aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDoug Barton <dougb@FreeBSD.org>2008-07-09 19:02:01 +0000
committerDoug Barton <dougb@FreeBSD.org>2008-07-09 19:02:01 +0000
commitab54e4303769499862ad9ace7292725794c1e17b (patch)
treef59bbf6388f7f2dae973aa8e78c3977c60c96200
parent7b5e43c310277f54a6560c05b61efde1a5fab295 (diff)
downloadports-ab54e4303769499862ad9ace7292725794c1e17b.tar.gz
ports-ab54e4303769499862ad9ace7292725794c1e17b.zip
Upgrade to the -P1 versions of each port, which add stronger randomization
of the UDP query-source ports. The server will still use the same query port for the life of the process, so users for whom the issue of cache poisoning is highly significant may wish to periodically restart their server using /etc/rc.d/named restart, or other suitable method. In order to take advantage of this randomization users MUST have an appropriate firewall configuration to allow UDP queries to be sent and answers to be received on random ports; and users MUST NOT specify a port number using the query-source[-v6] option. The avoid-v[46]-udp-ports options exist for users who wish to eliminate certain port numbers from being chosen by named for this purpose. See the ARM Chatper 6 for more information. Also please note, this issue applies only to UDP query ports. A random ephemeral port is always chosen for TCP queries. This issue applies primarily to name servers whose main purpose is to resolve random queries (sometimes referred to as "caching" servers, or more properly as "resolving" servers), although even an "authoritative" name server will make some queries, primarily at startup time. This update addresses issues raised in: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447 http://www.kb.cert.org/vuls/id/800113 http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience
Notes
Notes: svn path=/head/; revision=216629
Diffstat
-rw-r--r--dns/bind9/Makefile4
-rw-r--r--dns/bind9/distinfo12
-rw-r--r--dns/bind94/Makefile5
-rw-r--r--dns/bind94/distinfo12
-rw-r--r--dns/bind95/Makefile4
-rw-r--r--dns/bind95/distinfo12
-rw-r--r--dns/bind96/Makefile4
-rw-r--r--dns/bind96/distinfo12
8 files changed, 32 insertions, 33 deletions
diff --git a/dns/bind9/Makefile b/dns/bind9/Makefile
index 88171e1f98f0..e948d1fde4f2 100644
--- a/dns/bind9/Makefile
+++ b/dns/bind9/Makefile
@@ -12,7 +12,7 @@
# release you can generally build it cleanly from the source - Doug
PORTNAME= bind9
-PORTVERSION= 9.3.5
+PORTVERSION= 9.3.5.1
CATEGORIES= dns net ipv6
MASTER_SITES= ${MASTER_SITE_ISC} \
http://dougbarton.us/Downloads/%SUBDIR%/
@@ -25,7 +25,7 @@ MAINTAINER= DougB@FreeBSD.org
COMMENT= Completely new version of the BIND DNS suite with updated DNSSEC
# ISC releases things like 9.3.0rc1, which our versioning doesn't like
-ISCVERSION= 9.3.5
+ISCVERSION= 9.3.5-P1
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \
diff --git a/dns/bind9/distinfo b/dns/bind9/distinfo
index 4c7044326ca3..760ad33b3466 100644
