233139 2018-11-11 15:10:15 +0000 dns/powerdns: Update to 4.1.5 (Fixes security vulnerabilities) 2018-11-20 10:24:07 +0000 1 1 1 Unclassified Ports & Packages Individual Port(s) Latest Any Any Closed FIXED https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.5 security Normal Affects Many People --- 1 tremere swills ports-secteam oldest_to_newest 1021340 0 199138 tremere 2018-11-11 15:10:15 +0000 Created attachment 199138 Update to PowerDNS Authoritative 4.1.5 This releases fixes the following security advisories: - PowerDNS Security Advisory 2018-03 (CVE-2018-10851) - PowerDNS Security Advisory 2018-05 (CVE-2018-14626) It also contains some improvemens and bug fixes. Full changelog: https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.5 Buildlog: https://pkg.cainites.net/data/latest-per-pkg/powerdns/4.1.5/freebsd_11x64-system.log 1021341 1 tremere 2018-11-11 15:11:32 +0000 Deleted files: files/patch-pdns_opensslsigners.cc 1022545 2 199361 tremere 2018-11-19 21:39:02 +0000 Created attachment 199361 VuXML for powerdns < 4.1.5 issues 1022587 3 commit-hook 2018-11-20 10:18:58 +0000 A commit references this bug: Author: krion Date: Tue Nov 20 10:18:48 UTC 2018 New revision: 485423 URL: https://svnweb.freebsd.org/changeset/ports/485423 Log: Update to 4.1.5 This releases fixes the following security advisories: - PowerDNS Security Advisory 2018-03 (CVE-2018-10851) - PowerDNS Security Advisory 2018-05 (CVE-2018-14626) It also contains some improvemens and bug fixes. Full changelog: https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.5 PR: 233139 Submitted by: maintainer Changes: head/dns/powerdns/Makefile head/dns/powerdns/distinfo head/dns/powerdns/files/patch-pdns_opensslsigners.cc 1022589 4 commit-hook 2018-11-20 10:24:07 +0000 A commit references this bug: Author: krion Date: Tue Nov 20 10:23:05 UTC 2018 New revision: 485425 URL: https://svnweb.freebsd.org/changeset/ports/485425 Log: Add entry for dns/powerdns PR: 233139 Submitted by: maintainer Changes: