CVS commit: [pkgsrc-2023Q4] pkgsrc/net/bind916

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue Feb 13 16:56:43 UTC 2024

Modified Files:
        pkgsrc/net/bind916 [pkgsrc-2023Q4]: Makefile distinfo
        pkgsrc/net/bind916/patches [pkgsrc-2023Q4]: patch-lib_dns_rbtdb.c
            patch-lib_isc_netmgr_netmgr.c

Log Message:
Pullup ticket #6836 - requested by taca
net/bind916: security fix

Revisions pulled up:
- net/bind916/Makefile                                          1.67-1.68
- net/bind916/distinfo                                          1.53
- net/bind916/patches/patch-lib_dns_rbtdb.c                     1.3
- net/bind916/patches/patch-lib_isc_netmgr_netmgr.c             1.3

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Tue Jan 30 18:29:21 UTC 2024

   Modified Files:
        pkgsrc/audio/libilbc: Makefile
        pkgsrc/audio/termusic: Makefile
        pkgsrc/biology/plinkseq: Makefile
        pkgsrc/chat/ekg: Makefile
        pkgsrc/chat/libgadu: Makefile buildlink3.mk
        pkgsrc/databases/postgresql-postgis2: Makefile
        pkgsrc/devel/abseil: buildlink3.mk
        pkgsrc/devel/compizconfig-backend-gconf: Makefile buildlink3.mk
        pkgsrc/devel/cre2: Makefile
        pkgsrc/devel/libcompizconfig: Makefile buildlink3.mk
        pkgsrc/devel/protobuf: Makefile buildlink3.mk
        pkgsrc/devel/protobuf-c: Makefile buildlink3.mk
        pkgsrc/devel/py-compizconfig: Makefile buildlink3.mk
        pkgsrc/devel/re2: Makefile buildlink3.mk
        pkgsrc/graphics/opencv: Makefile buildlink3.mk
        pkgsrc/graphics/opencv-contrib-face: Makefile buildlink3.mk
        pkgsrc/graphics/py-Willow: Makefile
        pkgsrc/inputmethod/fcitx5-mozc: Makefile
        pkgsrc/misc/libreoffice: Makefile
        pkgsrc/net/bind916: Makefile
        pkgsrc/net/bind918: Makefile
        pkgsrc/net/dnsdist: Makefile
        pkgsrc/net/frr: Makefile
        pkgsrc/net/grpc: Makefile buildlink3.mk
        pkgsrc/net/mosh: Makefile
        pkgsrc/net/py-grpcio: Makefile
        pkgsrc/net/py-grpcio-tools: Makefile
        pkgsrc/net/qt6-qtgrpc: Makefile buildlink3.mk
        pkgsrc/net/ratman: Makefile
        pkgsrc/net/unbound: Makefile
        pkgsrc/sysutils/collectd-grpc: Makefile
        pkgsrc/sysutils/collectd-pinba: Makefile
        pkgsrc/sysutils/collectd-riemann: Makefile
        pkgsrc/sysutils/collectd-write_prometheus: Makefile
        pkgsrc/sysutils/riemann-client: Makefile
        pkgsrc/wm/ccsm: Makefile

   Log Message:
   revbump for devel/abseil

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Feb 13 15:25:33 UTC 2024

   Modified Files:
        pkgsrc/net/bind916: Makefile distinfo
        pkgsrc/net/bind916/patches: patch-lib_dns_rbtdb.c
            patch-lib_isc_netmgr_netmgr.c

   Log Message:
   net/bind916: update to 9.16.48

        --- 9.16.48 released ---

   6343.        [bug]           Fix case insensitive setting for isc_ht hashtable.
                        [GL #4568]

        --- 9.16.47 released ---

   6322.        [security]      Specific DNS answers could cause a denial-of-service
                        condition due to DNS validation taking a long time.
                        (CVE-2023-50387) [GL #4424]

   6321.        [security]      Change 6315 inadvertently introduced regressions that
                        could cause named to crash. [GL #4234]

        --- 9.16.46 released ---

   6319.        [security]      Query patterns that continuously triggered cache
                        database maintenance could exhaust all available memory
                        on the host running named. (CVE-2023-6516) [GL #4383]

   6317.        [security]      Restore DNS64 state when handling a serve-stale timeout.
                        (CVE-2023-5679) [GL #4334]

   6316.        [security]      Specific queries could trigger an assertion check with
                        nxdomain-redirect enabled. (CVE-2023-5517) [GL #4281]

   6315.        [security]      Speed up parsing of DNS messages with many different
                        names. (CVE-2023-4408) [GL #4234]

   6314.        [bug]           Address race conditions in dns_tsigkey_find().
                        [GL #4182]

