bind920: update to version 9.20.17.

[Havard Eidnes (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Havard Eidnes <he%NetBSD.org@localhost>
Pushed By:	he
Date:		Wed Dec 17 23:27:06 2025 +0100
Changeset:	ef8eecd6250ac6a94d18f9bf10df5cd6b2c66cb1

Modified Files:
	bind920/Makefile
	bind920/distinfo

Log Message:
bind920: update to version 9.20.17.

Pkgsrc changes:
 * Update checksums

Upstream changes:

Notes for BIND 9.20.17
----------------------

Feature Changes
~~~~~~~~~~~~~~~

- Reduce the number of outgoing queries.

  Reduce the number of outgoing queries when resolving the nameservers
  for delegation points. This helps a DNS resolver with a cold cache
  resolve client queries with complex delegation chains and
  redirections. :gl:`!11148`

- Provide more information when memory allocation fails.

  BIND now provides more information about the failure when memory allocation
  fails. :gl:`!11272`

Bug Fixes
~~~~~~~~~

- Adding NSEC3 opt-out records could leave invalid records in chain.

  When creating an NSEC3 opt-out chain, a node in the chain could be
  removed too soon. The previous NSEC3 would therefore not be found,
  resulting in invalid NSEC3 records being left in the zone. This has
  been fixed. :gl:`#5671`

- Fix spurious timeouts while resolving names.

  Sometimes, loops in the resolving process (e.g., to resolve or validate
  ``ns1.example.com``, we need to resolve ``ns1.example.com``) were not properly
  detected, leading to a spurious 10-second delay. This has been fixed,
  and such loops are properly detected. :gl:`#3033` :gl:`#5578`

- Fix bug where zone switches from NSEC3 to NSEC after retransfer.

  When a zone was re-transferred but the zone journal on an
  inline-signing secondary was out of sync, the zone could fall back to
  using NSEC records instead of NSEC3. This has been fixed. :gl:`#5527`

- ``AMTRELAY`` type 0 presentation format handling was wrong.

  :rfc:`8777` specifies a placeholder value of ``.`` for the gateway field
  when the gateway type is 0 (no gateway). This was not being checked
  for, nor was it emitted when displaying the record. This has been corrected.

  Instances of this record will need the placeholder period added to
  them when upgrading. :gl:`#5639`

- Fix parsing bug in :any:`remote-servers` with key or TLS.

  The :any:`remote-servers` clause enables the following pattern using a
  named ``server-list``::

      remote-servers a { 1.2.3.4; ... };
      remote-servers b { a key foo; };

  However, such a configuration was wrongly rejected, with an ``unexpected
  token 'foo'`` error. This configuration is now accepted. :gl:`#5646`

- Fix DoT reconfigure/reload bug in the resolver.

  If client-side TLS transport was in use (for example, when
  forwarding queries to a DoT server), :iscman:`named` could
  terminate unexpectedly when reconfiguring or reloading. This
  has been fixed.
  :gl:`#5653`

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=ef8eecd6250ac6a94d18f9bf10df5cd6b2c66cb1

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 bind920/Makefile | 2 +-
 bind920/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diffs:
diff --git a/bind920/Makefile b/bind920/Makefile
index d0dff6d6b3..83b1d2ce06 100644
--- a/bind920/Makefile
+++ b/bind920/Makefile
@@ -15,7 +15,7 @@ CONFLICTS+=	host-[0-9]*
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.20.16
+BIND_VERSION=	9.20.17
 
 BUILD_DEFS+=	BIND_DIR VARBASE
 
diff --git a/bind920/distinfo b/bind920/distinfo
index 744dfe589e..97dafe054b 100644
--- a/bind920/distinfo
+++ b/bind920/distinfo
@@ -1,6 +1,6 @@
 $NetBSD: distinfo,v 1.20 2024/07/23 13:50:32 taca Exp $
 
-BLAKE2s (bind-9.20.16.tar.xz) = 598116bf88221555f937d3b2c6c0e03d934ddd61cc034abc778792565ecdce8d
-SHA512 (bind-9.20.16.tar.xz) = 0cd9d531830ae8fd9df13849f333bc156063836f6ffd3ce757244a3cb58c6608cafb0ba43c22fa2846fdaa42d2dccff4fa84ae92ec69430071769168d57e9e9c
-Size (bind-9.20.16.tar.xz) = 5768340 bytes
+BLAKE2s (bind-9.20.17.tar.xz) = 7f770fde2ce7cdfb6aaf614f1035aa787a1492f7211f694ec666e154e92a15ce
+SHA512 (bind-9.20.17.tar.xz) = bb082ce45336a190d72e9caf35fc0e4647d6cb3fb117d4b8ff6fd477157db9b3291ac652fd1faad95ac892feb722d50ef738f6d46a6cd30cf6a671f4d422330e
+Size (bind-9.20.17.tar.xz) = 5767060 bytes
 SHA1 (patch-configure.ac) = d3b9bb82c8e164135b93a76d5c53ad40521226e2