Module Name: src Committed By: he Date: Thu Dec 25 23:52:00 UTC 2014
Modified Files: src/dist/bind/bin/named [netbsd-5-0]: config.c query.c server.c src/dist/bind/lib/dns [netbsd-5-0]: adb.c resolver.c src/dist/bind/lib/dns/include/dns [netbsd-5-0]: adb.h resolver.h src/dist/bind/lib/export/isc [netbsd-5-0]: Makefile.in src/dist/bind/lib/isc [netbsd-5-0]: Makefile.in src/dist/bind/lib/isc/include/isc [netbsd-5-0]: Makefile.in types.h src/dist/bind/lib/isccfg [netbsd-5-0]: namedconf.c src/lib/libisc [netbsd-5-0]: Makefile src/usr.sbin/bind [netbsd-5-0]: Makefile.inc Added Files: src/dist/bind/lib/isc [netbsd-5-0]: counter.c src/dist/bind/lib/isc/include/isc [netbsd-5-0]: counter.h Log Message: Apply fix for BIND, backported from the patch for 9.8.8 from ISC. This is a fix for CVE-2014-8500, where a maliciously constructed setup can cause BIND to issue an unlimited sequence of queries to follow a delegation. [spz, ticket #1937] To generate a diff of this commit: cvs rdiff -u -r1.1.1.8.8.4 -r1.1.1.8.8.5 src/dist/bind/bin/named/config.c cvs rdiff -u -r1.8.8.7 -r1.8.8.8 src/dist/bind/bin/named/query.c cvs rdiff -u -r1.1.1.9.8.4 -r1.1.1.9.8.5 src/dist/bind/bin/named/server.c cvs rdiff -u -r1.6.8.4 -r1.6.8.5 src/dist/bind/lib/dns/adb.c cvs rdiff -u -r1.8.8.6 -r1.8.8.7 src/dist/bind/lib/dns/resolver.c cvs rdiff -u -r1.1.1.5.8.3 -r1.1.1.5.8.4 \ src/dist/bind/lib/dns/include/dns/adb.h cvs rdiff -u -r1.1.1.5.8.4 -r1.1.1.5.8.5 \ src/dist/bind/lib/dns/include/dns/resolver.h cvs rdiff -u -r1.1.6.4 -r1.1.6.5 src/dist/bind/lib/export/isc/Makefile.in cvs rdiff -u -r1.1.1.6.8.4 -r1.1.1.6.8.5 src/dist/bind/lib/isc/Makefile.in cvs rdiff -u -r0 -r1.1.8.2 src/dist/bind/lib/isc/counter.c cvs rdiff -u -r1.1.1.5.8.4 -r1.1.1.5.8.5 \ src/dist/bind/lib/isc/include/isc/Makefile.in \ src/dist/bind/lib/isc/include/isc/types.h cvs rdiff -u -r0 -r1.1.8.2 src/dist/bind/lib/isc/include/isc/counter.h cvs rdiff -u -r1.1.1.7.8.4 -r1.1.1.7.8.5 src/dist/bind/lib/isccfg/namedconf.c cvs rdiff -u -r1.2.8.2 -r1.2.8.3 src/lib/libisc/Makefile cvs rdiff -u -r1.32.8.1 -r1.32.8.2 src/usr.sbin/bind/Makefile.inc Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.