cvs commit: ports/dns/bind94 Makefile distinfo

[Doug Barton]

dougb       2011-05-27 23:46:58 UTC

  FreeBSD ports repository

  Modified files:
    dns/bind94           Makefile distinfo 
  Log:
  Upgrade to 9.4-ESV-R4-P1, which addresses the following issues:
  
  1. Very large RRSIG RRsets included in a negative cache can trigger
  an assertion failure that will crash named (BIND 9 DNS) due to an
  off-by-one error in a buffer size check.
  
  This bug affects all resolving name servers, whether DNSSEC validation
  is enabled or not, on all BIND versions prior to today. There is a
  possibility of malicious exploitation of this bug by remote users.
  
  2. Named could fail to validate zones listed in a DLV that validated
  insecure without using DLV and had DS records in the parent zone.
  
  Revision  Changes    Path
  1.111     +2 -2      ports/dns/bind94/Makefile
  1.65      +4 -4      ports/dns/bind94/distinfo