head/security/vuxml/vuln.xml 199138 2018-11-11 15:10:15 +0000 2018-11-11 15:10:38 +0000 Update to PowerDNS Authoritative 4.1.5 powerdns-4.1.5.diff text/plain 1952 tremere SW5kZXg6IE1ha2VmaWxlCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIE1ha2VmaWxlCShyZXZpc2lvbiA0ODQ2NDkp CisrKyBNYWtlZmlsZQkod29ya2luZyBjb3B5KQpAQCAtMSw4ICsxLDggQEAKICMgJEZyZWVCU0Qk CiAKIFBPUlROQU1FPQlwb3dlcmRucwotRElTVFZFUlNJT049CTQuMS40Ci1QT1JUUkVWSVNJT049 CTEKK0RJU1RWRVJTSU9OPQk0LjEuNQorUE9SVFJFVklTSU9OPz0JMAogQ0FURUdPUklFUz0JZG5z IGlwdjYKIE1BU1RFUl9TSVRFUz0JaHR0cDovL2Rvd25sb2Fkcy5wb3dlcmRucy5jb20vcmVsZWFz ZXMvCiBESVNUTkFNRT0JcGRucy0ke0RJU1RWRVJTSU9OfQpJbmRleDogZGlzdGluZm8KPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gZGlzdGluZm8JKHJldmlzaW9uIDQ4NDY0OSkKKysrIGRpc3RpbmZvCSh3b3JraW5n IGNvcHkpCkBAIC0xLDMgKzEsMyBAQAotVElNRVNUQU1QID0gMTUzNTYxNjIwNQotU0hBMjU2IChw ZG5zLTQuMS40LnRhci5iejIpID0gZTk0MDg2MDMzODNkNTI5YjNiYmVlMjUwOWI3MzE4N2QyMTg2 YzUwMmE5YjA1MmQwN2UyNTBjZDhmMzg3M2VkNQotU0laRSAocGRucy00LjEuNC50YXIuYnoyKSA9 IDEwODkzNzYKK1RJTUVTVEFNUCA9IDE1NDE1ODAzMTEKK1NIQTI1NiAocGRucy00LjEuNS50YXIu YnoyKSA9IGMzMjk1NzBhNjZkOGM3MzQwZDM4ZmQ1ODJjYjIzYWQ2NDI3OTliODNjNzI3NmZiMGZk ZWE0MzAzNzU5YjRmOGEKK1NJWkUgKHBkbnMtNC4xLjUudGFyLmJ6MikgPSAxMTE2MjM4CkluZGV4 OiBmaWxlcy9wYXRjaC1wZG5zX29wZW5zc2xzaWduZXJzLmNjCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIGZpbGVz L3BhdGNoLXBkbnNfb3BlbnNzbHNpZ25lcnMuY2MJKHJldmlzaW9uIDQ4NDY0OSkKKysrIGZpbGVz L3BhdGNoLXBkbnNfb3BlbnNzbHNpZ25lcnMuY2MJKG5vbmV4aXN0ZW50KQpAQCAtMSwxMiArMCww IEBACi0tLS0gcGRucy9vcGVuc3Nsc2lnbmVycy5jYy5vcmlnCTIwMTgtMDItMTYgMDk6NTI6Mjkg VVRDCi0rKysgcGRucy9vcGVuc3Nsc2lnbmVycy5jYwotQEAgLTMzLDcgKzMzLDggQEAKLSAjaW5j bHVkZSAib3BlbnNzbHNpZ25lcnMuaGgiCi0gI2luY2x1ZGUgImRuc3NlY2luZnJhLmhoIgotIAot LSNpZiAoT1BFTlNTTF9WRVJTSU9OX05VTUJFUiA8IDB4MTAxMDAwMGZMIHx8IGRlZmluZWQgTElC UkVTU0xfVkVSU0lPTl9OVU1CRVIpCi0rI2lmIChPUEVOU1NMX1ZFUlNJT05fTlVNQkVSIDwgMHgx MDEwMDAwZkwgfHwgXAotKwkoZGVmaW5lZChMSUJSRVNTTF9WRVJTSU9OX05VTUJFUikgJiYgTElC UkVTU0xfVkVSU0lPTl9OVU1CRVIgPCAweDIwNzAwMDBmTCkpCi0gLyogT3BlblNTTCA8IDEuMS4w