Module Name: src
Committed By: he
Date: Thu Dec 25 23:31:43 UTC 2014
Modified Files:
src/doc [netbsd-5-2]: CHANGES-5.2.4
Log Message:
Ticket 1937.
To generate a diff of this commit:
cvs rdiff -u -r1.1.2.9 -r1.1.2.10 src/doc/CHANGES-5.2.4
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/doc/CHANGES-5.2.4
diff -u src/doc/CHANGES-5.2.4:1.1.2.9 src/doc/CHANGES-5.2.4:1.1.2.10
--- src/doc/CHANGES-5.2.4:1.1.2.9 Mon Dec 22 12:58:13 2014
+++ src/doc/CHANGES-5.2.4 Thu Dec 25 23:31:43 2014
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-5.2.4,v 1.1.2.9 2014/12/22 12:58:13 msaitoh Exp $
+# $NetBSD: CHANGES-5.2.4,v 1.1.2.10 2014/12/25 23:31:43 he Exp $
A complete list of changes from the NetBSD 5.2.3 release to the NetBSD 5.2.4
release:
@@ -128,3 +128,25 @@ xsrc/xfree/xc/programs/Xserver/render/re
CVE-2013-6424
[mrg, ticket #1935]
+dist/bind/lib/isc/counter.c new, via patch
+dist/bind/lib/isc/include/isc/counter.h new, via patch
+dist/bind/bin/named/config.c patch
+dist/bind/bin/named/query.c patch
+dist/bind/bin/named/server.c patch
+dist/bind/lib/dns/adb.c patch
+dist/bind/lib/dns/resolver.c patch
+dist/bind/lib/dns/include/dns/adb.h patch
+dist/bind/lib/dns/include/dns/resolver.h patch
+dist/bind/lib/export/isc/Makefile.in patch
+dist/bind/lib/isc/Makefile.in patch
+dist/bind/lib/isc/include/isc/Makefile.in patch
+dist/bind/lib/isc/include/isc/types.h patch
+dist/bind/lib/isccfg/namedconf.c patch
+lib/libisc/Makefile patch
+usr.sbin/bind/Makefile.inc patch
+
+ Apply fix for BIND, backported from the patch for 9.8.8 from ISC.
+ This is a fix for CVE-2014-8500, where a maliciously constructed
+ setup can cause BIND to issue an unlimited sequence of queries to
+ follow a delegation.
+ [spz, ticket #1937]
