pkgsrc/net/bind99/Makefile
taca dc9a5f5b9f Update bind99 to 9.9.9pl5 (BIND 9.9.9-P5), including security fixes.
--- 9.9.9-P5 released ---

4530.	[bug]		Change 4489 broke the handling of CNAME -> DNAME
			in responses resulting in SERVFAIL being returned.
			[RT #43779]

4528.	[bug]		Only set the flag bits for the i/o we are waiting
			for on EPOLLERR or EPOLLHUP. [RT #43617]

4519.	[port]		win32: handle ERROR_MORE_DATA. [RT #43534]

4517.	[security]	Named could mishandle authority sections that were
			missing RRSIGs triggering an assertion failure.
			(CVE-2016-9444) [RT # 43632]

4510.	[security]	Named mishandled some responses where covering RRSIG
			records are returned without the requested data
			resulting in a assertion failure. (CVE-2016-9147)
			[RT #43548]

4508.	[security]	Named incorrectly tried to cache TKEY records which
			could trigger a assertion failure when there was
			a class mismatch. (CVE-2016-9131) [RT #43522]
2017-01-12 00:05:46 +00:00

80 lines
2 KiB
Makefile

# $NetBSD: Makefile,v 1.62 2017/01/12 00:05:46 taca Exp $
DISTNAME= bind-${BIND_VERSION}
PKGNAME= ${DISTNAME:S/-P/pl/}
CATEGORIES= net
MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
MAINTAINER= pkgsrc-users@NetBSD.org
HOMEPAGE= http://www.isc.org/software/bind/
COMMENT= Berkeley Internet Name Daemon implementation of DNS, version 9.9
CONFLICTS+= host-[0-9]*
MAKE_JOBS_SAFE= no
BIND_VERSION= 9.9.9-P5
.include "../../mk/bsd.prefs.mk"
BUILD_DEFS+= BIND_DIR VARBASE
.include "options.mk"
USE_TOOLS+= pax perl
USE_LIBTOOL= yes
GNU_CONFIGURE= yes
#CONFIG_SHELL= sh -x
CONFIGURE_ARGS+= --with-libtool
CONFIGURE_ARGS+= --sysconfdir=/etc
CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q}
CONFIGURE_ARGS+= --disable-openssl-version-check
CONFIGURE_ARGS+= --with-openssl=${SSLBASE:Q}
CONFIGURE_ARGS+= --with-gssapi=${KRB5BASE:Q}
CONFIGURE_ARGS+= --with-python=no
.if ${MACHINE_PLATFORM:MNetBSD-*-mipsel} != ""
CONFIGURE_ARGS+= --disable-atomic
.endif
.if ${MACHINE_PLATFORM:MNetBSD-*-powerpc} != ""
CONFIGURE_ARGS+= --disable-threads
.endif
CONFIGURE_ARGS.DragonFly+= --disable-kqueue
PKG_GROUPS_VARS+= BIND_GROUP
PKG_USERS_VARS+= BIND_USER
PKG_GROUPS= ${BIND_GROUP}
PKG_USERS= ${BIND_USER}:${BIND_GROUP}
PKG_GECOS.${BIND_USER}= Named pseudo-user
PKG_HOME.${BIND_USER}= ${BIND_DIR}
DOCS= CHANGES FAQ README
FILES_SUBST+= BIND_GROUP=${BIND_GROUP:Q} \
BIND_USER=${BIND_USER:Q} PAX=${PAX:Q} \
SSLBASE=${SSLBASE:Q}
MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}
DOCDIR= ${DESTDIR}${PREFIX}/share/doc/bind9
# include/isc/ipv6.h is installed on non-ipv6 platforms
PLIST_VARS+= inet6
.if !empty(MISSING_FEATURES:Minet6)
PLIST.inet6= yes
.endif
RCD_SCRIPTS= lwresd named9
SMF_METHODS= named
INSTALLATION_DIRS+= ${DOCDIR} share/doc/bind9/arm
post-install:
.for f in ${DOCS}
${INSTALL_DATA} ${WRKSRC}/${f} ${DOCDIR}
.endfor
${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm
.include "../../security/openssl/buildlink3.mk"
.include "../../mk/krb5.buildlink3.mk"
.include "../../mk/bsd.pkg.mk"