CVS commit: [pkgsrc-2023Q4] pkgsrc/net/bind918

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: [pkgsrc-2023Q4] pkgsrc/net/bind918
From: "Benny Siegert" <bsiegert%netbsd.org@localhost>
Date: Tue, 13 Feb 2024 16:45:52 +0000

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue Feb 13 16:45:51 UTC 2024

Modified Files:
        pkgsrc/net/bind918 [pkgsrc-2023Q4]: Makefile buildlink3.mk distinfo
        pkgsrc/net/bind918/patches [pkgsrc-2023Q4]: patch-lib_dns_rbtdb.c
            patch-lib_isc_netmgr_netmgr.c

Log Message:
Pullup ticket #6835 - requested by taca
net/bind918: security fix

Revisions pulled up:
- net/bind918/Makefile                                          1.25-1.27
- net/bind918/buildlink3.mk                                     1.2
- net/bind918/distinfo                                          1.14-1.15
- net/bind918/patches/patch-lib_dns_rbtdb.c                     1.2
- net/bind918/patches/patch-lib_isc_netmgr_netmgr.c             1.2

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jan  5 01:52:20 UTC 2024

   Modified Files:
        pkgsrc/net/bind918: Makefile distinfo

   Log Message:
   net/bind918: update to 9.18.21

   9.18.21 (2023-12-20)

   6297.        [bug]           Improve LRU cleaning behaviour. [GL #4448]

   6296.        [func]          The "resolver-nonbackoff-tries" and
                        "resolver-retry-interval" options are deprecated;
                        a warning will be logged if they are used. [GL #4405]

   6294.        [bug]           BIND might sometimes crash after startup or
                        re-configuration when one 'tls' entry is used multiple
                        times to connect to remote servers due to initialisation
                        attempts from contexts of multiple threads. That has
                        been fixed. [GL #4464]

   6290.        [bug]           Dig +yaml will now report "no servers could be reached"
                        also for UDP setup failure when no other servers or
                        tries are left. [GL #1229]

   6287.        [bug]           Recognize escapes when reading the public key from file.
                        [GL !8502]

   6286.        [bug]           Dig +yaml will now report "no servers could be reached"
                        on TCP connection failure as well as for UDP timeouts.
                        [GL #4396]

   6282.        [func]          Deprecate AES-based DNS cookies. [GL #4421]

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Tue Jan 30 18:29:21 UTC 2024

   Modified Files:
        pkgsrc/audio/libilbc: Makefile
        pkgsrc/audio/termusic: Makefile
        pkgsrc/biology/plinkseq: Makefile
        pkgsrc/chat/ekg: Makefile
        pkgsrc/chat/libgadu: Makefile buildlink3.mk
        pkgsrc/databases/postgresql-postgis2: Makefile
        pkgsrc/devel/abseil: buildlink3.mk
        pkgsrc/devel/compizconfig-backend-gconf: Makefile buildlink3.mk
        pkgsrc/devel/cre2: Makefile
        pkgsrc/devel/libcompizconfig: Makefile buildlink3.mk
        pkgsrc/devel/protobuf: Makefile buildlink3.mk
        pkgsrc/devel/protobuf-c: Makefile buildlink3.mk
        pkgsrc/devel/py-compizconfig: Makefile buildlink3.mk
        pkgsrc/devel/re2: Makefile buildlink3.mk
        pkgsrc/graphics/opencv: Makefile buildlink3.mk
        pkgsrc/graphics/opencv-contrib-face: Makefile buildlink3.mk
        pkgsrc/graphics/py-Willow: Makefile
        pkgsrc/inputmethod/fcitx5-mozc: Makefile
        pkgsrc/misc/libreoffice: Makefile
        pkgsrc/net/bind916: Makefile
        pkgsrc/net/bind918: Makefile
        pkgsrc/net/dnsdist: Makefile
        pkgsrc/net/frr: Makefile
        pkgsrc/net/grpc: Makefile buildlink3.mk
        pkgsrc/net/mosh: Makefile
        pkgsrc/net/py-grpcio: Makefile
        pkgsrc/net/py-grpcio-tools: Makefile
        pkgsrc/net/qt6-qtgrpc: Makefile buildlink3.mk
        pkgsrc/net/ratman: Makefile
        pkgsrc/net/unbound: Makefile
        pkgsrc/sysutils/collectd-grpc: Makefile
        pkgsrc/sysutils/collectd-pinba: Makefile
        pkgsrc/sysutils/collectd-riemann: Makefile
        pkgsrc/sysutils/collectd-write_prometheus: Makefile
        pkgsrc/sysutils/riemann-client: Makefile
        pkgsrc/wm/ccsm: Makefile

