CVS commit: pkgsrc/net/nsd

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Sun Jan 19 16:23:18 UTC 2025

Modified Files:
        pkgsrc/net/nsd: Makefile distinfo
Removed Files:
        pkgsrc/net/nsd/patches: patch-simdzone_src_generic_endian.h

Log Message:
net/nsd: Update to version 4.11.1.

Pkgsrc changes:
 * Remove now-upstream-integrated patch.
 * Checksum changes.

Upstream changes:

NSD version 4.11.0 had a serious bug in which applying updates to
zones (and other modifications that require a reload, such as adding
and deleting zones), could stop entirely after reception of a broken
or corrupted update via zone transfer. We believe that this broken
state would appear as one of the NSD processes consuming 100% CPU.
Version 4.11.1 has this corrected as well as some other smaller
non-critical bugs.

We strongly advise to not run NSD version 4.11.0, and if you have
it deployed already, upgrade to 4.11.1 at the earliest possible
opportunity.

4.11.1
================
BUG FIXES:
        - Fix #415: Fix out of tree builds. Thanks Florian Obser (@fobser).
        - Fix #414: XoT interoperability with BIND and Knot
        - Fix #421: old-main can quit before the reload process received
          from old-main that it is done on the reload_listener pipe.
          Thanks Otto Retter.
        - Fix whitespace in comment.
        - Fix #424: Stalled updates after corrupt transfer.

4.11.0
================
FEATURES:
        - Support reloading configuration on SIGHUP.
        - Fix #383: log timestamps in ISO8601 format with timezone.
          This adds the option `log-time-iso: yes` that logs in ISO8601
          format.
        - Updated cookie secrets management.
          The default cookie secret file location can be set at compile time
          with the --with-cookiesecretsfile=path option to configure. The
          default location is changed to {dbdir}/cookiesecrets.txt. The
          previous default location will be checked at startup when there is
          no cookie secrets file at the new default location.
          A staging cookie can now also be configured in the configuration
          file and secrets configured in the configuration file now take
          precedence over those read from file.
          All DNS related setting in the configuration file will be reevaluated
          and effectuated after nsd-control reconfig.
        - Merge #398: RFC 9660 The DNS Zone Version (ZONEVERSION) Option
        - Merge #406: ohttp and tls-supported-groups SvcParam suppor
        - Merge #408: NINFO, RKEY, RESINFO, WALLET, CLA and TA RR types
        - Merge #409: Writing of NSAP-PTR, GPOS and HIP RR types
        - Merge #407: Better balanced verbosity levels for logging.

BUG FIXES:
        - Fix title underline and declaration after statement warnings.
        - Add cross platform freebsd, openbsd and netbsd to github ci.
        - Update simdzone to include fix for netbsd double bswap declarations,
          and also semantic checks for DS and ZONEMD. And CFLAGS has -march
          prepended to fix detection.
        - Merge #376: Point the user towards tcpdump for logging individual
          queries.
        - Track $INCLUDEs in zone files.
        - Fix ci to update macos-12 to the macos-15 runner image.
        - Merge #390: Apply non-xfr tasks before xfr tasks.
          This fixes an issue where non-xfr tasks are lost when they are
          batch processed together with non-xfr tasks.
          This merge also changes that notifies are passed on from the serve
          processes to the xfrd directly instead of via main. This was
          necessary to allow applying the non-xfr tasks without forking a
          backup-main for the sole purpose of forwarding notifies.
        - Merge #391: Update copyright lines (in version output).
        - Fix #392: Inconsistent documentation about control-interface.
        - Merge #395: Explain the zonefile example better.
        - Merge #394: Fix the path to use doc/manual/.
        - Fix analyzer issue in do_print_cookie_secrets to check for failure.
        - Merge #404: Introducing Sphinx substitution in code blocks.
          As well as other fixes with Sphinx build.
        - Update Copyright lines in help output
        - Merge #395: Explain zonefile example better
        - Merge #394: Fix doc path (fixes "Edit on GitHub" button in the docs)
        - Fix Makefile for parallel build failure around bison rule.
        - Fix #405: Fix typo in documentation.
        - Treat a mismatch in RRset TTLs as a warning.


To generate a diff of this commit:
cvs rdiff -u -r1.127 -r1.128 pkgsrc/net/nsd/Makefile
cvs rdiff -u -r1.87 -r1.88 pkgsrc/net/nsd/distinfo
cvs rdiff -u -r1.2 -r0 \
    pkgsrc/net/nsd/patches/patch-simdzone_src_generic_endian.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/nsd/Makefile
diff -u pkgsrc/net/nsd/Makefile:1.127 pkgsrc/net/nsd/Makefile:1.128
--- pkgsrc/net/nsd/Makefile:1.127       Sat Sep 21 16:09:29 2024
+++ pkgsrc/net/nsd/Makefile     Sun Jan 19 16:23:17 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.127 2024/09/21 16:09:29 he Exp $
+# $NetBSD: Makefile,v 1.128 2025/01/19 16:23:17 he Exp $
 
-DISTNAME=      nsd-4.10.1
+DISTNAME=      nsd-4.11.1
 CATEGORIES=    net
 MASTER_SITES=  http://www.nlnetlabs.nl/downloads/nsd/
 

Index: pkgsrc/net/nsd/distinfo
diff -u pkgsrc/net/nsd/distinfo:1.87 pkgsrc/net/nsd/distinfo:1.88
--- pkgsrc/net/nsd/distinfo:1.87        Sat Sep 21 16:37:31 2024
+++ pkgsrc/net/nsd/distinfo     Sun Jan 19 16:23:17 2025
@@ -1,7 +1,6 @@
-$NetBSD: distinfo,v 1.87 2024/09/21 16:37:31 he Exp $
+$NetBSD: distinfo,v 1.88 2025/01/19 16:23:17 he Exp $
 
-BLAKE2s (nsd-4.10.1.tar.gz) = e736a4afd563714e706fcb716c34750479c7abd5b6966370f0e807a274a4f50b
-SHA512 (nsd-4.10.1.tar.gz) = b0f4bdca8a1c6fbbe99096abc8c5f8b34ef2e66dc0da44da253ab164b35ad0aaef5d05eb682b88cc68d8b1671f7b80abafee242a784ed6deb785adee7f6a53a9
-Size (nsd-4.10.1.tar.gz) = 1404799 bytes
+BLAKE2s (nsd-4.11.1.tar.gz) = 4091686c610cda82c92919d6ed4b15b698ea9650a740f64b27d17dde49fd7742
+SHA512 (nsd-4.11.1.tar.gz) = 50b7d93485f3b9903e0d7ee5ec326f47c8a603d3c143899aa46e7865413f8b7f0ed2edcdae5ac054b3c709ab50acfbe8816e1be41dd008803ef83fa9bc370944
+Size (nsd-4.11.1.tar.gz) = 1527949 bytes
 SHA1 (patch-aa) = d9a423d5faa8da9a213b21fd2712225ac9645091
-SHA1 (patch-simdzone_src_generic_endian.h) = 6e8ab4de36781af1a994d8476b9bd9b20a85dc7e