CVS commit: pkgsrc/net/bind914

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Nov 21 05:37:06 UTC 2019

Modified Files:
        pkgsrc/net/bind914: Makefile distinfo
        pkgsrc/net/bind914/patches: patch-lib_isc_stats.c

Log Message:
net/bind914: update to 9.14.8

Update bind914 to 9.14.8.  It includes fix for CVS-2019-6477.

        --- 9.14.8 released ---

5315.   [bug]           Apply the inital RRSIG expiration spread fixed
                        to all dynamically created records in the zone
                        including NSEC3. Also fix the signature clusters
                        when the server has been offline for prolonged
                        period of times. [GL #1256]

5314.   [func]          Added a new statistics variable "tcp-highwater"
                        that reports the maximum number of simultaneous TCP
                        clients BIND has handled while running. [GL #1206]

5313.   [bug]           The default GeoIP2 database location did not match
                        the ARM.  'named -V' now reports the default
                        location. [GL #1301]

5310.   [bug]           TCP failures were affecting EDNS statistics. [GL #1059]

5308.   [bug]           Don't log DNS_R_UNCHANGED from sync_secure_journal()
                        at ERROR level in receive_secure_serial(). [GL #1288]

5307.   [bug]           Fix hang when named-compilezone output is sent to pipe.
                        Thanks to Tony Finch. [GL !2481]

5306.   [security]      Set a limit on the number of concurrently served
                        pipelined TCP queries. (CVE-2019-6477) [GL #1264]

5305.   [bug]           NSEC Aggressive Cache ("synth-from-dnssec") has been
                        disabled by default because it was found to have
                        a significant performance impact on the recursive
                        service. [GL #1265]

5304.   [bug]           "dnskey-sig-validity 0;" was not being accepted.
                        [GL #876]

5302.   [bug]           Fix checking that "dnstap-output" is defined when
                        "dnstap" is specified in a view. [GL #1281]

5301.   [bug]           Detect partial prefixes / incomplete IPv4 address in
                        acls. [GL #1143]


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 pkgsrc/net/bind914/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/bind914/distinfo
cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind914/patches/patch-lib_isc_stats.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind914/Makefile
diff -u pkgsrc/net/bind914/Makefile:1.13 pkgsrc/net/bind914/Makefile:1.14
--- pkgsrc/net/bind914/Makefile:1.13    Sun Nov  3 11:45:30 2019
+++ pkgsrc/net/bind914/Makefile Thu Nov 21 05:37:06 2019
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.13 2019/11/03 11:45:30 rillig Exp $
+# $NetBSD: Makefile,v 1.14 2019/11/21 05:37:06 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.14.7
+BIND_VERSION=  9.14.8
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind914/distinfo
diff -u pkgsrc/net/bind914/distinfo:1.10 pkgsrc/net/bind914/distinfo:1.11
--- pkgsrc/net/bind914/distinfo:1.10    Thu Oct 24 12:50:36 2019
+++ pkgsrc/net/bind914/distinfo Thu Nov 21 05:37:06 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.10 2019/10/24 12:50:36 otis Exp $
+$NetBSD: distinfo,v 1.11 2019/11/21 05:37:06 taca Exp $
 
-SHA1 (bind-9.14.7.tar.gz) = ab0b14f4fe6a818fb15673ea9cef3eead8f6a94b
-RMD160 (bind-9.14.7.tar.gz) = 6caf6e1a7ea03e311c6bcdd1cca63547e230f86b
-SHA512 (bind-9.14.7.tar.gz) = e1837ebfbbc60487f5f0e67fb9e935588fd6e5ffe55cdc9dc77e3ce63cd6fc4f076f4eb282cc4f51701ddda3e51e8f15255db5a3841f9fe92a4fb4207d806740
-Size (bind-9.14.7.tar.gz) = 6320994 bytes
+SHA1 (bind-9.14.8.tar.gz) = c8481fd5fe061abd87a5a98e19c9a797330c7a76
+RMD160 (bind-9.14.8.tar.gz) = fa1b039caaa96e46d528816d4b1c7b80b8da6d21
+SHA512 (bind-9.14.8.tar.gz) = eb52760982ebd246e6e1945684771193fc7364324a6d6a95a0cae33afa0a4fa24ffe8313b5f9094420c7c2ec932b1b1a9fb19f6e673ff3c5583ab5e3ff04eb6a
+Size (bind-9.14.8.tar.gz) = 6403140 bytes
 SHA1 (patch-bin_named_Makefile.in) = 741e3708c670baaec45446f6bb364ada448ae330
 SHA1 (patch-bin_named_main.c) = 51c8ab464a009575b6513c7ed4b79f89446eb7d0
 SHA1 (patch-bin_named_pfilter.c) = b54f872c883c8fbc2d9c04df65c185dc057cc36b
@@ -34,7 +34,7 @@ SHA1 (patch-lib_dns_spnego.c) = 28672126
 SHA1 (patch-lib_dns_validator.c) = 7d7471efe5109f5b2d6f9e99fe15fa314fdd217d
 SHA1 (patch-lib_dns_view.c) = 25095827adbc75dc629b0f435dbd711b599c86c9
 SHA1 (patch-lib_isc_backtrace.c) = 5fa1dd0f18ae757233d9cc21e36a5f6a84990db1
-SHA1 (patch-lib_isc_stats.c) = 9857f640fb0becfab1a7f347f835610230bd3279
+SHA1 (patch-lib_isc_stats.c) = 3762657c325fa9f6d5b4dda4b0ad3f8546b50212
 SHA1 (patch-lib_isc_unix_net.c) = a8779d7e51c3a54f5dada1396abe10eb77ff0df9
 SHA1 (patch-lib_isc_unix_socket.c) = 3325d04decda1d6ecd9e5be34ac5fe4c122466f4
 SHA1 (patch-lib_isc_unix_time.c) = 04312e043601688aa2b0a09dad1bcb51d9273e9d

Index: pkgsrc/net/bind914/patches/patch-lib_isc_stats.c
diff -u pkgsrc/net/bind914/patches/patch-lib_isc_stats.c:1.3 pkgsrc/net/bind914/patches/patch-lib_isc_stats.c:1.4
--- pkgsrc/net/bind914/patches/patch-lib_isc_stats.c:1.3        Thu Jul 18 03:02:02 2019
+++ pkgsrc/net/bind914/patches/patch-lib_isc_stats.c    Thu Nov 21 05:37:06 2019
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_isc_stats.c,v 1.3 2019/07/18 03:02:02 taca Exp $
+$NetBSD: patch-lib_isc_stats.c,v 1.4 2019/11/21 05:37:06 taca Exp $
 
 * Platform fixes from NetBSD base system.
 
---- lib/isc/stats.c.orig       2019-07-09 18:15:48.000000000 +0000
+--- lib/isc/stats.c.orig       2019-11-06 21:29:49.000000000 +0000
 +++ lib/isc/stats.c
 @@ -30,7 +30,7 @@
  #define ISC_STATS_MAGIC                       ISC_MAGIC('S', 't', 'a', 't')
@@ -10,6 +10,6 @@ $NetBSD: patch-lib_isc_stats.c,v 1.3 201
  
 -#if defined(_WIN32) && !defined(_WIN64)
 +#if (defined(_WIN32) && !defined(_WIN64)) || !defined(_LP64)
- typedef atomic_int_fast32_t isc_stat_t;
+       typedef atomic_int_fast32_t isc__atomic_statcounter_t;
  #else
- typedef atomic_int_fast64_t isc_stat_t;
+       typedef atomic_int_fast64_t isc__atomic_statcounter_t;