mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-03 01:23:49 +00:00
Code Issues Releases Activity
3e4cdbf400
freebsd-ports/dns
History
Doug Barton 8ad17aaad7 Update to versions 9.8.0-P4, 9.7.3-P3, and 9.6-ESV-R4-P3. 
ALL BIND USERS ENCOURAGED TO UPGRADE IMMEDIATELY

This update addresses the following vulnerabilities:

CVE-2011-2464
=============
Severity:	High
Exploitable:	Remotely

Description:

A defect in the affected BIND 9 versions allows an attacker to remotely
cause the "named" process to exit using a specially crafted packet. This
defect affects both recursive and authoritative servers. The code location
of the defect makes it impossible to protect BIND using ACLs configured
within named.conf or by disabling any features at compile-time or run-time.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464
https://www.isc.org/software/bind/advisories/cve-2011-2464

CVE-2011-2465
=============
Severity:	High
Exploitable:	Remotely

Description:

A defect in the affected versions of BIND could cause the "named" process
to exit when queried, if the server has recursion enabled and was
configured with an RPZ zone containing certain types of records.
Specifically, these are any DNAME record and certain kinds of CNAME
records.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2465
https://www.isc.org/software/bind/advisories/cve-2011-2465

Additional changes in this version:

* If named is configured to be both authoritative and resursive and
  receives a recursive query for a CNAME in a zone that it is
  authoritative for, if that CNAME also points to a zone the server
  is authoritative for, the recursive part of name will not follow
  the CNAME change and the response will not be a complete CNAME
  chain. [RT #24455]

