ports/contrib (3.4): [notify] bind: 9.12.3-P1 -> 9.12.3-P4 fixing several CVEs including a remote code execution

crux at crux.nu crux at crux.nu
Fri Feb 22 19:36:43 UTC 2019


commit 21ab6bcfcebe5d694324026934dfd23feb70c6e2
Author: Thomas Penteker <tek at serverop.de>
Date:   Fri Feb 22 20:35:04 2019 +0100

    [notify] bind: 9.12.3-P1 -> 9.12.3-P4 fixing several CVEs including a remote code execution

diff --git a/bind/.signature b/bind/.signature
index 0d96b9f4..e3251e35 100644
--- a/bind/.signature
+++ b/bind/.signature
@@ -1,8 +1,8 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF39dS2lxvOuqmYMb8mWdbubMusgNDakiS4je3ISqTD/wS1+8zKwIoYTOBGoy9j4gmYrO1M0Sv+lE3EEMPRCPN2gk=
-SHA256 (Pkgfile) = 0c2310a45f581a21da3378a9222af24f36d77abf1cdcc85489b3b2ae74206229
+RWSagIOpLGJF33jHtHhlkRaNB+A9gz4qS0AWUWXr7/Ee7T3dvlu2NAjN3nxLr0TLiiGPC4f3JRYvmdunJZX7+Vh6U5HCuzRaQwM=
+SHA256 (Pkgfile) = e17637f955a73808e3643dce1c29e15ace61aa9b9723d1efca78c646833fc2ab
 SHA256 (.footprint) = 73b49f1c230567bc018e621a1cd7109608be6f4b55d4e09e9ccf796ea934c903
-SHA256 (bind-9.12.3-P1.tar.gz) = 6cb79389d787368af27f01c65a9fa09be1fd062eda37c94819a1a0178d5ded73
+SHA256 (bind-9.12.3-P4.tar.gz) = d1014453c62623e42323fd83fc89444c12ae6b707fd586466959a052fe21f206
 SHA256 (named.root) = 2e19682ad79bee201e3fc0454b73d45d04be7ba7dceb28612ec71fff0add6de4
 SHA256 (db.0.0.127) = 6c82640080a1c311005e7a264a2abbaabb7198f39430389b3ddf37cf22f42ff5
 SHA256 (db.localhost) = 1a61cc85da0581a784c06535b2462f027bc850270ac7287c1152b8479dc7a053
diff --git a/bind/Pkgfile b/bind/Pkgfile
index eebd058b..c09a7d8e 100644
--- a/bind/Pkgfile
+++ b/bind/Pkgfile
@@ -5,7 +5,7 @@
 # Depends on: 
 
 name=bind
-version=9.12.3-P1
+version=9.12.3-P4
 release=1
 source=(ftp://ftp.isc.org/isc/bind9/$version/$name-$version.tar.gz \
   named.root db.0.0.127 db.localhost db.ip6.arpa named named.conf)


More information about the CRUX mailing list