IG5lZWRzIHN1cHBvcnQgZm9yIHRocmVhZGluZy9sb2NraW5nIGluIHRoZSBjYWxsaW5nIGFwcGxp Y2F0aW9uLiAqLwotIHN0YXRpYyBwdGhyZWFkX211dGV4X3QgKm9wZW5zc2xsb2NrczsKLSAKClBy b3BlcnR5IGNoYW5nZXMgb246IGZpbGVzL3BhdGNoLXBkbnNfb3BlbnNzbHNpZ25lcnMuY2MKX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXwpEZWxldGVkOiBmYnNkOm5va2V5d29yZHMKIyMgLTEgKzAsMCAjIwoteWVzClwgTm8g bmV3bGluZSBhdCBlbmQgb2YgcHJvcGVydHkKRGVsZXRlZDogc3ZuOmVvbC1zdHlsZQojIyAtMSAr MCwwICMjCi1uYXRpdmUKXCBObyBuZXdsaW5lIGF0IGVuZCBvZiBwcm9wZXJ0eQpEZWxldGVkOiBz dm46bWltZS10eXBlCiMjIC0xICswLDAgIyMKLXRleHQvcGxhaW4KXCBObyBuZXdsaW5lIGF0IGVu ZCBvZiBwcm9wZXJ0eQo= 199361 2018-11-19 21:39:02 +0000 2018-11-19 21:39:02 +0000 VuXML for powerdns < 4.1.5 issues vuxml-powerdns.diff text/plain 2429 tremere SW5kZXg6IHZ1bG4ueG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIHZ1bG4ueG1sCShyZXZpc2lvbiA0ODUzMjcp CisrKyB2dWxuLnhtbAkod29ya2luZyBjb3B5KQpAQCAtNTgsNiArNTgsNDcgQEAKICAgKiBEbyBu b3QgZm9yZ2V0IHBvcnQgdmFyaWFudHMgKGxpbnV4LWYxMC1saWJ4bWwyLCBsaWJ4bWwyLCBldGMu KQogLS0+CiA8dnV4bWwgeG1sbnM9Imh0dHA6Ly93d3cudnV4bWwub3JnL2FwcHMvdnV4bWwtMSI+ CisgIDx2dWxuIHZpZD0iMGFlZTJmMTMtZWMxZC0xMWU4LThjOTItNjgwNWNhMmZhMjcxIj4KKyAg ICA8dG9waWM+cG93ZXJkbnMgLS0gTXVsdGlwbGUgdnVsbmVyYWJpbGl0aWVzPC90b3BpYz4KKyAg ICA8YWZmZWN0cz4KKyAgICAgIDxwYWNrYWdlPgorCTxuYW1lPnBvd2VyZG5zPC9uYW1lPgorCTxy YW5nZT48bHQ+NC4xLjU8L2x0PjwvcmFuZ2U+CisgICAgICA8L3BhY2thZ2U+CisgICAgPC9hZmZl Y3RzPgorICAgIDxkZXNjcmlwdGlvbj4KKyAgICAgIDxib2R5IHhtbG5zPSJodHRwOi8vd3d3Lncz Lm9yZy8xOTk5L3hodG1sIj4KKwk8cD5Qb3dlckROUyBUZWFtIHJlcG9ydHM6PC9wPgorCTxibG9j a3F1b3RlIGNpdGU9Imh0dHBzOi8vZG9jLnBvd2VyZG5zLmNvbS9hdXRob3JpdGF0aXZlL2NoYW5n ZWxvZy80LjEuaHRtbCI+CisJICA8cD5DVkUtMjAxOC0xMDg1MTogQW4gaXNzdWUgaGFzIGJlZW4g Zm91bmQgaW4gUG93ZXJETlMgQXV0aG9yaXRhdGl2ZSBTZXJ2ZXIgYWxsb3dpbmcKKwkgICAgYW4g YXV0aG9yaXplZCB1c2VyIHRvIGNhdXNlIGEgbWVtb3J5IGxlYWsgYnkgaW5zZXJ0aW5nIGEgc3Bl Y2lhbGx5IGNyYWZ0ZWQgcmVjb3JkCisJICAgIGluIGEgem9uZSB1bmRlciB0aGVpciBjb250cm9s LCB0aGVuIHNlbmRpbmcgYSBETlMgcXVlcnkgZm9yIHRoYXQgcmVjb3JkLiBUaGUgaXNzdWUKKwkg