[Midnightbsd-cvs] src [6965] stable/0.5: 0.5.9 RELEASE

[laffer1 at midnightbsd.org]

Revision: 6965
          http://svnweb.midnightbsd.org/src/?rev=6965
Author:   laffer1
Date:     2015-02-25 09:34:35 -0500 (Wed, 25 Feb 2015)
Log Message:
-----------
0.5.9 RELEASE

Modified Paths:
--------------
    stable/0.5/UPDATING
    stable/0.5/sys/conf/newvers.sh

Modified: stable/0.5/UPDATING
===================================================================
--- stable/0.5/UPDATING	2015-02-25 14:32:10 UTC (rev 6964)
+++ stable/0.5/UPDATING	2015-02-25 14:34:35 UTC (rev 6965)
@@ -1,5 +1,23 @@
 Updating Information for MidnightBSD users.
 
+20150225:
+	0.5.9 RELEASE
+
+	Fix two security vulnerabilities. 
+
+	1. BIND servers which are configured to perform DNSSEC validation and which
+	are using managed keys (which occurs implicitly when using
+	"dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
+	unpredictable behavior due to the use of an improperly initialized
+	variable.
+
+	CVE-2015-1349
+
+	2. An integer overflow in computing the size of IGMPv3 data buffer can result
+	in a buffer which is too small for the requested operation.
+
+	This can result in a DOS attack.
+
 20150114:
 	0.5.8 RELEASE
 

Modified: stable/0.5/sys/conf/newvers.sh
===================================================================
--- stable/0.5/sys/conf/newvers.sh	2015-02-25 14:32:10 UTC (rev 6964)
+++ stable/0.5/sys/conf/newvers.sh	2015-02-25 14:34:35 UTC (rev 6965)
@@ -32,7 +32,7 @@
 # $MidnightBSD$
 
 TYPE="MidnightBSD"
-REVISION="0.5.8"
+REVISION="0.5.9"
 BRANCH="RELEASE"
 if [ "X${BRANCH_OVERRIDE}" != "X" ]; then
 	BRANCH=${BRANCH_OVERRIDE}