   6304.        [bug]           The wrong time was being used to determine what RRSIGs
                        where to be generated when dnssec-policy was in use.
                        [GL #4494]

   6282.        [func]          Deprecate AES-based DNS cookies. [GL #4421]


To generate a diff of this commit:
cvs rdiff -u -r1.66 -r1.66.2.1 pkgsrc/net/bind916/Makefile
cvs rdiff -u -r1.52 -r1.52.2.1 pkgsrc/net/bind916/distinfo
cvs rdiff -u -r1.2 -r1.2.14.1 \
    pkgsrc/net/bind916/patches/patch-lib_dns_rbtdb.c
cvs rdiff -u -r1.2 -r1.2.18.1 \
    pkgsrc/net/bind916/patches/patch-lib_isc_netmgr_netmgr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind916/Makefile
diff -u pkgsrc/net/bind916/Makefile:1.66 pkgsrc/net/bind916/Makefile:1.66.2.1
--- pkgsrc/net/bind916/Makefile:1.66    Sat Nov 18 04:05:50 2023
+++ pkgsrc/net/bind916/Makefile Tue Feb 13 16:56:43 2024
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.66 2023/11/18 04:05:50 taca Exp $
+# $NetBSD: Makefile,v 1.66.2.1 2024/02/13 16:56:43 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.16.45
+BIND_VERSION=  9.16.48
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind916/distinfo
diff -u pkgsrc/net/bind916/distinfo:1.52 pkgsrc/net/bind916/distinfo:1.52.2.1
--- pkgsrc/net/bind916/distinfo:1.52    Sat Nov 18 04:05:50 2023
+++ pkgsrc/net/bind916/distinfo Tue Feb 13 16:56:43 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.52 2023/11/18 04:05:50 taca Exp $
+$NetBSD: distinfo,v 1.52.2.1 2024/02/13 16:56:43 bsiegert Exp $
 
-BLAKE2s (bind-9.16.45.tar.xz) = a0c434d7c31c3c975ed2892d0e94ba78b843d8d1dc5f2349f83df6ede24fd276
-SHA512 (bind-9.16.45.tar.xz) = b69d7077a9bd9b69164a034e5335a4fbd4ce5c283ae483470fa2703b2a3a73b962c6a376cfd5c367cad156bb439010edef39ab4a4b7cdc08af7dffd69e1174fe
-Size (bind-9.16.45.tar.xz) = 5127080 bytes
+BLAKE2s (bind-9.16.48.tar.xz) = e404e10f114fa98f6040137e645e22c49afd6ac259a4dd8e71aa9ae5f19d3105
+SHA512 (bind-9.16.48.tar.xz) = 83829a5045e2a29dd2b491d3ab72b545f5664023fcd4aa205a44dbb7bcc5c737b4466c0d73f124b8d88fd33c56776871a07dde1ba0530d43eec8e7304a08d353
+Size (bind-9.16.48.tar.xz) = 5131176 bytes
 SHA1 (patch-bin_dig_dighost.c) = b1073911d80ecd519af98b6678968296ff8c0c98
 SHA1 (patch-bin_dig_include_dig_dig.h) = 10166f5bb98b208c7b10d63eb31e8253f704acc8
 SHA1 (patch-bin_named_Makefile.in) = f1367da6a226ba44d0ee13acf00b8abeb5b1b7eb
@@ -27,7 +27,7 @@ SHA1 (patch-lib_dns_lookup.c) = 6c7463ac
 SHA1 (patch-lib_dns_pkcs11ecdsa__link.c) = 99f386b056c5a6471f69841c41a2698d36b6b275
 SHA1 (patch-lib_dns_pkcs11eddsa__link.c) = bd887a6c8960da3a8663cdf5e955e045f16dee3f
 SHA1 (patch-lib_dns_rbt.c) = c14eff9a609e4b49aa9db18f395461cd7c8944be
-SHA1 (patch-lib_dns_rbtdb.c) = e8d61e1ba613b2a2fdcd3ff077e2e5b6ce2e45b2
+SHA1 (patch-lib_dns_rbtdb.c) = 561646a8e47df765a24b40a0ac9f3e5fc4267621
 SHA1 (patch-lib_dns_request.c) = 82560e819cba0259883da8d47618ffabead22c55
 SHA1 (patch-lib_dns_sdb.c) = ed447ec7a134e620765b25ee36124a19dfd9fab0
 SHA1 (patch-lib_dns_sdlz.c) = 4fc15a577c64501c10c144eab147e54686e80309
@@ -40,7 +40,7 @@ SHA1 (patch-lib_isc_include_isc_netmgr.h
 SHA1 (patch-lib_isc_include_isc_socket.h) = 07c1218a500435b447d6ce458ff0055421fee05e
 SHA1 (patch-lib_isc_include_isc_types.h) = e5fcf15ee03d1d032a67f2e6d23b2e409042ab64
 SHA1 (patch-lib_isc_netmgr_netmgr-int.h) = d84993edf254605f85421fbdd2fc523255c7316d
-SHA1 (patch-lib_isc_netmgr_netmgr.c) = 3df1d37061f6ceb37e309a0dc4f782fc35863146
+SHA1 (patch-lib_isc_netmgr_netmgr.c) = b8ac7c6ef13b48cdaddb470abd4c65f9f95e613b
 SHA1 (patch-lib_isc_rwlock.c) = 1d114248ddee20db7a7429afab446f8b2f0dca82
 SHA1 (patch-lib_isc_siphash.c) = a6642bd91aef22afb7ec4e2e0912275371644a3f
 SHA1 (patch-lib_isc_stats.c) = 8d962fa360740770588fccf1d303d7fe22ae724b

