bind920: update to BIND version 9.20.11:

[Havard Eidnes (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Havard Eidnes <he%NetBSD.org@localhost>
Pushed By:	he
Date:		Wed Jul 16 22:33:01 2025 +0000
Changeset:	4c227c05b3601f11514b56eccba3cd1efa2d4dd0

Modified Files:
	bind920/Makefile
	bind920/distinfo

Log Message:
bind920: update to BIND version 9.20.11:

Pkgsrc changes:
 * None, just version + checksums.

Upstream changes:

BIND 9.20.11
------------

Security Fixes
~~~~~~~~~~~~~~

- [CVE-2025-40777] Fix a possible assertion failure when using the
  'stale-answer-client-timeout 0' option. ``055a592fd97``

  In specific circumstances the :iscman:`named` resolver process could
  terminate unexpectedly when stale answers were enabled and the
  ``stale-answer-client-timeout 0`` configuration option was used. This
  has been fixed. :gl:`#5372`

New Features
~~~~~~~~~~~~

- Add support for the CO flag to dig. ``47108af9f2e``

  Add support to display the CO (Compact Answers OK flag)
  when displaying messages.

  Add support to set the CO flag when making queries in dig (+coflag).
  :gl:`#5319` :gl:`!10578`

Bug Fixes
~~~~~~~~~

- Fix the default interface-interval from 60s to 60m. ``e8ffe3a15ca``

  When the interface-interval parser was changed from uint32 parser to
  duration parser, the default value stayed at plain number `60` which
  now means 60 seconds instead of 60 minutes.  The documentation also
  incorrectly states that the value is in minutes.  That has been fixed.
  :gl:`#5246` :gl:`!10679`

- Fix purge-keys bug when using views. ``35efa742b03``

  Previously, when a DNSSEC key was purged by one zone view, other zone
  views would return an error about missing key files. This has been
  fixed. :gl:`#5315` :gl:`!10598`

- Use IPv6 queries in delv +ns. ``4916fe0c6bd``

  `delv +ns` invokes the same code to perform name resolution as
  `named`, but it neglected to set up an IPv6 dispatch object first.
  Consequently, it was behaving more like `named -4`. It now sets up
  dispatch objects for both address families, and performs resolver
  queries to both v4 and v6 addresses, except when one of the address
  families has been suppressed by using `delv -4` or `delv -6`.
  :gl:`#5352` :gl:`!10573`

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=4c227c05b3601f11514b56eccba3cd1efa2d4dd0

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 bind920/Makefile | 2 +-
 bind920/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diffs:
diff --git a/bind920/Makefile b/bind920/Makefile
index e8978d907f..03e05b40ac 100644
--- a/bind920/Makefile
+++ b/bind920/Makefile
@@ -15,7 +15,7 @@ CONFLICTS+=	host-[0-9]*
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.20.10
+BIND_VERSION=	9.20.11
 
 BUILD_DEFS+=	BIND_DIR VARBASE
 
diff --git a/bind920/distinfo b/bind920/distinfo
index 324dc079ae..a6bdc9b750 100644
--- a/bind920/distinfo
+++ b/bind920/distinfo
@@ -1,6 +1,6 @@
 $NetBSD: distinfo,v 1.20 2024/07/23 13:50:32 taca Exp $
 
-BLAKE2s (bind-9.20.10.tar.xz) = 3ec2b4fe302e457d4abe6843f0a05c52ac1e435b4c6b14de68ae37772ca2a070
-SHA512 (bind-9.20.10.tar.xz) = 2d4510e2e73aed94424b065b9371a1422f1b53ec8c01b281fdc78f90401dcd229b7095a175bb4f4d44b07d81e5edbee78bbfb1bf31b981e26fe1ea6df53d415d
-Size (bind-9.20.10.tar.xz) = 5677276 bytes
+BLAKE2s (bind-9.20.11.tar.xz) = a5b54078611d2fdbb42ceb1033707e971216a92b534cbe0deae21987de5b7762
+SHA512 (bind-9.20.11.tar.xz) = bacc19eaf37133d37202db521e2c6727fc4e494562caad68e7c22e8dad84411684ba2c7430aa3bb2d916b9078c3aab8277d35e0f9b1f9893b89071de7ad7eee4
+Size (bind-9.20.11.tar.xz) = 5674856 bytes
 SHA1 (patch-configure.ac) = d3b9bb82c8e164135b93a76d5c53ad40521226e2