Module Name: src Committed By: he Date: Thu Dec 25 23:30:59 UTC 2014
Modified Files: src/dist/bind/bin/named [netbsd-5-2]: config.c query.c server.c src/dist/bind/lib/dns [netbsd-5-2]: adb.c resolver.c src/dist/bind/lib/dns/include/dns [netbsd-5-2]: adb.h resolver.h src/dist/bind/lib/export/isc [netbsd-5-2]: Makefile.in src/dist/bind/lib/isc [netbsd-5-2]: Makefile.in src/dist/bind/lib/isc/include/isc [netbsd-5-2]: Makefile.in types.h src/dist/bind/lib/isccfg [netbsd-5-2]: namedconf.c src/lib/libisc [netbsd-5-2]: Makefile src/usr.sbin/bind [netbsd-5-2]: Makefile.inc Added Files: src/dist/bind/lib/isc [netbsd-5-2]: counter.c src/dist/bind/lib/isc/include/isc [netbsd-5-2]: counter.h Log Message: Apply fix for BIND, backported from the patch for 9.8.8 from ISC. This is a fix for CVE-2014-8500, where a maliciously constructed setup can cause BIND to issue an unlimited sequence of queries to follow a delegation. [spz, ticket #1937] To generate a diff of this commit: cvs rdiff -u -r1.1.1.8.4.4 -r1.1.1.8.4.4.2.1 src/dist/bind/bin/named/config.c cvs rdiff -u -r1.8.4.7.2.1 -r1.8.4.7.2.2 src/dist/bind/bin/named/query.c cvs rdiff -u -r1.1.1.9.4.4 -r1.1.1.9.4.4.2.1 src/dist/bind/bin/named/server.c cvs rdiff -u -r1.6.4.4 -r1.6.4.4.2.1 src/dist/bind/lib/dns/adb.c cvs rdiff -u -r1.8.4.6 -r1.8.4.6.2.1 src/dist/bind/lib/dns/resolver.c cvs rdiff -u -r1.1.1.5.4.3 -r1.1.1.5.4.3.2.1 \ src/dist/bind/lib/dns/include/dns/adb.h cvs rdiff -u -r1.1.1.5.4.4 -r1.1.1.5.4.4.2.1 \ src/dist/bind/lib/dns/include/dns/resolver.h cvs rdiff -u -r1.1.2.3 -r1.1.2.3.2.1 src/dist/bind/lib/export/isc/Makefile.in cvs rdiff -u -r1.1.1.6.4.4 -r1.1.1.6.4.4.2.1 \ src/dist/bind/lib/isc/Makefile.in cvs rdiff -u -r0 -r1.1.4.2 src/dist/bind/lib/isc/counter.c cvs rdiff -u -r1.1.1.5.4.4 -r1.1.1.5.4.4.2.1 \ src/dist/bind/lib/isc/include/isc/Makefile.in \ src/dist/bind/lib/isc/include/isc/types.h cvs rdiff -u -r0 -r1.1.4.2 src/dist/bind/lib/isc/include/isc/counter.h cvs rdiff -u -r1.1.1.7.4.4 -r1.1.1.7.4.4.2.1 \ src/dist/bind/lib/isccfg/namedconf.c cvs rdiff -u -r1.2.4.2 -r1.2.4.2.2.1 src/lib/libisc/Makefile cvs rdiff -u -r1.32.4.1 -r1.32.4.1.2.1 src/usr.sbin/bind/Makefile.inc Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.