Index: pkgsrc/net/bind916/patches/patch-lib_dns_rbtdb.c
diff -u pkgsrc/net/bind916/patches/patch-lib_dns_rbtdb.c:1.2 pkgsrc/net/bind916/patches/patch-lib_dns_rbtdb.c:1.2.14.1
--- pkgsrc/net/bind916/patches/patch-lib_dns_rbtdb.c:1.2        Thu Apr 21 14:14:46 2022
+++ pkgsrc/net/bind916/patches/patch-lib_dns_rbtdb.c    Tue Feb 13 16:56:43 2024
@@ -1,11 +1,11 @@
-$NetBSD: patch-lib_dns_rbtdb.c,v 1.2 2022/04/21 14:14:46 taca Exp $
+$NetBSD: patch-lib_dns_rbtdb.c,v 1.2.14.1 2024/02/13 16:56:43 bsiegert Exp $
 
 * Take from NetBSD base.
 
---- lib/dns/rbtdb.c.orig       2022-04-11 15:28:12.000000000 +0000
+--- lib/dns/rbtdb.c.orig       2024-02-11 11:31:39.000000000 +0000
 +++ lib/dns/rbtdb.c
-@@ -2277,7 +2277,7 @@ prune_tree(isc_task_t *task, isc_event_t
-       NODE_UNLOCK(&rbtdb->node_locks[locknum].lock, isc_rwlocktype_write);
+@@ -2327,7 +2327,7 @@ prune_tree(isc_task_t *task, isc_event_t
+       }
        RWUNLOCK(&rbtdb->tree_lock, isc_rwlocktype_write);
  
 -      detach((dns_db_t **)&rbtdb);

Index: pkgsrc/net/bind916/patches/patch-lib_isc_netmgr_netmgr.c
diff -u pkgsrc/net/bind916/patches/patch-lib_isc_netmgr_netmgr.c:1.2 pkgsrc/net/bind916/patches/patch-lib_isc_netmgr_netmgr.c:1.2.18.1
--- pkgsrc/net/bind916/patches/patch-lib_isc_netmgr_netmgr.c:1.2        Sun Oct 24 06:40:28 2021
+++ pkgsrc/net/bind916/patches/patch-lib_isc_netmgr_netmgr.c    Tue Feb 13 16:56:43 2024
@@ -1,19 +1,19 @@
-$NetBSD: patch-lib_isc_netmgr_netmgr.c,v 1.2 2021/10/24 06:40:28 taca Exp $
+$NetBSD: patch-lib_isc_netmgr_netmgr.c,v 1.2.18.1 2024/02/13 16:56:43 bsiegert Exp $
 
 * Take from NetBSD base.
 
---- lib/isc/netmgr/netmgr.c.orig       2021-09-07 09:37:05.000000000 +0000
+--- lib/isc/netmgr/netmgr.c.orig       2024-02-11 11:31:39.000000000 +0000
 +++ lib/isc/netmgr/netmgr.c
-@@ -373,7 +373,7 @@ isc__netmgr_create(isc_mem_t *mctx, uint
+@@ -358,7 +358,7 @@ isc__netmgr_create(isc_mem_t *mctx, uint
                mgr->workers_running++;
                isc_thread_create(nm_thread, &mgr->workers[i], &worker->thread);
  
--              snprintf(name, sizeof(name), "isc-net-%04zu", i);
-+              snprintf(name, sizeof(name), "net-%04zu", i);
+-              snprintf(name, sizeof(name), "isc-net-%04d", i);
++              snprintf(name, sizeof(name), "net-%04d", i);
                isc_thread_setname(worker->thread, name);
        }
  
-@@ -1828,6 +1828,13 @@ isc_nmhandle_getdata(isc_nmhandle_t *han
+@@ -1794,6 +1794,13 @@ isc_nmhandle_getdata(isc_nmhandle_t *han
        return (handle->opaque);
  }