Author: delphij
Date: Thu Mar 28 05:35:46 2013
New Revision: 248807
URL: http://svnweb.freebsd.org/changeset/base/248807
Log:
MFC r248788 (erwin):
Update BIND to 9.8.4-P2
Removed the check for regex.h in configure in order
to disable regex syntax checking, as it exposes
BIND to a critical flaw in libregex on some
platforms. [RT #32688]
Approved by: re (rodrigc, kib)
Modified:
stable/8/contrib/bind9/CHANGES
stable/8/contrib/bind9/config.h.in
stable/8/contrib/bind9/configure.in
stable/8/contrib/bind9/version
stable/8/lib/bind/config.h
stable/8/lib/bind/dns/code.h
stable/8/lib/bind/dns/dns/enumclass.h
stable/8/lib/bind/dns/dns/enumtype.h
stable/8/lib/bind/dns/dns/rdatastruct.h
Directory Properties:
stable/8/contrib/bind9/ (props changed)
stable/8/lib/bind/ (props changed)
Modified: stable/8/contrib/bind9/CHANGES
==============================================================================
--- stable/8/contrib/bind9/CHANGES Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/contrib/bind9/CHANGES Thu Mar 28 05:35:46 2013
(r248807)
@@ -1,3 +1,10 @@
+ --- 9.8.4-P2 released ---
+
+3516. [security] Removed the check for regex.h in configure in order
+ to disable regex syntax checking, as it exposes
+ BIND to a critical flaw in libregex on some
+ platforms. [RT #32688]
+
--- 9.8.4-P1 released ---
3407. [security] Named could die on specific queries with dns64 enabled.
Modified: stable/8/contrib/bind9/config.h.in
==============================================================================
--- stable/8/contrib/bind9/config.h.in Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/contrib/bind9/config.h.in Thu Mar 28 05:35:46 2013
(r248807)
@@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int
/* Define if your OpenSSL version supports GOST. */
#undef HAVE_OPENSSL_GOST
-/* Define to 1 if you have the <regex.h> header file. */
-#undef HAVE_REGEX_H
-
/* Define to 1 if you have the `setegid' function. */
#undef HAVE_SETEGID
Modified: stable/8/contrib/bind9/configure.in
==============================================================================
--- stable/8/contrib/bind9/configure.in Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/contrib/bind9/configure.in Thu Mar 28 05:35:46 2013
(r248807)
@@ -298,7 +298,7 @@ esac
AC_HEADER_STDC
-AC_CHECK_HEADERS(fcntl.h regex.h sys/time.h unistd.h sys/sockio.h sys/select.h
sys/param.h sys/sysctl.h net/if6.h,,,
+AC_CHECK_HEADERS(fcntl.h sys/time.h unistd.h sys/sockio.h sys/select.h
sys/param.h sys/sysctl.h net/if6.h,,,
[$ac_includes_default
#ifdef HAVE_SYS_PARAM_H
# include <sys/param.h>
Modified: stable/8/contrib/bind9/version
==============================================================================
--- stable/8/contrib/bind9/version Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/contrib/bind9/version Thu Mar 28 05:35:46 2013
(r248807)
@@ -7,4 +7,4 @@ MAJORVER=9
MINORVER=8
PATCHVER=4
RELEASETYPE=-P
-RELEASEVER=1
+RELEASEVER=2
Modified: stable/8/lib/bind/config.h
==============================================================================
--- stable/8/lib/bind/config.h Thu Mar 28 04:13:52 2013 (r248806)
+++ stable/8/lib/bind/config.h Thu Mar 28 05:35:46 2013 (r248807)
@@ -286,9 +286,6 @@ int sigwait(const unsigned int *set, int
/* Define if your OpenSSL version supports GOST. */
/* #undef HAVE_OPENSSL_GOST */
-/* Define to 1 if you have the <regex.h> header file. */
-#define HAVE_REGEX_H 1
-
/* Define to 1 if you have the `setegid' function. */
#define HAVE_SETEGID 1
Modified: stable/8/lib/bind/dns/code.h
==============================================================================
--- stable/8/lib/bind/dns/code.h Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/lib/bind/dns/code.h Thu Mar 28 05:35:46 2013
(r248807)
@@ -1,7 +1,7 @@
/* $FreeBSD$ */
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and distribute this software for any
Modified: stable/8/lib/bind/dns/dns/enumclass.h
==============================================================================
--- stable/8/lib/bind/dns/dns/enumclass.h Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/lib/bind/dns/dns/enumclass.h Thu Mar 28 05:35:46 2013
(r248807)
@@ -1,7 +1,7 @@
/* $FreeBSD$ */
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and distribute this software for any
Modified: stable/8/lib/bind/dns/dns/enumtype.h
==============================================================================
--- stable/8/lib/bind/dns/dns/enumtype.h Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/lib/bind/dns/dns/enumtype.h Thu Mar 28 05:35:46 2013
(r248807)
@@ -1,7 +1,7 @@
/* $FreeBSD$ */
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and distribute this software for any
Modified: stable/8/lib/bind/dns/dns/rdatastruct.h
==============================================================================
--- stable/8/lib/bind/dns/dns/rdatastruct.h Thu Mar 28 04:13:52 2013
(r248806)
+++ stable/8/lib/bind/dns/dns/rdatastruct.h Thu Mar 28 05:35:46 2013
(r248807)
@@ -1,7 +1,7 @@
/* $FreeBSD$ */
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and distribute this software for any
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "[email protected]"
