Bugzilla Bug 168356

see subject and url.

Please note IDN and DLZ contributions are included in bind 9.4.0.
Additionnal testing should be perform on hardened plateform.

See:
http://forums.gentoo.org/viewtopic-t-540140-highlight-named+stack+smashing+attack+queryfind.html

Thanks.

committed,
thanks for reporting.

Tried to update to the new 9.4.0.ebuild, but it gives me the following error:


>>> Unpacking bind-9.4.0.tar.gz to /var/tmp/portage/net-dns/bind-9.4.0/work

 * Cannot find $EPATCH_SOURCE!  Value for $EPATCH_SOURCE is:
 *
 *   /usr/portage/net-dns/bind/files/bind-9.4.0-dlzbdb-close_cursor.patch
 *   ( bind-9.4.0-dlzbdb-close_cursor.patch )


!!! ERROR: net-dns/bind-9.4.0 failed.
Call stack:
  ebuild.sh, line 1614:   Called dyn_unpack
  ebuild.sh, line 751:   Called qa_call 'src_unpack'
  environment, line 3546:   Called src_unpack
  bind-9.4.0.ebuild, line 58:   Called epatch
'/usr/portage/net-dns/bind/files/bind-9.4.0-dlzbdb-close_cursor.patch'
  eutils.eclass, line 198:   Called die

!!! Cannot find $EPATCH_SOURCE!
!!! If you need support, post the topmost build error, and the call stack if
relevant.
!!! A complete build log is located at
'/var/tmp/portage/net-dns/bind-9.4.0/temp/build.log'.



The requested file cannot be found in the /usr/portage/net-dns/bind/files

Balazs Kovacs

Compilation works fine with -idn -dlz as long as you remove eptach from source
ebuild. DLZ is now part of official bind branch

Created an attachment (id=111618) [details]
ebuild patch

This patch for ebuild bind-9.4.0 add the following features
- upgrade minimum SSL dependency as notice in bind 9.4.0 release note (SSL
0.9.7l)
- add "urandum" USE to use /dev/urandom instead of /dev/random (like
dev-libs/apr)
- comment DLZ patch from ebuild

Hello

With the following patch and the following USE :
berkdb dlz* idn* ipv6 ssl threads urandom%* -doc -ldap -mysql -odbc -postgres
-resolvconf (-selinux)

bind-9.4.0 compiles fine !!!

my fault. forgotten patch committed now.