CVS commit: [pkgsrc-2020Q1] pkgsrc/net/bind911

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed May 20 19:35:46 UTC 2020

Modified Files:
        pkgsrc/net/bind911 [pkgsrc-2020Q1]: Makefile PLIST distinfo

Log Message:
Pullup ticket #6208 - requested by taca
net/bind911: security fix

Revisions pulled up:
- net/bind911/Makefile                                          1.23-1.24
- net/bind911/PLIST                                             1.3
- net/bind911/distinfo                                          1.17-1.18

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Apr 18 06:12:28 UTC 2020

   Modified Files:
        pkgsrc/net/bind911: Makefile PLIST distinfo

   Log Message:
   net/bind911: update to 9.11.18

   Update bind911 to 9.11.18 (BIND 9.11.18).

        --- 9.11.18 released ---

   5380.        [contrib]       Fix building MySQL DLZ modules against MySQL 8
                        libraries. [GL #1678]

   5379.        [doc]           Clean up serve-stale related options that leaked into
                        the BIND 9.11 release. [GL !3265]

   5378.        [bug]           Receiving invalid DNS data was triggering an assertion
                        failure in nslookup. [GL #1652]

   5377.        [feature]       Detect atomic operations support on ppc64le. Thanks to
                        Petr Men=A8=EDk. [GL !3295]

   5376.        [bug]           Fix ineffective DNS rebinding protection when BIND is
                        configured as a forwarding DNS server. Thanks to Tobias
                        Klein. [GL #1574]

   5368.        [bug]           Named failed to restart if 'rndc addzone' names
                        contained special characters (e.g. '/'). [GL #1655]

        --- 9.11.17 released ---

   5358.        [bug]           Inline master zones whose master files were touched
                        but otherwise unchanged and were subsequently reloaded
                        may have stopped re-signing. [GL !3135]

   5357.        [bug]           Newly added RRSIG records with expiry times before
                        the previous earliest expiry times might not be
                        re-signed in time.  The was a side effect of 5315.
                        [GL !3137]

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue May 19 10:21:25 UTC 2020

   Modified Files:
        pkgsrc/net/bind911: Makefile distinfo

   Log Message:
   net/bind911: update to 9.11.19

   Update bind911 to 9.11.19 (BIND 9.11.19).

        --- 9.11.19 released ---

   5404.        [bug]           'named-checkconf -z' could incorrectly indicate
                        success if errors were found in one view but not in a
                        subsequent one. [GL #1807]

   5398.        [bug]           Named could fail to restart if a zone with a double
                        quote (") in its name was added with 'rndc addzone'.
                        [GL #1695]

   5395.        [security]      Further limit the number of queries that can be
                        triggered from a request.  Root and TLD servers
                        are no longer exempt from max-recursion-queries.
                        Fetches for missing name server address records
                        are limited to 4 for any domain. (CVE-2020-8616)
                        [GL #1388]

   5394.        [cleanup]       Named formerly attempted to change the effective UID an=
   d
                        GID in named_os_openfile(), which could trigger a
                        spurious log message if they were already set to the
                        desired values. This has been fixed. [GL #1042]
                        [GL #1090]

   5390.        [security]      Replaying a TSIG BADTIME response as a request could
                        trigger an assertion failure. (CVE-2020-8617)
                        [GL #1703]

   5387.        [func]          Warn about AXFR streams with inconsistent message IDs.
                        [GL #1674]


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.22.2.1 pkgsrc/net/bind911/Makefile
cvs rdiff -u -r1.2 -r1.2.4.1 pkgsrc/net/bind911/PLIST
cvs rdiff -u -r1.16 -r1.16.2.1 pkgsrc/net/bind911/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind911/Makefile
diff -u pkgsrc/net/bind911/Makefile:1.22 pkgsrc/net/bind911/Makefile:1.22.2.1
--- pkgsrc/net/bind911/Makefile:1.22    Thu Feb 20 16:38:16 2020
+++ pkgsrc/net/bind911/Makefile Wed May 20 19:35:46 2020
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.22 2020/02/20 16:38:16 taca Exp $
+# $NetBSD: Makefile,v 1.22.2.1 2020/05/20 19:35:46 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.11.16
+BIND_VERSION=  9.11.19
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind911/PLIST
diff -u pkgsrc/net/bind911/PLIST:1.2 pkgsrc/net/bind911/PLIST:1.2.4.1
--- pkgsrc/net/bind911/PLIST:1.2        Wed Sep 18 14:32:10 2019
+++ pkgsrc/net/bind911/PLIST    Wed May 20 19:35:46 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2019/09/18 14:32:10 taca Exp $
+@comment $NetBSD: PLIST,v 1.2.4.1 2020/05/20 19:35:46 bsiegert Exp $
 bin/arpaname
 bin/bind9-config
 bin/delv
@@ -208,6 +208,7 @@ include/isc/sockaddr.h
 include/isc/socket.h
 include/isc/stat.h
 include/isc/stats.h
+include/isc/stdatomic.h
 include/isc/stdio.h
 include/isc/stdlib.h
 include/isc/stdtime.h
@@ -268,8 +269,6 @@ include/pk11/site.h
 include/pkcs11/cryptoki.h
 include/pkcs11/eddsa.h
 include/pkcs11/pkcs11.h
-include/pkcs11/pkcs11f.h
-include/pkcs11/pkcs11t.h
 lib/libbind9.la
 lib/libdns.la
 lib/libirs.la

Index: pkgsrc/net/bind911/distinfo
diff -u pkgsrc/net/bind911/distinfo:1.16 pkgsrc/net/bind911/distinfo:1.16.2.1
--- pkgsrc/net/bind911/distinfo:1.16    Thu Feb 20 16:38:16 2020
+++ pkgsrc/net/bind911/distinfo Wed May 20 19:35:46 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.16 2020/02/20 16:38:16 taca Exp $
+$NetBSD: distinfo,v 1.16.2.1 2020/05/20 19:35:46 bsiegert Exp $
 
-SHA1 (bind-9.11.16.tar.gz) = 0317a5e610bdb4ececb08acd8ec347a206c5aa6a
-RMD160 (bind-9.11.16.tar.gz) = 90d657d41995db409d093a510012127897e4ec4e
-SHA512 (bind-9.11.16.tar.gz) = c5832d19a4c09a8aa332d0cdad20861a85fe7fc66d79f8aba4c1a522480a7456dc2aeb70edd496ca1ed12a2271eafeb34103929627dc29f2af6fbf65e41803e4
-Size (bind-9.11.16.tar.gz) = 8206345 bytes
+SHA1 (bind-9.11.19.tar.gz) = f62726f2379eb1f2921c64c20f6668ce3db190c2
+RMD160 (bind-9.11.19.tar.gz) = 1c3fb7df3a88e2e13053f606b6a2d6a3efd73185
+SHA512 (bind-9.11.19.tar.gz) = 4378afcd8c72a3f1b597e180a21674e1bbfc44b8378831ab3256395bdc46dce74da31aaa855fbae29d4c93e360dad233e3c8e3e69326779ddfecddbc96511ea2
+Size (bind-9.11.19.tar.gz) = 8230483 bytes
 SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
 SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee
 SHA1 (patch-bin_tests_system_metadata_tests.sh) = d01a492d0b7738760bdbff714248e279a78fef28