mirror of
https://git.FreeBSD.org/ports.git
synced 2024-12-15 03:14:23 +00:00
Update to latest commit.
MFH: 2017Q1 Security: CVE-2017-3135 Sponsored by: Absolight
This commit is contained in:
parent
9d8404049b
commit
b8e18e40c3
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=433984
@ -30,8 +30,8 @@ COMMENT= BIND DNS suite with updated DNSSEC and DNS64
|
||||
LICENSE= MPL
|
||||
|
||||
# ISC releases things like 9.8.0-P1, which our versioning doesn't like
|
||||
ISCVERSION= 9.12.0a.2017.01.21
|
||||
HASH= 4502e3c
|
||||
ISCVERSION= 9.12.0a.2017.02.09
|
||||
HASH= 1df7a6f
|
||||
|
||||
USES= cpe libedit
|
||||
|
||||
|
@ -1,3 +1,3 @@
|
||||
TIMESTAMP = 1485177532
|
||||
SHA256 (bind9-4502e3c.tar.gz) = 487304c414a7cd9a7ceab6b10d277a79066b2eef92686f08fed90b7fa0e8105f
|
||||
SIZE (bind9-4502e3c.tar.gz) = 11847026
|
||||
TIMESTAMP = 1486988913
|
||||
SHA256 (bind9-1df7a6f.tar.gz) = ff9607e41d220fe2b45301fb064078d960a96d69e0356512033ab9cdd8905bef
|
||||
SIZE (bind9-1df7a6f.tar.gz) = 11873079
|
||||
|
@ -1,4 +1,4 @@
|
||||
--- bin/named/config.c.orig 2017-01-12 03:25:45 UTC
|
||||
--- bin/named/config.c.orig 2017-02-09 21:52:45 UTC
|
||||
+++ bin/named/config.c
|
||||
@@ -158,6 +158,8 @@ options {\n\
|
||||
lame-ttl 600;\n\
|
||||
@ -9,9 +9,9 @@
|
||||
max-cache-ttl 604800; /* 1 week */\n\
|
||||
transfer-format many-answers;\n\
|
||||
max-cache-size 90%;\n\
|
||||
--- bin/named/server.c.orig 2017-01-12 03:25:45 UTC
|
||||
--- bin/named/server.c.orig 2017-02-09 21:52:45 UTC
|
||||
+++ bin/named/server.c
|
||||
@@ -3635,6 +3635,16 @@ configure_view(dns_view_t *view, dns_vie
|
||||
@@ -3743,6 +3743,16 @@ configure_view(dns_view_t *view, dns_vie
|
||||
}
|
||||
|
||||
obj = NULL;
|
||||
@ -28,7 +28,7 @@
|
||||
result = ns_config_get(maps, "max-cache-ttl", &obj);
|
||||
INSIST(result == ISC_R_SUCCESS);
|
||||
view->maxcachettl = cfg_obj_asuint32(obj);
|
||||
--- lib/dns/include/dns/view.h.orig 2017-01-12 03:25:45 UTC
|
||||
--- lib/dns/include/dns/view.h.orig 2017-02-09 21:52:45 UTC
|
||||
+++ lib/dns/include/dns/view.h
|
||||
@@ -146,6 +146,8 @@ struct dns_view {
|
||||
isc_boolean_t requestnsid;
|
||||
@ -39,9 +39,9 @@
|
||||
dns_ttl_t maxncachettl;
|
||||
isc_uint32_t nta_lifetime;
|
||||
isc_uint32_t nta_recheck;
|
||||
--- lib/dns/resolver.c.orig 2017-01-12 03:25:45 UTC
|
||||
--- lib/dns/resolver.c.orig 2017-02-09 21:52:45 UTC
|
||||
+++ lib/dns/resolver.c
|
||||
@@ -5462,6 +5462,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
|
||||
@@ -5467,6 +5467,18 @@ cache_name(fetchctx_t *fctx, dns_name_t
|
||||
}
|
||||
|
||||
/*
|
||||
@ -60,9 +60,9 @@
|
||||
* Enforce the configure maximum cache TTL.
|
||||
*/
|
||||
if (rdataset->ttl > res->view->maxcachettl)
|
||||
--- lib/isccfg/namedconf.c.orig 2017-01-12 03:25:45 UTC
|
||||
--- lib/isccfg/namedconf.c.orig 2017-02-09 21:52:45 UTC
|
||||
+++ lib/isccfg/namedconf.c
|
||||
@@ -1782,6 +1782,8 @@ view_clauses[] = {
|
||||
@@ -1864,6 +1864,8 @@ view_clauses[] = {
|
||||
{ "nosit-udp-size", &cfg_type_uint32, CFG_CLAUSEFLAG_OBSOLETE },
|
||||
{ "max-acache-size", &cfg_type_sizenodefault, 0 },
|
||||
{ "max-cache-size", &cfg_type_sizeorpercent, 0 },
|
||||
|
@ -40,6 +40,7 @@ include/dns/ds.h
|
||||
include/dns/dsdigest.h
|
||||
include/dns/dyndb.h
|
||||
include/dns/ecdb.h
|
||||
include/dns/ecs.h
|
||||
include/dns/edns.h
|
||||
include/dns/enumclass.h
|
||||
include/dns/enumtype.h
|
||||
|
Loading…
Reference in New Issue
Block a user