CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Apr 13 15:52:09 UTC 2025

Modified Files:
        pkgsrc/net/bind918: Makefile distinfo

Log Message:
net/bind918: update to 9.18.35

BIND 9.18.35 (2025/03/19)

Bug Fixes

* Fix deferred validation of unsigned DS and DNSKEY records.

  When processing a query with the "checking disabled" bit set (CD=1), named
  stores the invalidated result in the cache, marked "pending".  When the
  same query is sent with CD=0, the cached data is validated and either
  accepted as an answer, or ejected from the cache as invalid.  This
  deferred validation was not attempted for DS and DNSKEY records if they
  had no cached signatures, causing spurious validation failures.  The
  deferred validation is now completed in this scenario.

  Also, if deferred validation fails, the data is now re-queried to find out
  whether the zone has been corrected since the invalid data was cached.
  [GL #5066]

* Fix RPZ race condition during a reconfiguration.

  With RPZ in use, named could terminate unexpectedly because of a race
  condition when a reconfiguration command was received using rndc.  This
  has been fixed.  [GL #5146]

* "CNAME and other data check" not applied to all types.

  An incorrect optimization caused "CNAME and other data" errors not to be
  detected if certain types were at the same node as a CNAME.  This has been
  fixed.  [GL #5150]

* Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().

  Previously, when parsing responses, named incorrectly rejected responses
  without matching RRSIG records for NSEC/DS/NSEC3 records in the authority
  section.  This rejection, if appropriate, should have been left for the
  validator to determine and has been fixed.  [GL #5185]


To generate a diff of this commit:
cvs rdiff -u -r1.47 -r1.48 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/bind918/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.47 pkgsrc/net/bind918/Makefile:1.48
--- pkgsrc/net/bind918/Makefile:1.47    Wed Feb 19 14:40:05 2025
+++ pkgsrc/net/bind918/Makefile Sun Apr 13 15:52:09 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.47 2025/02/19 14:40:05 taca Exp $
+# $NetBSD: Makefile,v 1.48 2025/04/13 15:52:09 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.34
+BIND_VERSION=  9.18.35
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.26 pkgsrc/net/bind918/distinfo:1.27
--- pkgsrc/net/bind918/distinfo:1.26    Wed Feb 19 14:40:05 2025
+++ pkgsrc/net/bind918/distinfo Sun Apr 13 15:52:09 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.26 2025/02/19 14:40:05 taca Exp $
+$NetBSD: distinfo,v 1.27 2025/04/13 15:52:09 taca Exp $
 
-BLAKE2s (bind-9.18.34.tar.xz) = 56b397aeddcb7ea7e64484e77d8c262c98545f74f4fee83a68677a32f33c053d
-SHA512 (bind-9.18.34.tar.xz) = 078948c6b97f0932a936d04709c1826fb1222b9c65afdacd2512e29244e534c633fd5f5e3593bcce3ef997a8ea0b10bada21c9e45a940189f277692383c10f8e
-Size (bind-9.18.34.tar.xz) = 5344172 bytes
+BLAKE2s (bind-9.18.35.tar.xz) = 4ce3c40aa5d3d1b49d9742a82d5fe4ffdd746c0a54929ceb4bd0e483e34d1c1b
+SHA512 (bind-9.18.35.tar.xz) = 81764e1e4acb87e498cfce9e683dbdcadac13a5a5f2a517c988ff17967b34efb312ec0a9e94d7f9261e1e9bebbcfa295da6e37985c69961ef43031a8b99e8fc9
+Size (bind-9.18.35.tar.xz) = 5357312 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584