CVS commit: [pkgsrc-2020Q1] pkgsrc/net/bind914

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed May 20 19:42:25 UTC 2020

Modified Files:
        pkgsrc/net/bind914 [pkgsrc-2020Q1]: Makefile distinfo

Log Message:
Pullup ticket #6209 - requested by taca
net/bind914: security fix

Revisions pulled up:
- net/bind914/Makefile                                          1.21
- net/bind914/distinfo                                          1.15

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue May 19 10:23:04 UTC 2020

   Modified Files:
        pkgsrc/net/bind914: Makefile distinfo

   Log Message:
   net/bind914: update to 9.14.12

   Update bind914 to 9.14.12 (BIND 9.14.12).

   Note from release announce:

   BIND 9.14.12 is the final planned release in the now End-of-Life (EOL)
   9.14 branch.

        --- 9.14.12 released ---

   5395.        [security]      Further limit the number of queries that can be
                        triggered from a request.  Root and TLD servers
                        are no longer exempt from max-recursion-queries.
                        Fetches for missing name server address records
                        are limited to 4 for any domain. (CVE-2020-8616)
                        [GL #1388]

   5390.        [security]      Replaying a TSIG BADTIME response as a request could
                        trigger an assertion failure. (CVE-2020-8617)
                        [GL #1703]

   5376.        [bug]           Fix ineffective DNS rebinding protection when BIND is
                        configured as a forwarding DNS server. Thanks to Tobias
                        Klein. [GL #1574]

   5358.        [bug]           Inline master zones whose master files were touched
                        but otherwise unchanged and were subsequently reloaded
                        may have stopped re-signing. [GL !3135]

   5357.        [bug]           Newly added RRSIG records with expiry times before
                        the previous earliest expiry times might not be
                        re-signed in time.  This was a side effect of 5315.
                        [GL !3137]


To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.20.2.1 pkgsrc/net/bind914/Makefile
cvs rdiff -u -r1.14 -r1.14.2.1 pkgsrc/net/bind914/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind914/Makefile
diff -u pkgsrc/net/bind914/Makefile:1.20 pkgsrc/net/bind914/Makefile:1.20.2.1
--- pkgsrc/net/bind914/Makefile:1.20    Thu Mar 26 13:54:35 2020
+++ pkgsrc/net/bind914/Makefile Wed May 20 19:42:25 2020
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.20 2020/03/26 13:54:35 nia Exp $
+# $NetBSD: Makefile,v 1.20.2.1 2020/05/20 19:42:25 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.14.11
+BIND_VERSION=  9.14.12
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind914/distinfo
diff -u pkgsrc/net/bind914/distinfo:1.14 pkgsrc/net/bind914/distinfo:1.14.2.1
--- pkgsrc/net/bind914/distinfo:1.14    Thu Feb 20 16:37:06 2020
+++ pkgsrc/net/bind914/distinfo Wed May 20 19:42:25 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.14 2020/02/20 16:37:06 taca Exp $
+$NetBSD: distinfo,v 1.14.2.1 2020/05/20 19:42:25 bsiegert Exp $
 
-SHA1 (bind-9.14.11.tar.gz) = f65a3eb9183cb235ba313101d8f7db648cce6d07
-RMD160 (bind-9.14.11.tar.gz) = 9d7f376f63d5b39a1ce76414291160254321c20b
-SHA512 (bind-9.14.11.tar.gz) = ec34254d6fe5d72c704ba743d1af5582f2ea6b79363f132013ea9ebebed72c74a3ea9ae8a7978ca2b28f908ef848b9c2961cec85254b7d88680c269233b40524
-Size (bind-9.14.11.tar.gz) = 6310200 bytes
+SHA1 (bind-9.14.12.tar.gz) = 20fd9f09f251dcd367b6221a954ef68ac501de51
+RMD160 (bind-9.14.12.tar.gz) = 82ac9214698eee669f658e3d833727b431b8579a
+SHA512 (bind-9.14.12.tar.gz) = f4e6c50cbe8fdb44cdd8e30b4560b6fe2fccd0fd5bde527a897a66e85065265da0d0aceb95af42d5568dea95d59e68574e5a486bbb7e6c5d0af275538c353ddf
+Size (bind-9.14.12.tar.gz) = 6318913 bytes
 SHA1 (patch-bin_named_Makefile.in) = 741e3708c670baaec45446f6bb364ada448ae330
 SHA1 (patch-bin_named_main.c) = 51c8ab464a009575b6513c7ed4b79f89446eb7d0
 SHA1 (patch-bin_named_pfilter.c) = b54f872c883c8fbc2d9c04df65c185dc057cc36b