CVS commit: [pkgsrc-2025Q4] pkgsrc/net/bind918

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Sat Jan 24 03:03:23 UTC 2026

Modified Files:
        pkgsrc/net/bind918 [pkgsrc-2025Q4]: Makefile distinfo

Log Message:
Pullup ticket #7046 - requested by taca
net/bind918: Security fix

Revisions pulled up:
- net/bind918/Makefile                                          1.63
- net/bind918/distinfo                                          1.35

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Wed Jan 21 13:54:21 UTC 2026

   Modified Files:
        pkgsrc/net/bind918: Makefile distinfo

   Log Message:
   net/bind918: update to 9.18.44

   This release contains security fix, <https://kb.isc.org/docs/cve-2025-13878>.
   9.18.44 (2026-01-21)

   Security Fixes

   * Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878)

   * Malformed BRID and HHIT records could trigger an assertion failure. This
     has been fixed.

   * ISC would like to thank Vlatko Kosturjak from Marlink Cyber for bringing
     this vulnerability to our attention.  [GL #5616]

   Bug Fixes

   * Allow glue in delegations with QTYPE=ANY.

   * When a query for type ANY triggered a delegation response, all additional
     data was omitted from the response, including mandatory glue.  This has
     been fixed. [GL #5659]

   Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to be invalid.

   * A zone that was signed with NSEC3, had opt-out enabled, and was then
     reconfigured to use NSEC, was published with missing NSEC records.  This
     has been fixed.  [GL #5679]


To generate a diff of this commit:
cvs rdiff -u -r1.60 -r1.60.2.1 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.34 -r1.34.2.1 pkgsrc/net/bind918/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.60 pkgsrc/net/bind918/Makefile:1.60.2.1
--- pkgsrc/net/bind918/Makefile:1.60    Thu Dec 18 10:35:13 2025
+++ pkgsrc/net/bind918/Makefile Sat Jan 24 03:03:23 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.60 2025/12/18 10:35:13 he Exp $
+# $NetBSD: Makefile,v 1.60.2.1 2026/01/24 03:03:23 maya Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.43
+BIND_VERSION=  9.18.44
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.34 pkgsrc/net/bind918/distinfo:1.34.2.1
--- pkgsrc/net/bind918/distinfo:1.34    Thu Dec 18 10:35:13 2025
+++ pkgsrc/net/bind918/distinfo Sat Jan 24 03:03:23 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.34 2025/12/18 10:35:13 he Exp $
+$NetBSD: distinfo,v 1.34.2.1 2026/01/24 03:03:23 maya Exp $
 
-BLAKE2s (bind-9.18.43.tar.xz) = dd4256652d385e7d44ced6294c7bc3dee2ad58052e01fa1c56fcc32261e9ad09
-SHA512 (bind-9.18.43.tar.xz) = 4f0e6849e883110f275739a03de20465c91563f26be94d380d28454f27d7c68fdc3ba0e1eaa8d25a6790cadc8228ee981dceb0a6fcf46ab4ffd24b8c76f42e25
-Size (bind-9.18.43.tar.xz) = 5424860 bytes
+BLAKE2s (bind-9.18.44.tar.xz) = 85c28019b64218629a643643214e7493dfee3d4823da05105d0ef805c5996fdf
+SHA512 (bind-9.18.44.tar.xz) = 767bc313995576c008c00e073568d5d9bebb2e1dcc7e9e3f7ea128e6dca4358d7879de70fa1cb2980ded0b8db362f4d9eb71875dda2d45898e5607dbb4093a9f
+Size (bind-9.18.44.tar.xz) = 5439552 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584