CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Mar 25 15:12:51 UTC 2026

Modified Files:
        pkgsrc/net/bind918: Makefile distinfo
        pkgsrc/net/bind918/patches: patch-lib_dns_zone.c

Log Message:
net/bind918: update to 9.18.47

This is security release and from release announce:

Our March 2026 maintenance releases of BIND 9 are available and can be downloaded from the links below.  Packages and container images provided by ISC will be updated later today.

In addition to bug fixes and feature improvements, these releases also contain fixes for security vulnerabilities.  More information can be found in the following Security Advisories:

    https://kb.isc.org/docs/cve-2026-1519
    https://kb.isc.org/docs/cve-2026-3104
    https://kb.isc.org/docs/cve-2026-3119
    https://kb.isc.org/docs/cve-2026-3591

A link to each newly-released version follows.  Each release directory includes a complete source tarball, cryptographic signature, and release notes.  The release notes provide a summary of 
significant changes, and should be reviewed before upgrading.

  - Current supported stable branches:

    - 9.18.47  - https://downloads.isc.org/isc/bind9/9.18.47/
    - 9.20.21  - https://downloads.isc.org/isc/bind9/9.20.21/

  - Experimental development branch:

    - 9.21.20  - https://downloads.isc.org/isc/bind9/9.21.20/


To generate a diff of this commit:
cvs rdiff -u -r1.65 -r1.66 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.37 -r1.38 pkgsrc/net/bind918/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind918/patches/patch-lib_dns_zone.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.65 pkgsrc/net/bind918/Makefile:1.66
--- pkgsrc/net/bind918/Makefile:1.65    Sun Mar  1 06:51:06 2026
+++ pkgsrc/net/bind918/Makefile Wed Mar 25 15:12:51 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.65 2026/03/01 06:51:06 taca Exp $
+# $NetBSD: Makefile,v 1.66 2026/03/25 15:12:51 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.46
+BIND_VERSION=  9.18.47
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.37 pkgsrc/net/bind918/distinfo:1.38
--- pkgsrc/net/bind918/distinfo:1.37    Sun Mar  1 06:51:06 2026
+++ pkgsrc/net/bind918/distinfo Wed Mar 25 15:12:51 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.37 2026/03/01 06:51:06 taca Exp $
+$NetBSD: distinfo,v 1.38 2026/03/25 15:12:51 taca Exp $
 
-BLAKE2s (bind-9.18.46.tar.xz) = bd2c1f556689e328240188732de691b53327eb5dd4a8b907b29fe43e21b1eeb9
-SHA512 (bind-9.18.46.tar.xz) = 92cd1ac5f65ed6f400191f8b81bc4501fc590c9ebe8ffdd1310e67ec784b00d5977a78106b0c2221c90f4b69b9050aae054bad0def0f6d03de94ea98686ad166
-Size (bind-9.18.46.tar.xz) = 5447520 bytes
+BLAKE2s (bind-9.18.47.tar.xz) = faff330d5e6936a76c1a803884611f0cae726041b97d102f1782b53b2ae36e7d
+SHA512 (bind-9.18.47.tar.xz) = 8135d453c0dd99947c93b9fb8fe1a52c5657f1c675b503dbfb745dfc9bb278121dc307d590bae99b439b093e87cb2bd0bf07d0a32ffd8a39841752559a0df1e8
+Size (bind-9.18.47.tar.xz) = 5448920 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584
@@ -18,7 +18,7 @@ SHA1 (patch-lib_dns_sdb.c) = ed447ec7a13
 SHA1 (patch-lib_dns_sdlz.c) = 4fc15a577c64501c10c144eab147e54686e80309
 SHA1 (patch-lib_dns_validator.c) = 03dd60d4c38be7248d1e07f2c29ddd543b5f7454
 SHA1 (patch-lib_dns_view.c) = 5b092f0344b92d003f1fe1f28e4cc4c76b2505cf
-SHA1 (patch-lib_dns_zone.c) = cd7bc1e76caf1d664393efa318786c2b33c000de
+SHA1 (patch-lib_dns_zone.c) = 37e34e03c396787dda0df8856fb6de0a207abc60
 SHA1 (patch-lib_isc_include_isc_netmgr.h) = 48ac44c6a9b81e6b442deba6c075653d3691464b
 SHA1 (patch-lib_isc_net.c) = 743de2701fa96ef25e5689f40e381628cff641d5
 SHA1 (patch-lib_isc_netmgr_netmgr-int.h) = d84993edf254605f85421fbdd2fc523255c7316d

Index: pkgsrc/net/bind918/patches/patch-lib_dns_zone.c
diff -u pkgsrc/net/bind918/patches/patch-lib_dns_zone.c:1.1 pkgsrc/net/bind918/patches/patch-lib_dns_zone.c:1.2
--- pkgsrc/net/bind918/patches/patch-lib_dns_zone.c:1.1 Sun Dec 11 01:57:55 2022
+++ pkgsrc/net/bind918/patches/patch-lib_dns_zone.c     Wed Mar 25 15:12:51 2026
@@ -1,10 +1,10 @@
-$NetBSD: patch-lib_dns_zone.c,v 1.1 2022/12/11 01:57:55 sekiya Exp $
+$NetBSD: patch-lib_dns_zone.c,v 1.2 2026/03/25 15:12:51 taca Exp $
 
 No need to use atomic 64-bit integers for flags fit within 32-bit width.
 
---- lib/dns/zone.c.orig        2021-09-07 09:37:05.000000000 +0000
+--- lib/dns/zone.c.orig        2026-03-13 21:59:39.922910242 +0000
 +++ lib/dns/zone.c
-@@ -246,8 +246,13 @@ struct dns_zone {
+@@ -278,8 +278,13 @@ struct dns_zone {
        int32_t journalsize;
        dns_rdataclass_t rdclass;
        dns_zonetype_t type;
@@ -18,7 +18,7 @@ No need to use atomic 64-bit integers fo
        unsigned int db_argc;
        char **db_argv;
        isc_time_t expiretime;
-@@ -405,7 +410,11 @@ struct dns_zone {
+@@ -434,7 +439,11 @@ struct dns_zone {
        /*%
         * Autosigning/key-maintenance options
         */
@@ -30,7 +30,7 @@ No need to use atomic 64-bit integers fo
  
        /*%
         * True if added by "rndc addzone"
-@@ -537,12 +546,14 @@ typedef enum {
+@@ -566,12 +575,14 @@ typedef enum {
                                                      * notify due to the zone
                                                      * just being loaded for
                                                      * the first time. */
@@ -44,4 +44,4 @@ No need to use atomic 64-bit integers fo
 +#endif
  } dns_zoneflg_t;
  
- #define DNS_ZONE_OPTION(z, o)  ((atomic_load_relaxed(&(z)->options) & (o)) != 0)
+ #define DNS_ZONE_OPTION(z, o) ((atomic_load_relaxed(&(z)->options) & (o)) != 0)