pkgsrc/net/bind98/distinfo
taca 1dd5322937 Update bind98 package to 9.8.4.
Here are change changes from release note.  Note security fixes except
CVE-2012-5166 should be already fixed in previous version of bind98 package.

Please refer https://kb.isc.org/article/AA-00797 for list of full bug fixes.


Security Fixes

* A deliberately constructed combination of records could cause named to hang
  while populating the additional section of a response. [CVE-2012-5166] [RT
  #31090]
* Prevents a named assert (crash) when queried for a record whose RDATA
  exceeds 65535 bytes [CVE-2012-4244] [RT #30416]
* Prevents a named assert (crash) when validating caused by using "Bad cache"
  data before it has been initialized. [CVE-2012-3817] [RT #30025]
* A condition has been corrected where improper handling of zero-length RDATA
  could cause undesirable behavior, including termination of the named
  process. [CVE-2012-1667] [RT #29644]


New Features

* Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are
  now supported per RFC 6605. [RT #21918]


Feature Changes

* Improves OpenSSL error logging [RT #29932]
* nslookup now returns a nonzero exit code when it is unable to get an answer.
  [RT #29492]
2012-10-10 03:06:37 +00:00

12 lines
765 B
Text

$NetBSD: distinfo,v 1.15 2012/10/10 03:06:37 taca Exp $
SHA1 (bind-9.8.4.tar.gz) = 3ea4b34fa12868796e4aad06663e7d1689b1cbe1
RMD160 (bind-9.8.4.tar.gz) = 20940bcf6c47eefaec905d474a3470f4aa9aa9a8
Size (bind-9.8.4.tar.gz) = 7141026 bytes
SHA1 (patch-bin_dig_dighost.c) = 3f37033cc64e1153268ab437fab533d2920bb18c
SHA1 (patch-bin_tests_system_Makefile.in) = 650ac962464e23f6c4278e7025f55f282789f9c9
SHA1 (patch-config.threads.in) = 045531d8378a88c654ab98ba6ea65786c8cf4e2b
SHA1 (patch-configure) = 08f878fd3a5d3d17e0cf55d01344ddc84991967f
SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d
SHA1 (patch-lib_lwres_getnameinfo.c) = c26dcff4637b7beb16b66c32b304d0f187390eed