[pkgsrc/trunk]: pkgsrc/net/bind914 net/bind914: update to 9.14.8

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/063ca406c7a5
branches:  trunk
changeset: 405011:063ca406c7a5
user:      taca <taca%pkgsrc.org@localhost>
date:      Thu Nov 21 05:37:06 2019 +0000

description:
net/bind914: update to 9.14.8

Update bind914 to 9.14.8.  It includes fix for CVS-2019-6477.

        --- 9.14.8 released ---

5315.   [bug]           Apply the inital RRSIG expiration spread fixed
                        to all dynamically created records in the zone
                        including NSEC3. Also fix the signature clusters
                        when the server has been offline for prolonged
                        period of times. [GL #1256]

5314.   [func]          Added a new statistics variable "tcp-highwater"
                        that reports the maximum number of simultaneous TCP
                        clients BIND has handled while running. [GL #1206]

5313.   [bug]           The default GeoIP2 database location did not match
                        the ARM.  'named -V' now reports the default
                        location. [GL #1301]

5310.   [bug]           TCP failures were affecting EDNS statistics. [GL #1059]

5308.   [bug]           Don't log DNS_R_UNCHANGED from sync_secure_journal()
                        at ERROR level in receive_secure_serial(). [GL #1288]

5307.   [bug]           Fix hang when named-compilezone output is sent to pipe.
                        Thanks to Tony Finch. [GL !2481]

5306.   [security]      Set a limit on the number of concurrently served
                        pipelined TCP queries. (CVE-2019-6477) [GL #1264]

5305.   [bug]           NSEC Aggressive Cache ("synth-from-dnssec") has been
                        disabled by default because it was found to have
                        a significant performance impact on the recursive
                        service. [GL #1265]

5304.   [bug]           "dnskey-sig-validity 0;" was not being accepted.
                        [GL #876]

5302.   [bug]           Fix checking that "dnstap-output" is defined when
                        "dnstap" is specified in a view. [GL #1281]

5301.   [bug]           Detect partial prefixes / incomplete IPv4 address in
                        acls. [GL #1143]

diffstat:

 net/bind914/Makefile                      |   4 ++--
 net/bind914/distinfo                      |  12 ++++++------
 net/bind914/patches/patch-lib_isc_stats.c |   8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diffs (68 lines):

diff -r b84c07fa6dbf -r 063ca406c7a5 net/bind914/Makefile
--- a/net/bind914/Makefile      Thu Nov 21 03:41:39 2019 +0000
+++ b/net/bind914/Makefile      Thu Nov 21 05:37:06 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.13 2019/11/03 11:45:30 rillig Exp $
+# $NetBSD: Makefile,v 1.14 2019/11/21 05:37:06 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.14.7
+BIND_VERSION=  9.14.8
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r b84c07fa6dbf -r 063ca406c7a5 net/bind914/distinfo
--- a/net/bind914/distinfo      Thu Nov 21 03:41:39 2019 +0000
+++ b/net/bind914/distinfo      Thu Nov 21 05:37:06 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.10 2019/10/24 12:50:36 otis Exp $
+$NetBSD: distinfo,v 1.11 2019/11/21 05:37:06 taca Exp $
 
-SHA1 (bind-9.14.7.tar.gz) = ab0b14f4fe6a818fb15673ea9cef3eead8f6a94b
-RMD160 (bind-9.14.7.tar.gz) = 6caf6e1a7ea03e311c6bcdd1cca63547e230f86b
-SHA512 (bind-9.14.7.tar.gz) = e1837ebfbbc60487f5f0e67fb9e935588fd6e5ffe55cdc9dc77e3ce63cd6fc4f076f4eb282cc4f51701ddda3e51e8f15255db5a3841f9fe92a4fb4207d806740
-Size (bind-9.14.7.tar.gz) = 6320994 bytes
+SHA1 (bind-9.14.8.tar.gz) = c8481fd5fe061abd87a5a98e19c9a797330c7a76
+RMD160 (bind-9.14.8.tar.gz) = fa1b039caaa96e46d528816d4b1c7b80b8da6d21
+SHA512 (bind-9.14.8.tar.gz) = eb52760982ebd246e6e1945684771193fc7364324a6d6a95a0cae33afa0a4fa24ffe8313b5f9094420c7c2ec932b1b1a9fb19f6e673ff3c5583ab5e3ff04eb6a
+Size (bind-9.14.8.tar.gz) = 6403140 bytes
 SHA1 (patch-bin_named_Makefile.in) = 741e3708c670baaec45446f6bb364ada448ae330
 SHA1 (patch-bin_named_main.c) = 51c8ab464a009575b6513c7ed4b79f89446eb7d0
 SHA1 (patch-bin_named_pfilter.c) = b54f872c883c8fbc2d9c04df65c185dc057cc36b
@@ -34,7 +34,7 @@
 SHA1 (patch-lib_dns_validator.c) = 7d7471efe5109f5b2d6f9e99fe15fa314fdd217d
 SHA1 (patch-lib_dns_view.c) = 25095827adbc75dc629b0f435dbd711b599c86c9
 SHA1 (patch-lib_isc_backtrace.c) = 5fa1dd0f18ae757233d9cc21e36a5f6a84990db1
-SHA1 (patch-lib_isc_stats.c) = 9857f640fb0becfab1a7f347f835610230bd3279
+SHA1 (patch-lib_isc_stats.c) = 3762657c325fa9f6d5b4dda4b0ad3f8546b50212
 SHA1 (patch-lib_isc_unix_net.c) = a8779d7e51c3a54f5dada1396abe10eb77ff0df9
 SHA1 (patch-lib_isc_unix_socket.c) = 3325d04decda1d6ecd9e5be34ac5fe4c122466f4
 SHA1 (patch-lib_isc_unix_time.c) = 04312e043601688aa2b0a09dad1bcb51d9273e9d
diff -r b84c07fa6dbf -r 063ca406c7a5 net/bind914/patches/patch-lib_isc_stats.c
--- a/net/bind914/patches/patch-lib_isc_stats.c Thu Nov 21 03:41:39 2019 +0000
+++ b/net/bind914/patches/patch-lib_isc_stats.c Thu Nov 21 05:37:06 2019 +0000
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_isc_stats.c,v 1.3 2019/07/18 03:02:02 taca Exp $
+$NetBSD: patch-lib_isc_stats.c,v 1.4 2019/11/21 05:37:06 taca Exp $
 
 * Platform fixes from NetBSD base system.
 
---- lib/isc/stats.c.orig       2019-07-09 18:15:48.000000000 +0000
+--- lib/isc/stats.c.orig       2019-11-06 21:29:49.000000000 +0000
 +++ lib/isc/stats.c
 @@ -30,7 +30,7 @@
  #define ISC_STATS_MAGIC                       ISC_MAGIC('S', 't', 'a', 't')
@@ -10,6 +10,6 @@
  
 -#if defined(_WIN32) && !defined(_WIN64)
 +#if (defined(_WIN32) && !defined(_WIN64)) || !defined(_LP64)
- typedef atomic_int_fast32_t isc_stat_t;
+       typedef atomic_int_fast32_t isc__atomic_statcounter_t;
  #else
- typedef atomic_int_fast64_t isc_stat_t;
+       typedef atomic_int_fast64_t isc__atomic_statcounter_t;