CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Tue Feb 13 13:50:39 UTC 2024

Modified Files:
        pkgsrc/net/bind918: Makefile distinfo
        pkgsrc/net/bind918/patches: patch-lib_dns_rbtdb.c
            patch-lib_isc_netmgr_netmgr.c

Log Message:
net/bind918: update to 9.18.24

9.18.24 (2024-02-13)

        --- 9.18.24 released ---

6343.   [bug]           Fix case insensitive setting for isc_ht hashtable.
                        [GL #4568]

        --- 9.18.23 released ---

6322.   [security]      Specific DNS answers could cause a denial-of-service
                        condition due to DNS validation taking a long time.
                        (CVE-2023-50387) [GL #4424]

6321.   [security]      Change 6315 inadvertently introduced regressions that
                        could cause named to crash. [GL #4234]

6320.   [bug]           Under some circumstances, the DoT code in client
                        mode could process more than one message at a time when
                        that was not expected. That has been fixed. [GL #4487]

        --- 9.18.22 released ---

6319.   [func]          Limit isc_task_send() overhead for RBTDB tree pruning.
                        [GL #4383]

6317.   [security]      Restore DNS64 state when handling a serve-stale timeout.
                        (CVE-2023-5679) [GL #4334]

6316.   [security]      Specific queries could trigger an assertion check with
                        nxdomain-redirect enabled. (CVE-2023-5517) [GL #4281]

6315.   [security]      Speed up parsing of DNS messages with many different
                        names. (CVE-2023-4408) [GL #4234]

6314.   [bug]           Address race conditions in dns_tsigkey_find().
                        [GL #4182]

6312.   [bug]           Conversion from NSEC3 signed to NSEC signed could
                        temporarily put the zone into a state where it was
                        treated as unsigned until the NSEC chain was built.
                        Additionally conversion from one set of NSEC3 parameters
                        to another could also temporarily put the zone into a
                        state where it was treated as unsigned until the new
                        NSEC3 chain was built. [GL #1794] [GL #4495]

6310.   [bug]           Memory leak in zone.c:sign_zone. When named signed a
                        zone it could leak dst_keys due to a misplaced
                        'continue'. [GL #4488]

6306.   [func]          Log more details about the cause of "not exact" errors.
                        [GL #4500]

6304.   [bug]           The wrong time was being used to determine what RRSIGs
                        where to be generated when dnssec-policy was in use.
                        [GL #4494]

6302.   [func]          The "trust-anchor-telemetry" statement is no longer
                        marked as experimental. This silences a relevant log
                        message that was emitted even when the feature was
                        explicitly disabled. [GL #4497]

6300.   [bug]           Fix statistics export to use full 64 bit signed numbers
                        instead of truncating values to unsigned 32 bits.
                        [GL #4467]

6299.   [port]          NetBSD has added 'hmac' to libc which collides with our
                        use of 'hmac'. [GL #4478]


To generate a diff of this commit:
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/net/bind918/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c \
    pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.26 pkgsrc/net/bind918/Makefile:1.27
--- pkgsrc/net/bind918/Makefile:1.26    Tue Jan 30 18:29:19 2024
+++ pkgsrc/net/bind918/Makefile Tue Feb 13 13:50:39 2024
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.26 2024/01/30 18:29:19 adam Exp $
+# $NetBSD: Makefile,v 1.27 2024/02/13 13:50:39 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  https://downloads.isc.org/isc/bind9/${BIND_VERSION}/
 EXTRACT_SUFX=  .tar.xz
@@ -16,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.21
+BIND_VERSION=  9.18.24
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.14 pkgsrc/net/bind918/distinfo:1.15
--- pkgsrc/net/bind918/distinfo:1.14    Fri Jan  5 01:52:20 2024
+++ pkgsrc/net/bind918/distinfo Tue Feb 13 13:50:39 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.14 2024/01/05 01:52:20 taca Exp $
+$NetBSD: distinfo,v 1.15 2024/02/13 13:50:39 taca Exp $
 
