Commit graph

5 commits

Author SHA1 Message Date
schmonz
c85aed0869 Add DJB's patch to fix the axfrdns bug reported by Matthew Dempsky,
described here:

http://article.gmane.org/gmane.network.djbdns/13864

Add mutually exclusive options, both by Jeff King, to address the
dnscache poisoning weaknesses described in CVE-2008-4392:

* "djbdns-qmerge1" (from http://www.your.org/dnscache/)
* "djbdns-qmerge2" (from http://article.gmane.org/gmane.network.djbdns/13965)

Both options are included because qmerge1 is better tested but has
known shortcomings, while qmerge2 is probably more correct but (as
yet) less well tested.

Bump PKGREVISION.
2009-04-22 04:48:13 +00:00
schmonz
a99a965a44 Bernhard Roth published his 64-bit tinydns-data fix. Pull it in as
an external patch file via the "tinydns64" option (enabled by
default on sparc64, alpha, and amd64).

Binary package should behave identically, so no PKGREVISION bump.
2005-03-30 10:00:36 +00:00
schmonz
e18010d80b Incorporate patch from Bernhard Roth to correct the default values
generated by tinydns-data on sparc64 (and presumably other 64-bit
platforms). Discussed on the dns list in this thread:

http://marc.theaimsgroup.com/?l=djbdns&m=110845281123105&w=2

Bump PKGREVISION for this user-visible change.

Addresses PR pkg/28420.
2005-03-21 04:03:35 +00:00
schmonz
5b4f879e40 Updated man pages to 20031023. From the changelog:
* merge changes from http://cr.yp.to/djbdns/doc.tar.gz into: axfr-get.8,
    tinydns-data.8.
* pickdns-conf.8, pickdns-data.8, pickdns.8: remove.
* dnscache-conf.8, rbldns-conf.8, tinydns-conf.8, walldns-conf.8: adapt.
* axfrdns-conf.8: new.

pkgsrc changes:
* Convert to bsd.options.mk. Available options: "ignoreip2 inet6".
* Set USE_BUILDLINK3=yes.
* Patch to honor PKG_SYSCONFDIR.
* As long as we're patching, patch the installer to avoid setting unusual
    permissions on ${PREFIX} and ${PREFIX}/bin.
* Work around the standard djbware errno problem on recent Linux glibc.
* Update to the latest pkgsrc djbware RESTRICTED clause.
* Remove the third-party logfile formatters (they can go elsewhere if needed).
* Take maintainership (suggested by zuntum).

Bump PKGREVISION.
2004-09-01 20:07:35 +00:00
schmonz
7028367739 Add Russ Nelson's dnscache patch to ignore IP addresses listed in
root/ignoreip, in response to Verisign's latest silliness. The
behavior of dnscache is unchanged unless you create this file. Bump
PKGREVISION.

While I'm here, change the "post-patch" target to "do-configure",
since that's what it's doing.

See <URL:http://tinydns.org/djbdns-1.05-ignoreip2.patch> for more
information about this patch.
2003-09-24 03:28:12 +00:00