freebsd-skq/contrib/bind9/version

# $Id: version,v 1.29.134.13.8.2 2007/06/27 02:10:22 marka Exp $
#
# This file must follow /bin/sh rules.  It is imported directly via
# configure.
#
MAJORVER=9
MINORVER=4
PATCHVER=1
RELEASETYPE=-P
RELEASEVER=1
Vendor import of 9.4.1-P1, which has fixes for the following: 1. The default access control lists (acls) are not being correctly set. If not set anyone can make recursive queries and/or query the cache contents. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 2. The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 Approved by: re (kensmith, implicit) 2007-07-25 08:12:36 +00:00			`# $Id: version,v 1.29.134.13.8.2 2007/06/27 02:10:22 marka Exp $`
Vender import of BIND 9.3.0rc4. 2004-09-19 01:30:24 +00:00			`#`
			`# This file must follow /bin/sh rules. It is imported directly via`
			`# configure.`
			`#`
			`MAJORVER=9`
Vendor import of BIND 9.4.1 2007-06-02 23:21:47 +00:00			`MINORVER=4`
			`PATCHVER=1`
Vendor import of 9.4.1-P1, which has fixes for the following: 1. The default access control lists (acls) are not being correctly set. If not set anyone can make recursive queries and/or query the cache contents. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 2. The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 Approved by: re (kensmith, implicit) 2007-07-25 08:12:36 +00:00			`RELEASETYPE=-P`
			`RELEASEVER=1`