-BLAKE2s (bind-9.18.21.tar.xz) = 951cc0d81670872911b0fa1ff649bf25ab7fa5edfea74470708d1c7052faa8a3
-SHA512 (bind-9.18.21.tar.xz) = 3cbc1775b6ca3d5eda0c277ab1246b5baa535dac53df3e60690aa7a2529bcb0fb644f7749b21b757870e5b3bc5f53ae9f0c0db182664de1b23f7e62c3fa8757d
-Size (bind-9.18.21.tar.xz) = 5507132 bytes
+BLAKE2s (bind-9.18.24.tar.xz) = be5193356fcdd06256343776425012970124d0940ff950ff31367be17b40ae9f
+SHA512 (bind-9.18.24.tar.xz) = 465f5b01570fdde5c95adfb780f54e0585814bd25baf914bb95bf5972f15a672e3e7b743a55f1804e69e17609d5a0cd66cc2bbab9174238b3c89e5ad732dc085
+Size (bind-9.18.24.tar.xz) = 5515528 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 6e59d3f637ebb829eec2f76ba7c350fb5cf9be6d
@@ -12,7 +12,7 @@ SHA1 (patch-lib_dns_byaddr.c) = 647ddaaa
 SHA1 (patch-lib_dns_gssapi__link.c) = 72296598b0bdd2a57d0f38ecf1775e2898a041c6
 SHA1 (patch-lib_dns_include_dns_zone.h) = e6dfcd43430538ac2a39b217fcae0d81e4c4d163
 SHA1 (patch-lib_dns_lookup.c) = 6c7463aca16abf6bd578aba1733a3217608a39d3
-SHA1 (patch-lib_dns_rbtdb.c) = e8d61e1ba613b2a2fdcd3ff077e2e5b6ce2e45b2
+SHA1 (patch-lib_dns_rbtdb.c) = f216c1f629add101daf1cec45e1f693204beeefe
 SHA1 (patch-lib_dns_request.c) = 4a9d0409afcf9f989aa9297efb97c578b4863d9c
 SHA1 (patch-lib_dns_sdb.c) = ed447ec7a134e620765b25ee36124a19dfd9fab0
 SHA1 (patch-lib_dns_sdlz.c) = 4fc15a577c64501c10c144eab147e54686e80309
@@ -22,7 +22,7 @@ SHA1 (patch-lib_dns_zone.c) = cd7bc1e76c
 SHA1 (patch-lib_isc_include_isc_netmgr.h) = 48ac44c6a9b81e6b442deba6c075653d3691464b
 SHA1 (patch-lib_isc_net.c) = 743de2701fa96ef25e5689f40e381628cff641d5
 SHA1 (patch-lib_isc_netmgr_netmgr-int.h) = d84993edf254605f85421fbdd2fc523255c7316d
-SHA1 (patch-lib_isc_netmgr_netmgr.c) = 3df1d37061f6ceb37e309a0dc4f782fc35863146
+SHA1 (patch-lib_isc_netmgr_netmgr.c) = 0e94f78e0f6ac43197883adac7828a3f0d04291c
 SHA1 (patch-lib_isc_rwlock.c) = 1d114248ddee20db7a7429afab446f8b2f0dca82
 SHA1 (patch-lib_isc_siphash.c) = 2dd80dde7bd8e869a3cf03c1699665b56eaaf866
 SHA1 (patch-lib_isc_time.c) = 22780fd25d89a0ece46ec1624b3977ca4c46281a

Index: pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c
diff -u pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c:1.1 pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c:1.2
--- pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c:1.1        Sun Dec 11 01:57:55 2022
+++ pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c    Tue Feb 13 13:50:39 2024
@@ -1,11 +1,11 @@
-$NetBSD: patch-lib_dns_rbtdb.c,v 1.1 2022/12/11 01:57:55 sekiya Exp $
+$NetBSD: patch-lib_dns_rbtdb.c,v 1.2 2024/02/13 13:50:39 taca Exp $
 
 * Take from NetBSD base.
 
---- lib/dns/rbtdb.c.orig       2022-04-11 15:28:12.000000000 +0000
+--- lib/dns/rbtdb.c.orig       2024-02-11 10:42:55.656990155 +0000
 +++ lib/dns/rbtdb.c
-@@ -2277,7 +2277,7 @@ prune_tree(isc_task_t *task, isc_event_t
-       NODE_UNLOCK(&rbtdb->node_locks[locknum].lock, isc_rwlocktype_write);
+@@ -2234,7 +2234,7 @@ prune_tree(isc_task_t *task, isc_event_t
+       }
        RWUNLOCK(&rbtdb->tree_lock, isc_rwlocktype_write);
  
 -      detach((dns_db_t **)&rbtdb);
Index: pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c
diff -u pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c:1.1 pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c:1.2
--- pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c:1.1        Sun Dec 11 01:57:55 2022
+++ pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c    Tue Feb 13 13:50:39 2024
@@ -1,19 +1,19 @@
-$NetBSD: patch-lib_isc_netmgr_netmgr.c,v 1.1 2022/12/11 01:57:55 sekiya Exp $
+$NetBSD: patch-lib_isc_netmgr_netmgr.c,v 1.2 2024/02/13 13:50:39 taca Exp $
 
 * Take from NetBSD base.
 
---- lib/isc/netmgr/netmgr.c.orig       2021-09-07 09:37:05.000000000 +0000
+--- lib/isc/netmgr/netmgr.c.orig       2024-02-11 10:42:55.700991300 +0000
 +++ lib/isc/netmgr/netmgr.c
-@@ -373,7 +373,7 @@ isc__netmgr_create(isc_mem_t *mctx, uint
+@@ -314,7 +314,7 @@ isc__netmgr_create(isc_mem_t *mctx, uint
                mgr->workers_running++;
                isc_thread_create(nm_thread, &mgr->workers[i], &worker->thread);
  
--              snprintf(name, sizeof(name), "isc-net-%04zu", i);
-+              snprintf(name, sizeof(name), "net-%04zu", i);
+-              snprintf(name, sizeof(name), "isc-net-%04d", i);
++              snprintf(name, sizeof(name), "net-%04d", i);
                isc_thread_setname(worker->thread, name);
        }
  
-@@ -1828,6 +1828,13 @@ isc_nmhandle_getdata(isc_nmhandle_t *han
+@@ -1910,6 +1910,13 @@ isc_nmhandle_getdata(isc_nmhandle_t *han
        return (handle->opaque);
  }