CVS commit: pkgsrc/net/bind911

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Nov 21 05:38:21 UTC 2019

Modified Files:
        pkgsrc/net/bind911: Makefile distinfo

Log Message:
net/bind911: update to 9.11.13

Update bind911 to 9.11.3.  It includes fix for CVS-2019-6477.

        --- 9.11.13 released ---

5315.   [bug]           Apply the inital RRSIG expiration spread fixed
                        to all dynamically created records in the zone
                        including NSEC3. Also fix the signature clusters
                        when the server has been offline for prolonged
                        period of times. [GL #1256]

5314.   [func]          Added a new statistics variable "tcp-highwater"
                        that reports the maximum number of simultaneous TCP
                        clients BIND has handled while running. [GL #1206]

5313.   [bug]           The default GeoIP2 database location did not match
                        the ARM.  'named -V' now reports the default
                        location. [GL #1301]

5310.   [bug]           TCP failures were affecting EDNS statistics. [GL #1059]

5309.   [bug]           "geoip-use-ecs yes;" was not working for GeoIP2.
                        [GL #1275]

5308.   [bug]           Don't log DNS_R_UNCHANGED from sync_secure_journal()
                        at ERROR level in receive_secure_serial(). [GL #1288]

5307.   [bug]           Fix hang when named-compilezone output is sent to pipe.
                        Thanks to Tony Finch. [GL !2481]

5306.   [security]      Set a limit on the number of concurrently served
                        pipelined TCP queries. (CVE-2019-6477) [GL #1264]

5302.   [bug]           Fix checking that "dnstap-output" is defined when
                        "dnstap" is specified in a view. [GL #1281]

5301.   [bug]           Detect partial prefixes / incomplete IPv4 address in
                        acls. [GL #1143]


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.17 pkgsrc/net/bind911/Makefile
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/bind911/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind911/Makefile
diff -u pkgsrc/net/bind911/Makefile:1.16 pkgsrc/net/bind911/Makefile:1.17
--- pkgsrc/net/bind911/Makefile:1.16    Sun Nov  3 11:45:30 2019
+++ pkgsrc/net/bind911/Makefile Thu Nov 21 05:38:21 2019
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.16 2019/11/03 11:45:30 rillig Exp $
+# $NetBSD: Makefile,v 1.17 2019/11/21 05:38:21 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.11.12
+BIND_VERSION=  9.11.13
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind911/distinfo
diff -u pkgsrc/net/bind911/distinfo:1.12 pkgsrc/net/bind911/distinfo:1.13
--- pkgsrc/net/bind911/distinfo:1.12    Thu Oct 17 00:48:31 2019
+++ pkgsrc/net/bind911/distinfo Thu Nov 21 05:38:21 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.12 2019/10/17 00:48:31 taca Exp $
+$NetBSD: distinfo,v 1.13 2019/11/21 05:38:21 taca Exp $
 
-SHA1 (bind-9.11.12.tar.gz) = bf154d1029791545a5d5aff42d60bfed71e3b515
-RMD160 (bind-9.11.12.tar.gz) = 5304d44a2f52c121b074742f8e6b33ac83facc49
-SHA512 (bind-9.11.12.tar.gz) = 7e2b9ef4ed5a00c2e5310c932c177887aed330d94eefc87d732dda010f2b71477e2f9d6ea89422ccbc8f6f04ceb83419b758218bcc02f25b34751bad974174e8
-Size (bind-9.11.12.tar.gz) = 8180761 bytes
+SHA1 (bind-9.11.13.tar.gz) = 550367762a653ac5ed0eb04b316d06517650a925
+RMD160 (bind-9.11.13.tar.gz) = d1d14035681abd25d10592c60682501c1aaded38
+SHA512 (bind-9.11.13.tar.gz) = 6e5289ff231b8d7d2f02ae02a1cf43abff3e507e1d96d8ec002dc71097fc77dc5514762ff1ea5918159c88319b1d5eed78c6dc1a7835173db234d4ee887644bc
+Size (bind-9.11.13.tar.gz) = 8370441 bytes
 SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
 SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee
 SHA1 (patch-bin_tests_system_metadata_tests.sh) = d01a492d0b7738760bdbff714248e279a78fef28