From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Jul 27 09:40:04 2012 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id B2503106566C for ; Fri, 27 Jul 2012 09:40:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 899CF8FC0A for ; Fri, 27 Jul 2012 09:40:04 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q6R9e4G7019199 for ; Fri, 27 Jul 2012 09:40:04 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q6R9e45q019198; Fri, 27 Jul 2012 09:40:04 GMT (envelope-from gnats) Resent-Date: Fri, 27 Jul 2012 09:40:04 GMT Resent-Message-Id: <201207270940.q6R9e45q019198@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Jaap Akkerhuis Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6AEAF1065673 for ; Fri, 27 Jul 2012 09:30:16 +0000 (UTC) (envelope-from jaap@bela.nlnetlabs.nl) Received: from bela.nlnetlabs.nl (bela.nlnetlabs.nl [IPv6:2001:7b8:206:1:222:4dff:fe55:4ccb]) by mx1.freebsd.org (Postfix) with ESMTP id D1D868FC0A for ; Fri, 27 Jul 2012 09:30:15 +0000 (UTC) Received: from bela.nlnetlabs.nl (localhost [127.0.0.1]) by bela.nlnetlabs.nl (8.14.5/8.14.5) with ESMTP id q6R9UDSe010318 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 27 Jul 2012 11:30:13 +0200 (CEST) (envelope-from jaap@bela.nlnetlabs.nl) Received: (from jaap@localhost) by bela.nlnetlabs.nl (8.14.5/8.14.5/Submit) id q6R9UCi4010317; Fri, 27 Jul 2012 11:30:12 +0200 (CEST) (envelope-from jaap) Message-Id: <201207270930.q6R9UCi4010317@bela.nlnetlabs.nl> Date: Fri, 27 Jul 2012 11:30:12 +0200 (CEST) From: Jaap Akkerhuis To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: jaap@NLnetLabs.nl Subject: ports/170208: [SECURITY] [MAINTAINER] dns/nsd: update to 3.2.13 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Jul 2012 09:40:04 -0000 >Number: 170208 >Category: ports >Synopsis: [SECURITY] [MAINTAINER] dns/nsd: update to 3.2.13 >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Fri Jul 27 09:40:04 UTC 2012 >Closed-Date: >Last-Modified: >Originator: Jaap Akkerhuis >Release: FreeBSD 9.1-PRERELEASE amd64 >Organization: NLnet Labs >Environment: System: FreeBSD bela.nlnetlabs.nl 9.1-PRERELEASE FreeBSD 9.1-PRERELEASE #25: Mon Jul 23 01:38:46 CEST 2012 >Description: - Update to 3.2.13 NSD 3.2.11 and 3.2.12 are vulnerable to a denial of service attack if and only if you have enabled per zone stats (--enable-zone-stats, default off) [VU#517036 CVE-2012-2979 ]. BUG FIXES: - Fix for nsd-patch segfault if zone has been removed from nsd.conf (thanks Ilya Bakulin). - Bugfix #460: man page correction - identity. - Bugfix #461: NSD child segfaults when asked for out-of-zone data with --enable-zone-stats. [VU#517036 CVE-2012-2979] Generated with FreeBSD Port Tools 0.99_6 (mode: update, diff: suffix) >How-To-Repeat: >Fix: --- nsd-3.2.13.patch begins here --- diff -ruN --exclude=CVS ../nsd.orig/Makefile ./Makefile --- ../nsd.orig/Makefile 2012-07-27 11:22:46.163818962 +0200 +++ ./Makefile 2012-07-27 11:24:28.393096112 +0200 @@ -6,7 +6,7 @@ # PORTNAME= nsd -PORTVERSION= 3.2.12 +PORTVERSION= 3.2.13 CATEGORIES= dns ipv6 MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/ \ ftp://ftp.rhnet.is/pub/nsd/ diff -ruN --exclude=CVS ../nsd.orig/distinfo ./distinfo --- ../nsd.orig/distinfo 2012-07-27 11:22:46.164884707 +0200 +++ ./distinfo 2012-07-27 10:53:49.268820273 +0200 @@ -1,2 +1,2 @@ -SHA256 (nsd-3.2.12.tar.gz) = 73d78e3de88efdf5ebb0106fe3580cb887f5d2adc9ab147d15cf835de7de508e -SIZE (nsd-3.2.12.tar.gz) = 889490 +SHA256 (nsd-3.2.13.tar.gz) = 6c0abd77d716a80047dac5cb2998b077686f41a93be7e9d10b2746e6f7ac1ac2 +SIZE (nsd-3.2.13.tar.gz) = 886216 --- nsd-3.2.13.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: