cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b13eccde6a
openbsd-ports/net/unbound/Makefile

46 lines
1.1 KiB
Makefile
Raw Normal View History

SECURITY update to Unbound 1.4.14, incorporating various diffs from Brad, jakob@ and myself. See http://www.unbound.net/downloads/CVE-2011-4528.txt for more details, summary from the above is below: -- Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed.Unbound also crashes when confronted with a query that eventually, and under specific circumstances, resolves to a domain that misses expected NSEC3 records. These two problems were discovered within 24 hours, hence a combined vulnerability disclosure. By constructing the non standard responses an attacker can use these vulnerabilities for a DOS attack. To our knowledge 'denial of service' is the only type of exploit possible. --
2011-12-20 05:49:19 -05:00
# $OpenBSD: Makefile,v 1.34 2011/12/20 10:49:19 sthen Exp $
unbound port
2008-05-23 02:52:21 -04:00
COMMENT= validating DNS resolver
SECURITY update to Unbound 1.4.14, incorporating various diffs from Brad, jakob@ and myself. See http://www.unbound.net/downloads/CVE-2011-4528.txt for more details, summary from the above is below: -- Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed.Unbound also crashes when confronted with a query that eventually, and under specific circumstances, resolves to a domain that misses expected NSEC3 records. These two problems were discovered within 24 hours, hence a combined vulnerability disclosure. By constructing the non standard responses an attacker can use these vulnerabilities for a DOS attack. To our knowledge 'denial of service' is the only type of exploit possible. --
2011-12-20 05:49:19 -05:00
DISTNAME= unbound-1.4.14
unbound port
2008-05-23 02:52:21 -04:00
CATEGORIES= net
MASTER_SITES= http://www.unbound.net/downloads/
HOMEPAGE= http://www.unbound.net/
MAINTAINER= Jakob Schlyter <jakob@openbsd.org>
# BSD
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes
SEPARATE_BUILD= concurrent
SECURITY update to Unbound 1.4.14, incorporating various diffs from Brad, jakob@ and myself. See http://www.unbound.net/downloads/CVE-2011-4528.txt for more details, summary from the above is below: -- Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed.Unbound also crashes when confronted with a query that eventually, and under specific circumstances, resolves to a domain that misses expected NSEC3 records. These two problems were discovered within 24 hours, hence a combined vulnerability disclosure. By constructing the non standard responses an attacker can use these vulnerabilities for a DOS attack. To our knowledge 'denial of service' is the only type of exploit possible. --
2011-12-20 05:49:19 -05:00
CONFIGURE_STYLE= autoconf
AUTOCONF_VERSION= 2.68
unbound port
2008-05-23 02:52:21 -04:00
USE_LIBTOOL= Yes
NO_REGRESS= Yes
SECURITY update to Unbound 1.4.14, incorporating various diffs from Brad, jakob@ and myself. See http://www.unbound.net/downloads/CVE-2011-4528.txt for more details, summary from the above is below: -- Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed.Unbound also crashes when confronted with a query that eventually, and under specific circumstances, resolves to a domain that misses expected NSEC3 records. These two problems were discovered within 24 hours, hence a combined vulnerability disclosure. By constructing the non standard responses an attacker can use these vulnerabilities for a DOS attack. To our knowledge 'denial of service' is the only type of exploit possible. --
2011-12-20 05:49:19 -05:00
SHARED_LIBS+= unbound 3.0
unbound port
2008-05-23 02:52:21 -04:00
SECURITY update to Unbound 1.4.14, incorporating various diffs from Brad, jakob@ and myself. See http://www.unbound.net/downloads/CVE-2011-4528.txt for more details, summary from the above is below: -- Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed.Unbound also crashes when confronted with a query that eventually, and under specific circumstances, resolves to a domain that misses expected NSEC3 records. These two problems were discovered within 24 hours, hence a combined vulnerability disclosure. By constructing the non standard responses an attacker can use these vulnerabilities for a DOS attack. To our knowledge 'denial of service' is the only type of exploit possible. --
2011-12-20 05:49:19 -05:00
WANTLIB= c crypto event expat ldns>=4.9 ssl
LIB_DEPENDS+= net/ldns/libldns>=1.6.11
unbound port
2008-05-23 02:52:21 -04:00
- fix wrong replyaddr count after jostled queries, which leads to eventual starvation where the daemon has no replyaddrs left to use. from upstream svn. - use the new --enable-allsymbols flag, exporting all (including internal) symbols from libunbound and linking binaries to it. saves 4MB in installed size on amd64. ok jakob@
2011-07-01 06:20:02 -04:00
CONFIGURE_ARGS+= --enable-allsymbols \
--with-ssl=/usr \
unbound port
2008-05-23 02:52:21 -04:00
--with-libevent=/usr \
update unbound to 1.4.7, from Brad. "please commit" jakob@ (maintainer).
2010-11-10 03:29:01 -05:00
--with-libexpat=/usr \
make unbound use ldns from ports now that ldns 1.3.0 is released.
2008-06-03 11:09:59 -04:00
--with-ldns=${LOCALBASE} \
unbound port
2008-05-23 02:52:21 -04:00
--without-pthreads \
unbound 1.0.1; bugfix release
2008-07-16 16:34:10 -04:00
--with-chroot-dir=/var/unbound \
--with-pidfile=/var/unbound/var/run/unbound.pid \
upgrade to unbound 1.0.2
2008-08-20 04:25:41 -04:00
--with-conf-file=/var/unbound/etc/unbound.conf \
--with-username=_unbound
unbound port
2008-05-23 02:52:21 -04:00
post-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/examples/unbound
${INSTALL_DATA} ${WRKINST}/var/unbound/etc/unbound.conf ${PREFIX}/share/examples/unbound
.include <bsd.port.mk>
Reference in New Issue Copy Permalink