   Log Message:
   revbump for devel/abseil

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jan  5 01:53:35 UTC 2024

   Modified Files:
        pkgsrc/net/bind918: buildlink3.mk

   Log Message:
   net/bind918: fix BUILDLINK_ABI_DEPENDS

   We have 9.8.21 but not yet 9.18.30nb1.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Feb 13 13:50:39 UTC 2024

   Modified Files:
        pkgsrc/net/bind918: Makefile distinfo
        pkgsrc/net/bind918/patches: patch-lib_dns_rbtdb.c
            patch-lib_isc_netmgr_netmgr.c

   Log Message:
   net/bind918: update to 9.18.24

   9.18.24 (2024-02-13)

        --- 9.18.24 released ---

   6343.        [bug]           Fix case insensitive setting for isc_ht hashtable.
                        [GL #4568]

        --- 9.18.23 released ---

   6322.        [security]      Specific DNS answers could cause a denial-of-service
                        condition due to DNS validation taking a long time.
                        (CVE-2023-50387) [GL #4424]

   6321.        [security]      Change 6315 inadvertently introduced regressions that
                        could cause named to crash. [GL #4234]

   6320.        [bug]           Under some circumstances, the DoT code in client
                        mode could process more than one message at a time when
                        that was not expected. That has been fixed. [GL #4487]

        --- 9.18.22 released ---

   6319.        [func]          Limit isc_task_send() overhead for RBTDB tree pruning.
                        [GL #4383]

   6317.        [security]      Restore DNS64 state when handling a serve-stale timeout.
                        (CVE-2023-5679) [GL #4334]

   6316.        [security]      Specific queries could trigger an assertion check with
                        nxdomain-redirect enabled. (CVE-2023-5517) [GL #4281]

   6315.        [security]      Speed up parsing of DNS messages with many different
                        names. (CVE-2023-4408) [GL #4234]

   6314.        [bug]           Address race conditions in dns_tsigkey_find().
                        [GL #4182]

   6312.        [bug]           Conversion from NSEC3 signed to NSEC signed could
                        temporarily put the zone into a state where it was
                        treated as unsigned until the NSEC chain was built.
                        Additionally conversion from one set of NSEC3 parameters
                        to another could also temporarily put the zone into a
                        state where it was treated as unsigned until the new
                        NSEC3 chain was built. [GL #1794] [GL #4495]

   6310.        [bug]           Memory leak in zone.c:sign_zone. When named signed a
                        zone it could leak dst_keys due to a misplaced
                        'continue'. [GL #4488]

   6306.        [func]          Log more details about the cause of "not exact" errors.
                        [GL #4500]

   6304.        [bug]           The wrong time was being used to determine what RRSIGs
                        where to be generated when dnssec-policy was in use.
                        [GL #4494]

   6302.        [func]          The "trust-anchor-telemetry" statement is no longer
                        marked as experimental. This silences a relevant log
                        message that was emitted even when the feature was
                        explicitly disabled. [GL #4497]

   6300.        [bug]           Fix statistics export to use full 64 bit signed numbers
                        instead of truncating values to unsigned 32 bits.
                        [GL #4467]

   6299.        [port]          NetBSD has added 'hmac' to libc which collides with our
                        use of 'hmac'. [GL #4478]


To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.24.2.1 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.1 -r1.1.10.1 pkgsrc/net/bind918/buildlink3.mk
cvs rdiff -u -r1.13 -r1.13.2.1 pkgsrc/net/bind918/distinfo
cvs rdiff -u -r1.1 -r1.1.10.1 \
    pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c \
    pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.24 pkgsrc/net/bind918/Makefile:1.24.2.1
--- pkgsrc/net/bind918/Makefile:1.24    Sat Nov 18 04:07:28 2023
+++ pkgsrc/net/bind918/Makefile Tue Feb 13 16:45:51 2024
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.24 2023/11/18 04:07:28 taca Exp $
+# $NetBSD: Makefile,v 1.24.2.1 2024/02/13 16:45:51 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.20
+BIND_VERSION=  9.18.24
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/buildlink3.mk
diff -u pkgsrc/net/bind918/buildlink3.mk:1.1 pkgsrc/net/bind918/buildlink3.mk:1.1.10.1
--- pkgsrc/net/bind918/buildlink3.mk:1.1        Sun Dec 11 01:57:55 2022
+++ pkgsrc/net/bind918/buildlink3.mk    Tue Feb 13 16:45:51 2024
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.1 2022/12/11 01:57:55 sekiya Exp $
+# $NetBSD: buildlink3.mk,v 1.1.10.1 2024/02/13 16:45:51 bsiegert Exp $
 
