[pkgsrc/trunk]: pkgsrc/net/bind911 net/bind911: update to 9.11.13

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/7e6c40503eea
branches:  trunk
changeset: 418139:7e6c40503eea
user:      taca <taca%pkgsrc.org@localhost>
date:      Thu Nov 21 05:38:21 2019 +0000

description:
net/bind911: update to 9.11.13

Update bind911 to 9.11.3.  It includes fix for CVS-2019-6477.


        --- 9.11.13 released ---

5315.   [bug]           Apply the inital RRSIG expiration spread fixed
                        to all dynamically created records in the zone
                        including NSEC3. Also fix the signature clusters
                        when the server has been offline for prolonged
                        period of times. [GL #1256]

5314.   [func]          Added a new statistics variable "tcp-highwater"
                        that reports the maximum number of simultaneous TCP
                        clients BIND has handled while running. [GL #1206]

5313.   [bug]           The default GeoIP2 database location did not match
                        the ARM.  'named -V' now reports the default
                        location. [GL #1301]

5310.   [bug]           TCP failures were affecting EDNS statistics. [GL #1059]

5309.   [bug]           "geoip-use-ecs yes;" was not working for GeoIP2.
                        [GL #1275]

5308.   [bug]           Don't log DNS_R_UNCHANGED from sync_secure_journal()
                        at ERROR level in receive_secure_serial(). [GL #1288]

5307.   [bug]           Fix hang when named-compilezone output is sent to pipe.
                        Thanks to Tony Finch. [GL !2481]

5306.   [security]      Set a limit on the number of concurrently served
                        pipelined TCP queries. (CVE-2019-6477) [GL #1264]

5302.   [bug]           Fix checking that "dnstap-output" is defined when
                        "dnstap" is specified in a view. [GL #1281]

5301.   [bug]           Detect partial prefixes / incomplete IPv4 address in
                        acls. [GL #1143]

diffstat:

 net/bind911/Makefile |   4 ++--
 net/bind911/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (36 lines):

diff -r 73e3b1fe81f0 -r 7e6c40503eea net/bind911/Makefile
--- a/net/bind911/Makefile      Thu Nov 21 05:37:39 2019 +0000
+++ b/net/bind911/Makefile      Thu Nov 21 05:38:21 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.16 2019/11/03 11:45:30 rillig Exp $
+# $NetBSD: Makefile,v 1.17 2019/11/21 05:38:21 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.11.12
+BIND_VERSION=  9.11.13
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r 73e3b1fe81f0 -r 7e6c40503eea net/bind911/distinfo
--- a/net/bind911/distinfo      Thu Nov 21 05:37:39 2019 +0000
+++ b/net/bind911/distinfo      Thu Nov 21 05:38:21 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.12 2019/10/17 00:48:31 taca Exp $
+$NetBSD: distinfo,v 1.13 2019/11/21 05:38:21 taca Exp $
 
-SHA1 (bind-9.11.12.tar.gz) = bf154d1029791545a5d5aff42d60bfed71e3b515
-RMD160 (bind-9.11.12.tar.gz) = 5304d44a2f52c121b074742f8e6b33ac83facc49
-SHA512 (bind-9.11.12.tar.gz) = 7e2b9ef4ed5a00c2e5310c932c177887aed330d94eefc87d732dda010f2b71477e2f9d6ea89422ccbc8f6f04ceb83419b758218bcc02f25b34751bad974174e8
-Size (bind-9.11.12.tar.gz) = 8180761 bytes
+SHA1 (bind-9.11.13.tar.gz) = 550367762a653ac5ed0eb04b316d06517650a925
+RMD160 (bind-9.11.13.tar.gz) = d1d14035681abd25d10592c60682501c1aaded38
+SHA512 (bind-9.11.13.tar.gz) = 6e5289ff231b8d7d2f02ae02a1cf43abff3e507e1d96d8ec002dc71097fc77dc5514762ff1ea5918159c88319b1d5eed78c6dc1a7835173db234d4ee887644bc
+Size (bind-9.11.13.tar.gz) = 8370441 bytes
 SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
 SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee
 SHA1 (patch-bin_tests_system_metadata_tests.sh) = d01a492d0b7738760bdbff714248e279a78fef28