spz 0b2a0db4dc security update: ... BIND 9.5.2-P2 is a SECURITY PATCH for BIND 9.5.2. It addresses two potential cache poisoning vulnerabilities, both of which could allow a validating recursive nameserver to cache data which had not been authenticated or was invalid. CVE identifiers: CVE-2009-4022, CVE-2010-0097 CERT advisories: VU#418861, VU#360341 Changes since 9.5.2-P1: 2831. [security] Do not attempt to validate or cache out-of-bailiwick data returned with a secure answer; it must be re-fetched from its original source and validated in that context. [RT #20819] 2828. [security] Cached CNAME or DNAME RR could be returned to clients without DNSSEC validation. [RT #20737] 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]		2010-01-21 19:42:16 +00:00
..
files	Modify named9.sh to create /dev/random in chrooted environment	2009-12-11 16:21:21 +00:00
patches	Update "bind95" package to version 9.5.2pl1. Changes since 9.5.1pl3:	2009-11-30 11:58:30 +00:00
buildlink3.mk	Simply and speed up buildlink3.mk files and processing.	2009-03-20 19:23:50 +00:00
builtin.mk
DESCR
distinfo	security update:	2010-01-21 19:42:16 +00:00
Makefile	security update:	2010-01-21 19:42:16 +00:00
MESSAGE
options.mk	add options framework, and optionalize (default off) the building of the	2008-11-29 21:47:32 +00:00
PLIST	Update "bind95" package to version 9.5.2pl1. Changes since 9.5.1pl3:	2009-11-30 11:58:30 +00:00