 BUILDLINK_TREE+=       bind
 
@@ -6,7 +6,7 @@ BUILDLINK_TREE+=        bind
 BIND_BUILDLINK3_MK:=
 
 BUILDLINK_API_DEPENDS.bind+=   bind>=9.18.0
-BUILDLINK_ABI_DEPENDS.bind?=   bind>=9.18.30nb1
+BUILDLINK_ABI_DEPENDS.bind?=   bind>=9.18.21
 BUILDLINK_PKGSRCDIR.bind?=     ../../net/bind918
 .endif # BIND_BUILDLINK3_MK
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.13 pkgsrc/net/bind918/distinfo:1.13.2.1
--- pkgsrc/net/bind918/distinfo:1.13    Sat Nov 18 04:07:28 2023
+++ pkgsrc/net/bind918/distinfo Tue Feb 13 16:45:51 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.13 2023/11/18 04:07:28 taca Exp $
+$NetBSD: distinfo,v 1.13.2.1 2024/02/13 16:45:51 bsiegert Exp $
 
-BLAKE2s (bind-9.18.20.tar.xz) = da6374b0d437c6e816791ad972dfa0042898a356720fe0d54fdb0d2b967a0c36
-SHA512 (bind-9.18.20.tar.xz) = 1ad89e5aa3d83a3c6536c2931e2ecdf6aca0d9d2678cf45dca8b0fb37968f7ef7aedff5d351083e6b09aeee1329b8885fd06263b21f5ebcde959ef0d84a86ffb
-Size (bind-9.18.20.tar.xz) = 5506368 bytes
+BLAKE2s (bind-9.18.24.tar.xz) = be5193356fcdd06256343776425012970124d0940ff950ff31367be17b40ae9f
+SHA512 (bind-9.18.24.tar.xz) = 465f5b01570fdde5c95adfb780f54e0585814bd25baf914bb95bf5972f15a672e3e7b743a55f1804e69e17609d5a0cd66cc2bbab9174238b3c89e5ad732dc085
+Size (bind-9.18.24.tar.xz) = 5515528 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 6e59d3f637ebb829eec2f76ba7c350fb5cf9be6d
@@ -12,7 +12,7 @@ SHA1 (patch-lib_dns_byaddr.c) = 647ddaaa
 SHA1 (patch-lib_dns_gssapi__link.c) = 72296598b0bdd2a57d0f38ecf1775e2898a041c6
 SHA1 (patch-lib_dns_include_dns_zone.h) = e6dfcd43430538ac2a39b217fcae0d81e4c4d163
 SHA1 (patch-lib_dns_lookup.c) = 6c7463aca16abf6bd578aba1733a3217608a39d3
-SHA1 (patch-lib_dns_rbtdb.c) = e8d61e1ba613b2a2fdcd3ff077e2e5b6ce2e45b2
+SHA1 (patch-lib_dns_rbtdb.c) = f216c1f629add101daf1cec45e1f693204beeefe
 SHA1 (patch-lib_dns_request.c) = 4a9d0409afcf9f989aa9297efb97c578b4863d9c
 SHA1 (patch-lib_dns_sdb.c) = ed447ec7a134e620765b25ee36124a19dfd9fab0
 SHA1 (patch-lib_dns_sdlz.c) = 4fc15a577c64501c10c144eab147e54686e80309
@@ -22,7 +22,7 @@ SHA1 (patch-lib_dns_zone.c) = cd7bc1e76c
 SHA1 (patch-lib_isc_include_isc_netmgr.h) = 48ac44c6a9b81e6b442deba6c075653d3691464b
 SHA1 (patch-lib_isc_net.c) = 743de2701fa96ef25e5689f40e381628cff641d5
 SHA1 (patch-lib_isc_netmgr_netmgr-int.h) = d84993edf254605f85421fbdd2fc523255c7316d
-SHA1 (patch-lib_isc_netmgr_netmgr.c) = 3df1d37061f6ceb37e309a0dc4f782fc35863146
+SHA1 (patch-lib_isc_netmgr_netmgr.c) = 0e94f78e0f6ac43197883adac7828a3f0d04291c
 SHA1 (patch-lib_isc_rwlock.c) = 1d114248ddee20db7a7429afab446f8b2f0dca82
 SHA1 (patch-lib_isc_siphash.c) = 2dd80dde7bd8e869a3cf03c1699665b56eaaf866
 SHA1 (patch-lib_isc_time.c) = 22780fd25d89a0ece46ec1624b3977ca4c46281a