  Thus the patch for this bug has been removed from the port

* Using Response Policy Zone (RPZ) to query a wildcard CNAME label
  with QUERY type SIG/RRSIG, it can cause named to crash. Fix is
  query type independant. [RT #24715] [CVE-2011-1907]
2011-07-05 21:19:20 +00:00
..
adns ftp master site no more available 2011-06-16 06:17:32 +00:00
adsuck adsuck is a DNS relay that returns NXdomain for hosts that match names in a 2011-05-07 15:13:53 +00:00
ares - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
autotrust - change maintainers mail address 2011-03-30 16:13:42 +00:00
bind9-sdb-ldap - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
bind9-sdb-postgresql - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
bind96 Update to versions 9.7.3-P3, and 9.6-ESV-R4-P3. 2011-07-05 21:18:24 +00:00
bind97 Update to versions 9.7.3-P3, and 9.6-ESV-R4-P3. 2011-07-05 21:18:24 +00:00
bind98 Update to versions 9.8.0-P4, 9.7.3-P3, and 9.6-ESV-R4-P3. 2011-07-05 21:19:20 +00:00
bind-tools Miscellaneous cleanups and fixes, some of the windowmaker stuff 2011-05-16 05:22:09 +00:00
bindgraph - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
c-ares Update to c-ares-1.7.4 and fix a bashism in the configure script. 2010-12-19 19:10:48 +00:00
checkdns Fix clang build, using REINPLACE_CMD to change gcc to ${CC}. 2011-07-01 01:33:11 +00:00
crossip - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
curvedns - Mark BROKEN on 9.X: does not configure 2011-03-25 20:16:51 +00:00
ddclient - fix with non-standard PREFIX/LOCALBASE 2011-03-13 14:53:21 +00:00
dhid - Deprecate; Unmaintained, distfile has changed with no explanation, uses pw directly 2011-06-25 20:26:47 +00:00
dhisd - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
djbdns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
djbdns-tools - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dlint Update my e-mail to my FreeBSD one. 2011-06-08 16:52:32 +00:00
dnrd - Use USERS and GROUPS 2011-06-27 17:54:21 +00:00
dns2tcp - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dns_balance - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dns_mre - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnscap Remove some leftover files from a long time ago. 2011-03-22 21:24:35 +00:00
dnscheck - Update MASTER_SITES, MAINTAINER and WWW 2010-11-27 14:12:19 +00:00
dnscheckengine - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsdoctor - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsflood - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnshijacker - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsjava - Update to 2.1.1 2011-03-14 10:54:52 +00:00
dnsmasq - Bump PORTREVISION to chase the update of dns/libidn 2011-03-14 08:40:06 +00:00
dnsmax-perl - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsperf - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsproxy - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsreflector - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnstop - Update to 20110502. 2011-06-22 00:23:38 +00:00
dnstracer - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnsutl - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnswalk - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
dnswall - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
doc - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
domtools - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
drill - Update to 1.6.8 2011-01-26 11:38:30 +00:00
dualserver - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
ez-ipupdate - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
fastresolve - Add LICENSE knob(s) 2011-03-23 15:53:22 +00:00
firedns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
fpdns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
geta - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
ghtool - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
gresolver update MASTER_SITES 2011-03-16 07:33:39 +00:00
h2n - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
hesiod - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
host - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
idnkit - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
inadyn - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
ipcheck - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
ldapdns - Add license 2011-05-20 19:49:23 +00:00
ldns - Update to 1.6.10 2011-06-01 01:18:24 +00:00
ldnsm - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
libbind Miscellaneous cleanups and fixes, some of the windowmaker stuff 2011-05-16 05:22:09 +00:00
libdjbdns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
libidn - Update to 1.19 2011-03-14 08:37:55 +00:00
linux-f10-libasyncns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
maradns - Add missing USERS/GROUPS for bind 2011-04-12 09:35:14 +00:00
mdnsd - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
mydns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
mydns-ng Bump PORTREVISION for ports linking to default libmysqlclient. 2011-03-19 13:15:34 +00:00
noip - Pass -Dbsd_with_getifaddrs to CFLAGS in order to get a correct network 2011-03-28 16:54:46 +00:00
nsd - update to version 3.2.8 2011-03-30 13:48:13 +00:00
nsd2 - change maintainers mail address 2011-03-30 16:13:42 +00:00
nslint - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
nsping - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
nss_mdns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
nss_resinit - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
odsclient - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
opendd - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
opendnssec - Update to 1.2.1 2011-03-24 16:33:57 +00:00
openresolv - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-BIND-Conf_Parser - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-BIND-Config-Parser - Replace ../../authors in MASTER_SITE_SUBDIR with CPAN:CPANID macro. 2011-06-21 06:58:49 +00:00
p5-Data-Validate-Domain - Replace ../../authors in MASTER_SITE_SUBDIR with CPAN:CPANID macro. 2011-06-21 06:58:49 +00:00
p5-DNS-Config - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-DNS-EasyDNS - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-DNS-Zone - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-DNS-ZoneParse - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-Amazon-Route53 - Update to 0.111300 2011-06-26 15:18:01 +00:00
p5-Net-Bonjour This is Net::Bonjour, a set of perl modules to utilize DNS for service 2011-04-05 16:21:01 +00:00
p5-Net-DNS Miscellaneous cleanups and fixes, some of the windowmaker stuff 2011-05-16 05:22:09 +00:00
p5-Net-DNS-Async - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-Check Net::DNS::Check is a collection of OOP Perl modules allowing easy 2011-06-01 08:53:22 +00:00
p5-Net-DNS-Codes - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-Lite - Update to 0.06 2011-03-18 03:26:06 +00:00
p5-Net-DNS-Resolver-Programmable - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-RR-SRV-Helper - Replace ../../authors in MASTER_SITE_SUBDIR with CPAN:CPANID macro. 2011-06-20 08:37:15 +00:00
p5-Net-DNS-SEC - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-TestNS - Replace ../../authors in MASTER_SITE_SUBDIR with CPAN:CPANID macro. 2011-06-21 06:58:49 +00:00
p5-Net-DNS-ToolKit - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-ZoneCheck - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-ZoneFile - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNS-ZoneFile-Fast - update to 1.15 2011-03-25 14:52:16 +00:00
p5-Net-DNSBL-MultiDaemon - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-DNSBL-Statistics - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-Domain-ExpireDate - Update to 1.01 2011-06-05 01:37:41 +00:00
p5-Net-Domain-TLD - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-LibIDN - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-Nslookup - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Net-RBLClient - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-pgeodns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-POE-Component-Client-DNS - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-POE-Component-Resolver - Update to 0.912 2011-05-05 01:37:50 +00:00
p5-POE-Component-Server-DNS - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Stanford-DNSserver - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
p5-Tie-DNS - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
pdnsd - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
pear-File_DNS - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
pear-Net_DNS - Add missing files 2011-03-08 07:15:39 +00:00
pear-Net_DNS2 - Update to 1.1.0 2011-05-05 08:25:10 +00:00
posadis - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
poweradmin - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
powerdns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
powerdns-devel - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
powerdns-recursor - Use USERS and GROUPS 2011-07-03 15:12:31 +00:00
py-adns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
py-dns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
py-dnspython - Update to 1.9.4 2011-04-12 03:48:21 +00:00
py-namebench - Move over to py25+ or above 2011-02-25 00:12:12 +00:00
py-twistedNames - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
rbldnsd - Use USERS and GROUPS 2011-07-04 19:05:05 +00:00
rbllookup - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
rbllookup-ng - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
rubygem-dnsruby - Update to 1.52 2011-03-20 08:25:25 +00:00
rubygem-net-dns - Cannoicalize the WWW: [again], 2011-06-23 17:51:43 +00:00
scavenge - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
sheerdns Fix build with clang. 2011-06-22 23:25:31 +00:00
skadns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
sleuth - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
sqldjbdns - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
sshfp Update to 1.2.1 2011-06-17 18:54:56 +00:00
tinystats - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
totd - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
udns Fix distinfo 2011-03-22 19:44:59 +00:00
unbound - Update to 1.4.11 2011-07-01 14:46:19 +00:00
updatedd - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
vizone - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
walker - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
zkt - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
zonecheck - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
zonenotify - Get Rid MD5 support 2011-03-20 12:54:45 +00:00
Makefile Net::DNS is a pure Ruby DNS library, with a clean 2011-06-19 16:29:21 +00:00