race condition in the socket code.
Give TCP connections longer to complete.
libxml2: support versions 2.7.* in addition to 2.6.*.
Document -m (enable memory usage debugging) option for dig
Set initial timeout to 800ms.

For all the details see:
 http://oldwww.isc.org/sw/bind/view/?release=9.5.1#RELEASE
2009-01-04 00:11:55 +00:00
spz
d045f6e2b4 add options framework, and optionalize (default off) the building of the
xml statistics server (+bump pkgrev)
2008-11-29 21:47:32 +00:00
adrianp
4c105f6f2d Changes since 9.5.0-P1:
--- 9.5.0-P2 released ---

2406.   [bug]           Some operating systems have FD_SETSIZE set to a
			low value by default, which can cause resource
			exhaustion when many simultaneous connections are
			open.  Linux in particular makes it difficult to
			increase this value.  To use more sockets with
			select(), set ISC_SOCKET_FDSETSIZE.  Example:
			STD_CDEFINES="-DISC_SOCKET_FDSETSIZE=4096" ./configure
			(This should not be necessary in most cases, and
			never for an authoritative-only server.) [RT #18328]

2405.   [cleanup]       The default value for dnssec-validation was changed to
			"yes" in 9.5.0-P1 and all subsequent releases; this
			was inadvertently omitted from CHANGES at the time.

2404.	[port]		hpux: files unlimited support.

2403.	[bug]		TSIG context leak. [RT #18341]

2402.	[port]		Support Solaris 2.11 and over. [RT #18362]

2401.	[bug]		Expect to get E[MN]FILE errno internal_accept()
			(from accept() or fcntl() system calls). [RT #18358]

2399.	[bug]		Abort timeout queries to reduce the number of open
			UDP sockets. [RT #18367]

2398.	[bug]           Improve file descriptor management.  New,
			temporary, named.conf option reserved-sockets,
			default 512. [RT #18344]

2397.	[bug]		gssapi_functions had too many elements. [RT #18355]

2396.	[bug]		Don't set SO_REUSEADDR for randomized ports.
			[RT #18336]

2395.	[port]		Avoid warning and no effect from "files unlimited"
			on Linux when running as root. [RT #18335]

2394.	[bug]		Default configuration options set the limit for
			open files to 'unlimited' as described in the
			documentation. [RT #18331]

2393.   [bug]           nested acls containing keys could trigger an
			assertion in acl.c. [RT #18166]

2392.	[bug]		remove 'grep -q' from acl test script, some platforms
			don't support it. [RT #18253]

2387.	[bug]		Silence compiler warnings in lib/isc/radix.c.
			[RT #18147] [RT #18258]
2008-08-03 18:42:31 +00:00
adrianp
a9c2e37573 Changes since 9.5.0:
--- 9.5.0-P1 released ---

2375.   [security]      Fully randomize UDP query ports to improve
			forgery resilience. [RT #17949]
2008-07-08 21:55:25 +00:00
adrianp
36baba5def BIND 9.5.0
BIND 9.5.0 has a number of new features over 9.4, including:

- GSS-TSIG support (RFC 3645).
- DHCID support.
- Experimental http server and statistics support for named via xml.
- More detailed statistics counters including those supported in BIND 8.
- Faster ACL processing.
- Internal documentation generated by Doxygen.
- Efficient LRU cache-cleaning mechanism.
- NSID support (RFC 5001).
2008-06-21 23:15:28 +00:00