--- a/dns/bind9/distinfo
+++ b/dns/bind9/distinfo
@@ -1,6 +1,6 @@
-MD5 (bind-9.3.5.tar.gz) = e5b82f5284679c68b761ac41b6d6066c
-SHA256 (bind-9.3.5.tar.gz) = 5e9e1cc50fe3924e747dd15257ce73d06dc2c889ef26a5d60da837f424916f61
-SIZE (bind-9.3.5.tar.gz) = 5730181
-MD5 (bind-9.3.5.tar.gz.asc) = 671bb7d690dfe4e37a727eb9f6d77de9
-SHA256 (bind-9.3.5.tar.gz.asc) = 0bf3399253e8008ee0018ba8459e3d5f0041acdf6944b0bfb5567b4d37562afa
-SIZE (bind-9.3.5.tar.gz.asc) = 486
+MD5 (bind-9.3.5-P1.tar.gz) = 1446984f552b18a0ff7db63971a0cb5a
+SHA256 (bind-9.3.5-P1.tar.gz) = 8bd6b53f5a2c5f0332aaba9a51ef3d7fc55c60f906f0c506e11b6600ed82a90b
+SIZE (bind-9.3.5-P1.tar.gz) = 5626167
+MD5 (bind-9.3.5-P1.tar.gz.asc) = 3680754939a9af0b1f6bb733a3a8fb3b
+SHA256 (bind-9.3.5-P1.tar.gz.asc) = cf312c8a4c2cf1c07a473d2ff6db597a0677c5f8a79b4e7d3f7333663a862a5c
+SIZE (bind-9.3.5-P1.tar.gz.asc) = 479
diff --git a/dns/bind94/Makefile b/dns/bind94/Makefile
index 20f579d1e784..0f1836701ba7 100644
--- a/dns/bind94/Makefile
+++ b/dns/bind94/Makefile
@@ -12,8 +12,7 @@
# release you can generally build it cleanly from the source - Doug
PORTNAME= bind94
-PORTVERSION= 9.4.2
-PORTREVISION= 1
+PORTVERSION= 9.4.2.1
CATEGORIES= dns net ipv6
MASTER_SITES= ${MASTER_SITE_ISC} \
http://dougbarton.us/Downloads/%SUBDIR%/
@@ -26,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org
COMMENT= The BIND DNS suite with updated DNSSEC and threads
# ISC releases things like 9.4.0b3, which our versioning doesn't like
-ISCVERSION= 9.4.2
+ISCVERSION= 9.4.2-P1
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \
diff --git a/dns/bind94/distinfo b/dns/bind94/distinfo
index a500540e3783..2084eef61776 100644
--- a/dns/bind94/distinfo
+++ b/dns/bind94/distinfo
@@ -1,6 +1,6 @@
-MD5 (bind-9.4.2.tar.gz) = 57953d7264139b9506b9d66174125179
-SHA256 (bind-9.4.2.tar.gz) = 5add82a67dc98b89b4a0f95a467480b0f6b7d3a6b563a13076d9f701286960bd
-SIZE (bind-9.4.2.tar.gz) = 6574042
-MD5 (bind-9.4.2.tar.gz.asc) = acbccd025da3e1b6b980ca2a023310b3
-SHA256 (bind-9.4.2.tar.gz.asc) = c6e43af53f0102b7db4f5c2d824f509587323884ecf984a4b2c0c66e510ded01
-SIZE (bind-9.4.2.tar.gz.asc) = 479
+MD5 (bind-9.4.2-P1.tar.gz) = 87b80edd9872cb017053866c81ca9be8
+SHA256 (bind-9.4.2-P1.tar.gz) = eeeb8f89fe6d88b250ad85ee21cfde6f8ac6f425c70c6705352b3fa8c4c4ee84
+SIZE (bind-9.4.2-P1.tar.gz) = 6451654
+MD5 (bind-9.4.2-P1.tar.gz.asc) = 72310b7045d9806b913835c55ba5388b
+SHA256 (bind-9.4.2-P1.tar.gz.asc) = c84b6446416ff1096ec5bfb1c731d31f984b312b45a3d2064a922a6b50b6162d
+SIZE (bind-9.4.2-P1.tar.gz.asc) = 479
diff --git a/dns/bind95/Makefile b/dns/bind95/Makefile
index 059ebbc07553..f28f00d309ef 100644
--- a/dns/bind95/Makefile
+++ b/dns/bind95/Makefile
@@ -12,7 +12,7 @@
# release you can generally build it cleanly from the source - Doug
PORTNAME= bind95
-PORTVERSION= 9.5.0
+PORTVERSION= 9.5.0.1
CATEGORIES= dns net ipv6
MASTER_SITES= ${MASTER_SITE_ISC} \
http://dougbarton.us/Downloads/%SUBDIR%/
