CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Aug 24 08:56:59 UTC 2025

Modified Files:
        pkgsrc/net/bind918: Makefile PLIST distinfo

Log Message:
net/bind918: update to 9.18.39

BIND 9.18.39 (2025-08-20)

New Features

* Support for parsing the DSYNC record has been added.  [GL #5440]

Feature Changes

* Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS digest
  type 1.

  RSASHA1 and RSASHA1-NSEC-SHA1 DNSKEY algorithms have been deprecated by
  the IETF and should no longer be used for DNSSEC.  DS digest type 1 (SHA1)
  has also been deprecated in BIND 9.  Validators are now expected to treat
  these algorithms and digest as unknown, resulting in some zones being
  treated as insecure when they were previously treated as secure.  Warnings
  have been added to named and tools when these algorithms and this digest
  are being used for signing.

  Zones signed with RSASHA1 or RSASHA1-NSEC-SHA1 should be migrated to a
  different DNSKEY algorithm.

  Zones with DS or CDS records with digest type 1 (SHA1) should be updated
  to use a different digest type (e.g. SHA256) and the digest type 1 records
  should be removed.  [GL #5358]

Bug Fixes

* Clean enough memory when adding new ADB names/entries under memory
  pressure.

  The ADB memory cleaning is opportunistic even when BIND is under memory
  pressure (in the overmem condition).  The opportunistic LRU cleaning and
  overmem cleaning have been split, and the overmem cleaning always cleans
  up double of the newly allocated adbname/adbentry to ensure we never
  allocate more memory than the assigned limit.  [GL !10637]

* Rescan the interfaces again when reconfiguring the server.

  Previously on FreeBSD, the server did not listen on the configured
  localhost interfaces immediately, but only after the interface-interval
  period had passed.  After an earlier fix, the server would listen on the
  localhost after 60 minutes.

  Now, the interfaces are rescanned immediately after configuring the
  interface-interval value and begin listening on the localhost interface
  immediately.  [GL !10758]


To generate a diff of this commit:
cvs rdiff -u -r1.54 -r1.55 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/net/bind918/PLIST
cvs rdiff -u -r1.30 -r1.31 pkgsrc/net/bind918/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.54 pkgsrc/net/bind918/Makefile:1.55
--- pkgsrc/net/bind918/Makefile:1.54    Wed Jul 16 14:48:02 2025
+++ pkgsrc/net/bind918/Makefile Sun Aug 24 08:56:59 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.54 2025/07/16 14:48:02 taca Exp $
+# $NetBSD: Makefile,v 1.55 2025/08/24 08:56:59 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.38
+BIND_VERSION=  9.18.39
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/PLIST
diff -u pkgsrc/net/bind918/PLIST:1.5 pkgsrc/net/bind918/PLIST:1.6
--- pkgsrc/net/bind918/PLIST:1.5        Fri Dec 13 17:29:56 2024
+++ pkgsrc/net/bind918/PLIST    Sun Aug 24 08:56:59 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2024/12/13 17:29:56 taca Exp $
+@comment $NetBSD: PLIST,v 1.6 2025/08/24 08:56:59 taca Exp $
 bin/arpaname
 bin/delv
 bin/dig
@@ -49,6 +49,7 @@ include/dns/dnssec.h
 include/dns/dnstap.h
 include/dns/ds.h
 include/dns/dsdigest.h
+include/dns/dsync.h
 include/dns/dyndb.h
 include/dns/ecs.h
 include/dns/edns.h

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.30 pkgsrc/net/bind918/distinfo:1.31
--- pkgsrc/net/bind918/distinfo:1.30    Wed Jul 16 14:48:02 2025
+++ pkgsrc/net/bind918/distinfo Sun Aug 24 08:56:59 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.30 2025/07/16 14:48:02 taca Exp $
+$NetBSD: distinfo,v 1.31 2025/08/24 08:56:59 taca Exp $
 
-BLAKE2s (bind-9.18.38.tar.xz) = c433a12b128e6d3e228f379470387f0d58aa7c5755056a3f9ef2d3d861fd7b67
-SHA512 (bind-9.18.38.tar.xz) = 38710646a817dca0df6247b660cd244c79da13d0fed2898da139ae206bc8732fddd93af6fc2cbeca805c0c0d0789ec22eacf26789db288154581478ab2eaf44c
-Size (bind-9.18.38.tar.xz) = 5362772 bytes
+BLAKE2s (bind-9.18.39.tar.xz) = 6a342d34718f49cde2c296c099f70ee7f5d4e79ee0ae75d896bf7fb0315d3797
+SHA512 (bind-9.18.39.tar.xz) = fd6d45c9cb9c599d8770c18801fad2f177faf3a8af82948800d186ae6dc9eb2c894b61802def0841eb722c615c93c077b55368204f0cf2737a3c50d949efca07
+Size (bind-9.18.39.tar.xz) = 5383056 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584