CVS commit: pkgsrc/net/bind911

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Jun 18 14:06:21 UTC 2020

Modified Files:
        pkgsrc/net/bind911: Makefile PLIST distinfo

Log Message:
net/bind911: update to 9.11.20

Update bind911 to 9.11.20, fixing CVE-2020-8619.

        --- 9.11.20 released ---

5437.   [bug]           Fix a data race in lib/dns/resolver.c:log_formerr().
                        [GL #1808]

5434.   [security]      It was possible to trigger an INSIST in
                        lib/dns/rbtdb.c:new_reference() with a particular zone
                        content and query patterns. (CVE-2020-8619) [GL #1111]
                        [GL #1718]

5433.   [test]          Prevent the resolver system test for change #5395
                        (max-recursion-queries) from failing on systems without
                        IPv6 support. [GL #1873]

5428.   [bug]           Clean up GSSAPI resources in nsupdate only after taskmgr
                        has been destroyed. Thanks to Petr Menšík. [GL !3316]

5427.   [bug]           Fix a regression in address/prefix length checking that
                        should have been a warning instead of an error.
                        [GL #1849]

5415.   [test]          Address race in dnssec system test that led to
                        test failures. [GL #1852]

5413.   [test]          Address race in autosign system test that led to
                        test failures. [GL #1852]

5412.   [bug]           'provide-ixfr no;' failed to return up-to-date responses
                        when the serial was greater than or equal to the
                        current serial. [GL #1714]

5409.   [performance]   When looking up NSEC3 data in a zone database, skip the
                        check for empty non-terminal nodes; the NSEC3 tree does
                        not have any. [GL #1834]

5408.   [protocol]      Print Extended DNS Errors if present in OPT record.
                        [GL #1835]

5405.   [bug]           'named-checkconf -p' could include spurious text in
                        server-addresses statements due to an uninitialized DSCP
                        value. [GL #1812]


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.28 pkgsrc/net/bind911/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind911/PLIST
cvs rdiff -u -r1.19 -r1.20 pkgsrc/net/bind911/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind911/Makefile
diff -u pkgsrc/net/bind911/Makefile:1.27 pkgsrc/net/bind911/Makefile:1.28
--- pkgsrc/net/bind911/Makefile:1.27    Tue Jun  2 08:24:29 2020
+++ pkgsrc/net/bind911/Makefile Thu Jun 18 14:06:21 2020
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.27 2020/06/02 08:24:29 adam Exp $
+# $NetBSD: Makefile,v 1.28 2020/06/18 14:06:21 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
@@ -15,7 +14,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.11.19
+BIND_VERSION=  9.11.20
 
 .include "../../mk/bsd.prefs.mk"
 

Index: pkgsrc/net/bind911/PLIST
diff -u pkgsrc/net/bind911/PLIST:1.3 pkgsrc/net/bind911/PLIST:1.4
--- pkgsrc/net/bind911/PLIST:1.3        Sat Apr 18 06:12:28 2020
+++ pkgsrc/net/bind911/PLIST    Thu Jun 18 14:06:21 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2020/04/18 06:12:28 taca Exp $
+@comment $NetBSD: PLIST,v 1.4 2020/06/18 14:06:21 taca Exp $
 bin/arpaname
 bin/bind9-config
 bin/delv
@@ -223,6 +223,7 @@ include/isc/time.h
 include/isc/timer.h
 include/isc/tm.h
 include/isc/types.h
+include/isc/utf8.h
 include/isc/util.h
 include/isc/version.h
 include/isc/xml.h

Index: pkgsrc/net/bind911/distinfo
diff -u pkgsrc/net/bind911/distinfo:1.19 pkgsrc/net/bind911/distinfo:1.20
--- pkgsrc/net/bind911/distinfo:1.19    Sat May 30 14:20:36 2020
+++ pkgsrc/net/bind911/distinfo Thu Jun 18 14:06:21 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.19 2020/05/30 14:20:36 taca Exp $
+$NetBSD: distinfo,v 1.20 2020/06/18 14:06:21 taca Exp $
 
-SHA1 (bind-9.11.19.tar.gz) = f62726f2379eb1f2921c64c20f6668ce3db190c2
-RMD160 (bind-9.11.19.tar.gz) = 1c3fb7df3a88e2e13053f606b6a2d6a3efd73185
-SHA512 (bind-9.11.19.tar.gz) = 4378afcd8c72a3f1b597e180a21674e1bbfc44b8378831ab3256395bdc46dce74da31aaa855fbae29d4c93e360dad233e3c8e3e69326779ddfecddbc96511ea2
-Size (bind-9.11.19.tar.gz) = 8230483 bytes
+SHA1 (bind-9.11.20.tar.gz) = ff6ad0d3f9282a77786e93eb889154008ef1ccdf
+RMD160 (bind-9.11.20.tar.gz) = ce7f8bb446d63c1b4dbdccf7e6294b87fdba6101
+SHA512 (bind-9.11.20.tar.gz) = 249710a35dfd340abf8d07c526fb9dd05ab3ed186641f33b697f9a59a866965f43d77e6d0c77b3690698eb6d451a15506cedc5da18aff666c9d95a864268dd25
+Size (bind-9.11.20.tar.gz) = 8244703 bytes
 SHA1 (patch-bin_named_Makefile.in) = 3e5b98e3e0bdb701be679d3580d6d2d7609d655b
 SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
 SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee