svn commit: r248808 - in stable/9: contrib/bind9 lib/bind lib/bind/dns lib/bind/dns/dns

[Xin LI]

Author: delphij
Date: Thu Mar 28 05:39:45 2013
New Revision: 248808
URL: http://svnweb.freebsd.org/changeset/base/248808

Log:
  MFC r248788 (erwin):
  
  Update BIND to 9.8.4-P2
  
  Removed the check for regex.h in configure in order
  to disable regex syntax checking, as it exposes
  BIND to a critical flaw in libregex on some
  platforms. [RT #32688]

Modified:
  stable/9/contrib/bind9/CHANGES
  stable/9/contrib/bind9/config.h.in
  stable/9/contrib/bind9/configure.in
  stable/9/contrib/bind9/version
  stable/9/lib/bind/config.h
  stable/9/lib/bind/dns/code.h
  stable/9/lib/bind/dns/dns/enumclass.h
  stable/9/lib/bind/dns/dns/enumtype.h
  stable/9/lib/bind/dns/dns/rdatastruct.h
Directory Properties:
  stable/9/contrib/bind9/   (props changed)
  stable/9/lib/bind/   (props changed)

Modified: stable/9/contrib/bind9/CHANGES
==============================================================================
--- stable/9/contrib/bind9/CHANGES	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/contrib/bind9/CHANGES	Thu Mar 28 05:39:45 2013	(r248808)
@@ -1,3 +1,10 @@
+	--- 9.8.4-P2 released ---
+
+3516.	[security]	Removed the check for regex.h in configure in order
+			to disable regex syntax checking, as it exposes
+			BIND to a critical flaw in libregex on some
+			platforms. [RT #32688]
+
 	--- 9.8.4-P1 released ---
 
 3407.	[security]	Named could die on specific queries with dns64 enabled.

Modified: stable/9/contrib/bind9/config.h.in
==============================================================================
--- stable/9/contrib/bind9/config.h.in	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/contrib/bind9/config.h.in	Thu Mar 28 05:39:45 2013	(r248808)
@@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int
 /* Define if your OpenSSL version supports GOST. */
 #undef HAVE_OPENSSL_GOST
 
-/* Define to 1 if you have the <regex.h> header file. */
-#undef HAVE_REGEX_H
-
 /* Define to 1 if you have the `setegid' function. */
 #undef HAVE_SETEGID
 

Modified: stable/9/contrib/bind9/configure.in
==============================================================================
--- stable/9/contrib/bind9/configure.in	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/contrib/bind9/configure.in	Thu Mar 28 05:39:45 2013	(r248808)
@@ -298,7 +298,7 @@ esac
 
 AC_HEADER_STDC
 
-AC_CHECK_HEADERS(fcntl.h regex.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,,
+AC_CHECK_HEADERS(fcntl.h sys/time.h unistd.h sys/sockio.h sys/select.h sys/param.h sys/sysctl.h net/if6.h,,,
 [$ac_includes_default
 #ifdef HAVE_SYS_PARAM_H
 # include <sys/param.h>

Modified: stable/9/contrib/bind9/version
==============================================================================
--- stable/9/contrib/bind9/version	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/contrib/bind9/version	Thu Mar 28 05:39:45 2013	(r248808)
@@ -7,4 +7,4 @@ MAJORVER=9
 MINORVER=8
 PATCHVER=4
 RELEASETYPE=-P
-RELEASEVER=1
+RELEASEVER=2

Modified: stable/9/lib/bind/config.h
==============================================================================
--- stable/9/lib/bind/config.h	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/lib/bind/config.h	Thu Mar 28 05:39:45 2013	(r248808)
@@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int
 /* Define if your OpenSSL version supports GOST. */
 /* #undef HAVE_OPENSSL_GOST */
 
-/* Define to 1 if you have the <regex.h> header file. */
-#define HAVE_REGEX_H 1
-
 /* Define to 1 if you have the `setegid' function. */
 #define HAVE_SETEGID 1
 

Modified: stable/9/lib/bind/dns/code.h
==============================================================================
--- stable/9/lib/bind/dns/code.h	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/lib/bind/dns/code.h	Thu Mar 28 05:39:45 2013	(r248808)
@@ -1,7 +1,7 @@
 /* $FreeBSD$ */
 
 /*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1998-2003 Internet Software Consortium.
  *
  * Permission to use, copy, modify, and distribute this software for any

Modified: stable/9/lib/bind/dns/dns/enumclass.h
==============================================================================
--- stable/9/lib/bind/dns/dns/enumclass.h	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/lib/bind/dns/dns/enumclass.h	Thu Mar 28 05:39:45 2013	(r248808)
@@ -1,7 +1,7 @@
 /* $FreeBSD$ */
 
 /*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1998-2003 Internet Software Consortium.
  *
  * Permission to use, copy, modify, and distribute this software for any

Modified: stable/9/lib/bind/dns/dns/enumtype.h
==============================================================================
--- stable/9/lib/bind/dns/dns/enumtype.h	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/lib/bind/dns/dns/enumtype.h	Thu Mar 28 05:39:45 2013	(r248808)
@@ -1,7 +1,7 @@
 /* $FreeBSD$ */
 
 /*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1998-2003 Internet Software Consortium.
  *
  * Permission to use, copy, modify, and distribute this software for any

Modified: stable/9/lib/bind/dns/dns/rdatastruct.h
==============================================================================
--- stable/9/lib/bind/dns/dns/rdatastruct.h	Thu Mar 28 05:35:46 2013	(r248807)
+++ stable/9/lib/bind/dns/dns/rdatastruct.h	Thu Mar 28 05:39:45 2013	(r248808)
@@ -1,7 +1,7 @@
 /* $FreeBSD$ */
 
 /*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1998-2003 Internet Software Consortium.
  *
  * Permission to use, copy, modify, and distribute this software for any