@@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org
COMMENT= The BIND DNS suite with updated DNSSEC and threads
# ISC releases things like 9.4.0b3, which our versioning doesn't like
-ISCVERSION= 9.5.0
+ISCVERSION= 9.5.0-P1
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \
diff --git a/dns/bind95/distinfo b/dns/bind95/distinfo
index d595a925efdd..ffc5ca2b6a02 100644
--- a/dns/bind95/distinfo
+++ b/dns/bind95/distinfo
@@ -1,6 +1,6 @@
-MD5 (bind-9.5.0.tar.gz) = 066484717db1d1b1b4092ddcf5d0eb6e
-SHA256 (bind-9.5.0.tar.gz) = fbb4c02c792a5298f8c71d617dfbab2acebbbdd51ea1d1e94d1aa66de48ddd61
-SIZE (bind-9.5.0.tar.gz) = 6749437
-MD5 (bind-9.5.0.tar.gz.asc) = 36b1c6c37e047cb2c1214fdc74a62b30
-SHA256 (bind-9.5.0.tar.gz.asc) = 6d83c4a6c0bc67472e998bb260c1b0cfc55825c9b707da409c5a200c38119a64
-SIZE (bind-9.5.0.tar.gz.asc) = 486
+MD5 (bind-9.5.0-P1.tar.gz) = a4f9dd6d205d24ec89fa4e44d8188197
+SHA256 (bind-9.5.0-P1.tar.gz) = a0a726a83ae0b576a602494c8cda2b03041c5cf09b6423117ff42979c675374d
+SIZE (bind-9.5.0-P1.tar.gz) = 6622200
+MD5 (bind-9.5.0-P1.tar.gz.asc) = f0efeb024f8d0a87792424a030f84883
+SHA256 (bind-9.5.0-P1.tar.gz.asc) = 47117588c2139e91944346d17e176f31af519e1a3376fb54016fefea09a946a4
+SIZE (bind-9.5.0-P1.tar.gz.asc) = 479
diff --git a/dns/bind96/Makefile b/dns/bind96/Makefile
index 059ebbc07553..f28f00d309ef 100644
--- a/dns/bind96/Makefile
+++ b/dns/bind96/Makefile
@@ -12,7 +12,7 @@
# release you can generally build it cleanly from the source - Doug
PORTNAME= bind95
-PORTVERSION= 9.5.0
+PORTVERSION= 9.5.0.1
CATEGORIES= dns net ipv6
MASTER_SITES= ${MASTER_SITE_ISC} \
http://dougbarton.us/Downloads/%SUBDIR%/
@@ -25,7 +25,7 @@ MAINTAINER= dougb@FreeBSD.org
COMMENT= The BIND DNS suite with updated DNSSEC and threads
# ISC releases things like 9.4.0b3, which our versioning doesn't like
-ISCVERSION= 9.5.0
+ISCVERSION= 9.5.0-P1
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \
diff --git a/dns/bind96/distinfo b/dns/bind96/distinfo
index d595a925efdd..ffc5ca2b6a02 100644
--- a/dns/bind96/distinfo
+++ b/dns/bind96/distinfo
@@ -1,6 +1,6 @@
-MD5 (bind-9.5.0.tar.gz) = 066484717db1d1b1b4092ddcf5d0eb6e
-SHA256 (bind-9.5.0.tar.gz) = fbb4c02c792a5298f8c71d617dfbab2acebbbdd51ea1d1e94d1aa66de48ddd61
-SIZE (bind-9.5.0.tar.gz) = 6749437
-MD5 (bind-9.5.0.tar.gz.asc) = 36b1c6c37e047cb2c1214fdc74a62b30
-SHA256 (bind-9.5.0.tar.gz.asc) = 6d83c4a6c0bc67472e998bb260c1b0cfc55825c9b707da409c5a200c38119a64
-SIZE (bind-9.5.0.tar.gz.asc) = 486
+MD5 (bind-9.5.0-P1.tar.gz) = a4f9dd6d205d24ec89fa4e44d8188197
+SHA256 (bind-9.5.0-P1.tar.gz) = a0a726a83ae0b576a602494c8cda2b03041c5cf09b6423117ff42979c675374d
+SIZE (bind-9.5.0-P1.tar.gz) = 6622200
+MD5 (bind-9.5.0-P1.tar.gz.asc) = f0efeb024f8d0a87792424a030f84883
+SHA256 (bind-9.5.0-P1.tar.gz.asc) = 47117588c2139e91944346d17e176f31af519e1a3376fb54016fefea09a946a4
+SIZE (bind-9.5.0-P1.tar.gz.asc) = 479
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-14 08:20:08 +0000