CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Feb 19 14:40:05 UTC 2025

Modified Files:
        pkgsrc/net/bind918: Makefile distinfo

Log Message:
net/bind918: update to 9.18.34

Notes for BIND 9.18.34

New Features

* Print the expiration time of the stale records.

  Print the expiration time of the stale RRsets in the cache dump.

Removed Features

* Remove –with-tuning=small/large configuration option.

  The configuration option –with-tuning has been removed as it is no longer
  required or desired.

Bug Fixes

* Fix rndc flushname for longer name server names.

  rndc flushname did not work for name server names longer than 16
  bytes. This has been fixed. [GL #3885]

* Recently expired records could be returned with a timestamp in future.

  Under rare circumstances, an RRSet that expired at the time of the query
  could be returned with a TTL in the future. This has been fixed.

  As a side effect, the expiration time of expired RRSets is no longer
  returned in a cache dump. [GL #5094]

* YAML string not terminated in negative response in delv.

  [GL #5098]

* Apply the memory limit only to ADB database items.

  Under heavy load, a resolver could exhaust the memory available for
  storing the information in the Address Database (ADB), effectively
  discarding previously stored information in the ADB.  The memory used to
  retrieve and provide information from the ADB is no longer subject to the
  same memory limits that are applied to

  the Address Database. [GL #5127]

* Avoid unnecessary locking in the zone/cache database.

  Lock contention among many worker threads referring to the same database
  node at the same time is now prevented.  This improves zone and cache
  database performance for any heavily contended database nodes. [GL #5130]

* Improve the resolver performance under attack.

  Previously, a remote client could force the DNS resolver component to
  consume memory faster than resources were cleaned up for the canceled
  resolver fetches, due to the recursive-clients limit.  If such a traffic
  pattern was sustained for a long period of time, the DNS server might
  eventually run out of the available memory.  This has been fixed.

  It should be noted that, under such a heavy attack, no outgoing DNS
  queries will be successful in BIND 9 versions both with and without the
  fix, as the generated traffic pattern will consume all the available slots
  for the recursive clients.


To generate a diff of this commit:
cvs rdiff -u -r1.46 -r1.47 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/net/bind918/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.46 pkgsrc/net/bind918/Makefile:1.47
--- pkgsrc/net/bind918/Makefile:1.46    Sun Feb  9 14:44:07 2025
+++ pkgsrc/net/bind918/Makefile Wed Feb 19 14:40:05 2025
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.46 2025/02/09 14:44:07 wiz Exp $
+# $NetBSD: Makefile,v 1.47 2025/02/19 14:40:05 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  https://downloads.isc.org/isc/bind9/${BIND_VERSION}/
 EXTRACT_SUFX=  .tar.xz
@@ -16,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.33
+BIND_VERSION=  9.18.34
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.25 pkgsrc/net/bind918/distinfo:1.26
--- pkgsrc/net/bind918/distinfo:1.25    Wed Jan 29 15:13:54 2025
+++ pkgsrc/net/bind918/distinfo Wed Feb 19 14:40:05 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.25 2025/01/29 15:13:54 taca Exp $
+$NetBSD: distinfo,v 1.26 2025/02/19 14:40:05 taca Exp $
 
-BLAKE2s (bind-9.18.33.tar.xz) = cd4ab12e52222038a5f7302fc7dcce111d057b250197ed185c10afb7d3f7c910
-SHA512 (bind-9.18.33.tar.xz) = 874465ccc7af92561dccf2bd596e13513048c4f1da730a6f38103eeb1d5b67178c1e2e2a56612946eba6edb9dad34851b9826055bcb7c0dad7ec64f7df9c10b9
-Size (bind-9.18.33.tar.xz) = 5341616 bytes
+BLAKE2s (bind-9.18.34.tar.xz) = 56b397aeddcb7ea7e64484e77d8c262c98545f74f4fee83a68677a32f33c053d
+SHA512 (bind-9.18.34.tar.xz) = 078948c6b97f0932a936d04709c1826fb1222b9c65afdacd2512e29244e534c633fd5f5e3593bcce3ef997a8ea0b10bada21c9e45a940189f277692383c10f8e
+Size (bind-9.18.34.tar.xz) = 5344172 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584