ICAgaXMgZHVlIHRvIHRoZSBmYWN0IHRoYXQgc29tZSBtZW1vcnkgaXMgYWxsb2NhdGVkIGJlZm9y ZSB0aGUgcGFyc2luZyBhbmQgaXMgbm90CisJICAgIGFsd2F5cyBwcm9wZXJseSByZWxlYXNlZCBp ZiB0aGUgcmVjb3JkIGlzIG1hbGZvcm1lZC4gV2hlbiB0aGUgUG93ZXJETlMKKwkgICAgQXV0aG9y aXRhdGl2ZSBTZXJ2ZXIgaXMgcnVuIGluc2lkZSB0aGUgZ3VhcmRpYW4gKC0tZ3VhcmRpYW4pLCBv ciBpbnNpZGUgYQorCSAgICBzdXBlcnZpc29yIGxpa2Ugc3VwZXJ2aXNvcmQgb3Igc3lzdGVtZCwg YW4gb3V0LW9mLW1lbW9yeSBjcmFzaCB3aWxsIGxlYWQgdG8gYW4KKwkgICAgYXV0b21hdGljIHJl c3RhcnQsIGxpbWl0aW5nIHRoZSBpbXBhY3QgdG8gYSBzb21ld2hhdCBkZWdyYWRlZCBzZXJ2aWNl LjwvcD4KKwkgIDxwPkNWRS0yMDE4LTE0NjI2OiBBbiBpc3N1ZSBoYXMgYmVlbiBmb3VuZCBpbiBQ b3dlckROUyBBdXRob3JpdGF0aXZlIFNlcnZlciBhbGxvd2luZworCSAgICBhIHJlbW90ZSB1c2Vy IHRvIGNyYWZ0IGEgRE5TIHF1ZXJ5IHRoYXQgd2lsbCBjYXVzZSBhbiBhbnN3ZXIgd2l0aG91dCBE TlNTRUMKKwkgICAgcmVjb3JkcyB0byBiZSBpbnNlcnRlZCBpbnRvIHRoZSBwYWNrZXQgY2FjaGUg YW5kIGJlIHJldHVybmVkIHRvIGNsaWVudHMgYXNraW5nIGZvcgorCSAgICBETlNTRUMgcmVjb3Jk cywgdGh1cyBoaWRpbmcgdGhlIHByZXNlbmNlIG9mIEROU1NFQyBzaWduYXR1cmVzIGZvciBhIHNw ZWNpZmljIHFuYW1lCisJICAgIGFuZCBxdHlwZS4gRm9yIGEgRE5TU0VDLXNpZ25lZCBkb21haW4s IHRoaXMgbWVhbnMgdGhhdCBETlNTRUMgdmFsaWRhdGluZyBjbGllbnRzCisJICAgIHdpbGwgY29u c2lkZXIgdGhlIGFuc3dlciB0byBiZSBib2d1cyB1bnRpbCBpdCBleHBpcmVzIGZyb20gdGhlIHBh Y2tldCBjYWNoZSwKKwkgICAgbGVhZGluZyB0byBhIGRlbmlhbCBvZiBzZXJ2aWNlLjwvcD4KKwk8 L2Jsb2NrcXVvdGU+CisgICAgICA8L2JvZHk+CisgICAgPC9kZXNjcmlwdGlvbj4KKyAgICA8cmVm ZXJlbmNlcz4KKyAgICAgIDx1cmw+aHR0cHM6Ly9kb2MucG93ZXJkbnMuY29tL2F1dGhvcml0YXRp dmUvY2hhbmdlbG9nLzQuMS5odG1sPC91cmw+CisgICAgICA8Y3ZlbmFtZT5DVkUtMjAxOC0xMDg1 MTwvY3ZlbmFtZT4KKyAgICAgIDxjdmVuYW1lPkNWRS0yMDE4LTE0NjI2PC9jdmVuYW1lPgorICAg IDwvcmVmZXJlbmNlcz4KKyAgICA8ZGF0ZXM+CisgICAgICA8ZGlzY292ZXJ5PjIwMTgtMTEtMDY8 L2Rpc2NvdmVyeT4KKyAgICAgIDxlbnRyeT4yMDE4LTExLTE5PC9lbnRyeT4KKyAgICA8L2RhdGVz PgorICA8L3Z1bG4+CisKICAgPHZ1bG4gdmlkPSJlOWFhMGU0Yy1lYThiLTExZTgtYTViNy0wMGUw NGMxZWE3M2QiPgogICAgIDx0b3BpYz5wb3dlcmRucy1yZWN1cnNvciAtLSBNdWx0aXBsZSB2dWxu ZXJhYmlsaXRpZXM8L3RvcGljPgogICAgIDxhZmZlY3RzPgo=