dns/bind920: update to 9.20.11

Security:	CVE-2025-40777
This commit is contained in:
Mathieu Arnold
2025-07-17 07:26:24 +02:00
parent 07130914c1
commit 0713092ae6
5 changed files with 23 additions and 23 deletions

View File

@@ -19,15 +19,15 @@ bin/nsec3hash
bin/nslookup
bin/nsupdate
lib/bind-tools/libdns.so
lib/bind-tools/libdns-9.20.10.so
lib/bind-tools/libdns-9.20.11.so
lib/bind-tools/libisc.so
lib/bind-tools/libisc-9.20.10.so
lib/bind-tools/libisc-9.20.11.so
lib/bind-tools/libisccc.so
lib/bind-tools/libisccc-9.20.10.so
lib/bind-tools/libisccc-9.20.11.so
lib/bind-tools/libisccfg.so
lib/bind-tools/libisccfg-9.20.10.so
lib/bind-tools/libisccfg-9.20.11.so
lib/bind-tools/libns.so
lib/bind-tools/libns-9.20.10.so
lib/bind-tools/libns-9.20.11.so
share/man/man1/arpaname.1.gz
share/man/man1/delv.1.gz
share/man/man1/dig.1.gz

View File

@@ -1,14 +1,14 @@
# pkg-help formatted with fmt 59 63
PORTNAME= bind
DISTVERSION= 9.20.10
DISTVERSION= 9.20.11
.if defined(BIND_TOOLS_SLAVE)
# dns/bind-tools here
PORTREVISION= 1
PORTREVISION= 0
.else
# XXX: correct version
# dns/bind920 here
PORTREVISION= 2
PORTREVISION= 0
.endif
CATEGORIES= dns net
MASTER_SITES= ISC/bind9/${DISTVERSION}

View File

@@ -1,3 +1,3 @@
TIMESTAMP = 1750354633
SHA256 (bind-9.20.10.tar.xz) = 0fb3ba2c337bb488ca68f5df296c435cd255058fb63d0822e91db0235c905716
SIZE (bind-9.20.10.tar.xz) = 5677276
TIMESTAMP = 1752729536
SHA256 (bind-9.20.11.tar.xz) = 4da2d532e668bc21e883f6e6d9d3d81794d9ec60b181530385649a56f46ee17a
SIZE (bind-9.20.11.tar.xz) = 5674856

View File

@@ -1,6 +1,6 @@
Add the override-cache-ttl feature.
--- bin/named/config.c.orig 2025-06-06 10:29:25 UTC
--- bin/named/config.c.orig 2025-07-04 09:42:08 UTC
+++ bin/named/config.c
@@ -186,6 +186,7 @@ options {\n\
notify-source *;\n\
@@ -10,7 +10,7 @@ Add the override-cache-ttl feature.
parental-source *;\n\
parental-source-v6 *;\n\
provide-ixfr true;\n\
--- bin/named/server.c.orig 2025-06-06 10:29:25 UTC
--- bin/named/server.c.orig 2025-07-04 09:42:08 UTC
+++ bin/named/server.c
@@ -4639,6 +4639,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
}
@@ -24,9 +24,9 @@ Add the override-cache-ttl feature.
result = named_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asduration(obj);
--- doc/arm/reference.rst.orig 2025-06-06 10:29:26 UTC
--- doc/arm/reference.rst.orig 2025-07-04 09:42:08 UTC
+++ doc/arm/reference.rst
@@ -4394,6 +4394,10 @@ Tuning
@@ -4397,6 +4397,10 @@ Tuning
cannot exceed 7 days and is silently truncated to 7 days if set to a
greater value.
@@ -37,7 +37,7 @@ Add the override-cache-ttl feature.
.. namedconf:statement:: max-cache-ttl
:tags: server
:short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers.
--- lib/dns/include/dns/view.h.orig 2025-06-06 10:29:26 UTC
--- lib/dns/include/dns/view.h.orig 2025-07-04 09:42:08 UTC
+++ lib/dns/include/dns/view.h
@@ -151,6 +151,7 @@ struct dns_view {
bool requestnsid;
@@ -47,7 +47,7 @@ Add the override-cache-ttl feature.
dns_ttl_t maxncachettl;
dns_ttl_t mincachettl;
dns_ttl_t minncachettl;
--- lib/dns/resolver.c.orig 2025-06-06 10:29:26 UTC
--- lib/dns/resolver.c.orig 2025-07-04 09:42:08 UTC
+++ lib/dns/resolver.c
@@ -5967,6 +5967,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes
}
@@ -62,7 +62,7 @@ Add the override-cache-ttl feature.
* Enforce the configure maximum cache TTL.
*/
if (rdataset->ttl > res->view->maxcachettl) {
--- lib/isccfg/namedconf.c.orig 2025-06-06 10:29:26 UTC
--- lib/isccfg/namedconf.c.orig 2025-07-04 09:42:08 UTC
+++ lib/isccfg/namedconf.c
@@ -2220,6 +2220,7 @@ static cfg_clausedef_t view_clauses[] = {
#endif /* ifdef HAVE_LMDB */

View File

@@ -242,15 +242,15 @@ include/ns/update.h
include/ns/xfrout.h
lib/bind/filter-a.so
lib/bind/filter-aaaa.so
lib/libdns-9.20.10.so
lib/libdns-9.20.11.so
lib/libdns.so
lib/libisc-9.20.10.so
lib/libisc-9.20.11.so
lib/libisc.so
lib/libisccc-9.20.10.so
lib/libisccc-9.20.11.so
lib/libisccc.so
lib/libisccfg-9.20.10.so
lib/libisccfg-9.20.11.so
lib/libisccfg.so
lib/libns-9.20.10.so
lib/libns-9.20.11.so
lib/libns.so
@comment share/man/man1/arpaname.1.gz
@comment share/man/man1/delv.1.gz