[pkgsrc/trunk]: pkgsrc/net/bind916 Upgrade net/bind916 to version 9.16.19.

[he <he%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/2305f5563ef7
branches:  trunk
changeset: 456220:2305f5563ef7
user:      he <he%pkgsrc.org@localhost>
date:      Thu Jul 22 13:30:24 2021 +0000

description:
Upgrade net/bind916 to version 9.16.19.

Upstream changes:

        --- 9.16.19 released ---

5671.   [bug]           A race condition could occur where two threads were
                        competing for the same set of key file locks, leading to
                        a deadlock. This has been fixed. [GL #2786]

5670.   [bug]           create_keydata() created an invalid placeholder keydata
                        record upon a refresh failure, which prevented the
                        database of managed keys from subsequently being read
                        back. This has been fixed. [GL #2686]

5669.   [func]          KASP support was extended with the "check DS" feature.
                        Zones with "dnssec-policy" and "parental-agents"
                        configured now check for DS presence and can perform
                        automatic KSK rollovers. [GL #1126]

5668.   [bug]           Rescheduling a setnsec3param() task when a zone failed
                        to load on startup caused a hang on shutdown. This has
                        been fixed. [GL #2791]

5667.   [bug]           The configuration-checking code failed to account for
                        the inheritance rules of the "dnssec-policy" option.
                        This has been fixed. [GL #2780]

5666.   [doc]           The safe "edns-udp-size" value was tweaked to match the
                        probing value from BIND 9.16 for better compatibility.
                        [GL #2183]

5665.   [bug]           If nsupdate sends an SOA request and receives a REFUSED
                        response, it now fails over to the next available
                        server. [GL #2758]

5664.   [func]          For UDP messages larger than the path MTU, named now
                        sends an empty response with the TC (TrunCated) bit set.
                        In addition, setting the DF (Don't Fragment) flag on
                        outgoing UDP sockets was re-enabled. [GL #2790]

5662.   [bug]           Views with recursion disabled are now configured with a
                        default cache size of 2 MB unless "max-cache-size" is
                        explicitly set. This prevents cache RBT hash tables from
                        being needlessly preallocated for such views. [GL #2777]

5661.   [bug]           Change 5644 inadvertently introduced a deadlock: when
                        locking the key file mutex for each zone structure in a
                        different view, the "in-view" logic was not considered.
                        This has been fixed. [GL #2783]

5658.   [bug]           Increasing "max-cache-size" for a running named instance
                        (using "rndc reconfig") did not cause the hash tables
                        used by cache databases to be grown accordingly. This
                        has been fixed. [GL #2770]

5655.   [bug]           Signed, insecure delegation responses prepared by named
                        either lacked the necessary NSEC records or contained
                        duplicate NSEC records when both wildcard expansion and
                        CNAME chaining were required to prepare the response.
                        This has been fixed. [GL #2759]

5653.   [bug]           A bug that caused the NSEC3 salt to be changed on every
                        restart for zones using KASP has been fixed. [GL #2725]

diffstat:

 net/bind916/Makefile |   5 ++---
 net/bind916/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (40 lines):

diff -r 3bc8abfa3833 -r 2305f5563ef7 net/bind916/Makefile
--- a/net/bind916/Makefile      Thu Jul 22 12:31:58 2021 +0000
+++ b/net/bind916/Makefile      Thu Jul 22 13:30:24 2021 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.21 2021/07/20 06:41:46 rin Exp $
+# $NetBSD: Makefile,v 1.22 2021/07/22 13:30:24 he Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   2
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 EXTRACT_SUFX=  .tar.xz
@@ -16,7 +15,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.16.18
+BIND_VERSION=  9.16.19
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 
diff -r 3bc8abfa3833 -r 2305f5563ef7 net/bind916/distinfo
--- a/net/bind916/distinfo      Thu Jul 22 12:31:58 2021 +0000
+++ b/net/bind916/distinfo      Thu Jul 22 13:30:24 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.18 2021/07/20 07:23:04 rin Exp $
+$NetBSD: distinfo,v 1.19 2021/07/22 13:30:24 he Exp $
 
-SHA1 (bind-9.16.18.tar.xz) = d4d5dc9097647a75732ff3fdd9ed370bb3bca7d4
-RMD160 (bind-9.16.18.tar.xz) = c26ba6a638f4dafe766fff7c45ee22d3fe56c049
-SHA512 (bind-9.16.18.tar.xz) = 6ba2f14324ebdc66d2a6d60e929fb47e170dd7662cf4b18ef3ad9da30a61b43c7d5539e931c483ab36e63ae0398aeed255fd672489fb332dccf182df9aa102f9
-Size (bind-9.16.18.tar.xz) = 5023512 bytes
+SHA1 (bind-9.16.19.tar.xz) = c10ee1a30dc340acaa8cefb3925b3d315c82909b
+RMD160 (bind-9.16.19.tar.xz) = b4f9ad228db8658aa2e9aa2fadde218df3913f50
+SHA512 (bind-9.16.19.tar.xz) = 47a0867a34c73dd939f6e24ab63e1a9cc7ba3e4d42987dbf1be424afe320734587b09b26c3b3371861fe79e3ddc08a81a019bba0cadecf76e20f717103578dca
+Size (bind-9.16.19.tar.xz) = 5039240 bytes
 SHA1 (patch-bin_dig_dighost.c) = b1073911d80ecd519af98b6678968296ff8c0c98
 SHA1 (patch-bin_dig_include_dig_dig.h) = 10166f5bb98b208c7b10d63eb31e8253f704acc8
 SHA1 (patch-bin_named_Makefile.in) = f1367da6a226ba44d0ee13acf00b8abeb5b1b7eb