Index: pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c
diff -u pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c:1.1 pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c:1.1.10.1
--- pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c:1.1        Sun Dec 11 01:57:55 2022
+++ pkgsrc/net/bind918/patches/patch-lib_dns_rbtdb.c    Tue Feb 13 16:45:51 2024
@@ -1,11 +1,11 @@
-$NetBSD: patch-lib_dns_rbtdb.c,v 1.1 2022/12/11 01:57:55 sekiya Exp $
+$NetBSD: patch-lib_dns_rbtdb.c,v 1.1.10.1 2024/02/13 16:45:51 bsiegert Exp $
 
 * Take from NetBSD base.
 
---- lib/dns/rbtdb.c.orig       2022-04-11 15:28:12.000000000 +0000
+--- lib/dns/rbtdb.c.orig       2024-02-11 10:42:55.656990155 +0000
 +++ lib/dns/rbtdb.c
-@@ -2277,7 +2277,7 @@ prune_tree(isc_task_t *task, isc_event_t
-       NODE_UNLOCK(&rbtdb->node_locks[locknum].lock, isc_rwlocktype_write);
+@@ -2234,7 +2234,7 @@ prune_tree(isc_task_t *task, isc_event_t
+       }
        RWUNLOCK(&rbtdb->tree_lock, isc_rwlocktype_write);
  
 -      detach((dns_db_t **)&rbtdb);
Index: pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c
diff -u pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c:1.1 pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c:1.1.10.1
--- pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c:1.1        Sun Dec 11 01:57:55 2022
+++ pkgsrc/net/bind918/patches/patch-lib_isc_netmgr_netmgr.c    Tue Feb 13 16:45:51 2024
@@ -1,19 +1,19 @@
-$NetBSD: patch-lib_isc_netmgr_netmgr.c,v 1.1 2022/12/11 01:57:55 sekiya Exp $
+$NetBSD: patch-lib_isc_netmgr_netmgr.c,v 1.1.10.1 2024/02/13 16:45:51 bsiegert Exp $
 
 * Take from NetBSD base.
 
---- lib/isc/netmgr/netmgr.c.orig       2021-09-07 09:37:05.000000000 +0000
+--- lib/isc/netmgr/netmgr.c.orig       2024-02-11 10:42:55.700991300 +0000
 +++ lib/isc/netmgr/netmgr.c
-@@ -373,7 +373,7 @@ isc__netmgr_create(isc_mem_t *mctx, uint
+@@ -314,7 +314,7 @@ isc__netmgr_create(isc_mem_t *mctx, uint
                mgr->workers_running++;
                isc_thread_create(nm_thread, &mgr->workers[i], &worker->thread);
  
--              snprintf(name, sizeof(name), "isc-net-%04zu", i);
-+              snprintf(name, sizeof(name), "net-%04zu", i);
+-              snprintf(name, sizeof(name), "isc-net-%04d", i);
++              snprintf(name, sizeof(name), "net-%04d", i);
                isc_thread_setname(worker->thread, name);
        }
  
-@@ -1828,6 +1828,13 @@ isc_nmhandle_getdata(isc_nmhandle_t *han
+@@ -1910,6 +1910,13 @@ isc_nmhandle_getdata(isc_nmhandle_t *han
        return (handle->opaque);
  }

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: [pkgsrc-2023Q4] pkgsrc/net/bind916
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: [pkgsrc-2023Q4] pkgsrc/net/bind916
Indexes:

Home | Main Index | Thread Index | Old Index