[pkgsrc/pkgsrc-2021Q3]: pkgsrc/net/bind911 Pullup ticket #6524 - requested by...

[tm <tm%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/2b5500545980
branches:  pkgsrc-2021Q3
changeset: 768845:2b5500545980
user:      tm <tm%pkgsrc.org@localhost>
date:      Mon Nov 01 22:14:43 2021 +0000

description:
Pullup ticket #6524 - requested by taca
net/bind911: security fix

Revisions pulled up:
- net/bind911/Makefile                                          1.51
- net/bind911/distinfo                                          1.37
- net/bind911/patches/patch-configure                           1.6

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Oct 29 06:02:26 UTC 2021

   Modified Files:
        pkgsrc/net/bind911: Makefile distinfo
        pkgsrc/net/bind911/patches: patch-configure

   Log Message:
   net/bind911: update to 9.11.36

   --- 9.11.36 released ---

   5736.        [security]      The "lame-ttl" option is now forcibly set to 0. This
                        effectively disables the lame server cache, as it could
                        previously be abused by an attacker to significantly
                        degrade resolver performance. (CVE-2021-25219)
                        [GL #2899]

   5716.        [bug]           Multiple library names were mistakenly passed to the
                        krb5-config utility when ./configure was invoked with
                        the --with-gssapi=[/path/to/]krb5-config option. This
                        has been fixed by invoking krb5-config separately for
                        each required library. [GL #2866]

diffstat:

 net/bind911/Makefile                |   4 ++--
 net/bind911/distinfo                |  12 ++++++------
 net/bind911/patches/patch-configure |  24 +++++++-----------------
 3 files changed, 15 insertions(+), 25 deletions(-)

diffs (111 lines):

diff -r a47916f3ba15 -r 2b5500545980 net/bind911/Makefile
--- a/net/bind911/Makefile      Mon Nov 01 22:06:32 2021 +0000
+++ b/net/bind911/Makefile      Mon Nov 01 22:14:43 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.50 2021/08/26 17:00:56 jperkin Exp $
+# $NetBSD: Makefile,v 1.50.2.1 2021/11/01 22:14:43 tm Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.11.35
+BIND_VERSION=  9.11.36
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r a47916f3ba15 -r 2b5500545980 net/bind911/distinfo
--- a/net/bind911/distinfo      Mon Nov 01 22:06:32 2021 +0000
+++ b/net/bind911/distinfo      Mon Nov 01 22:14:43 2021 +0000
@@ -1,14 +1,14 @@
-$NetBSD: distinfo,v 1.34 2021/08/19 02:59:13 taca Exp $
+$NetBSD: distinfo,v 1.34.2.1 2021/11/01 22:14:43 tm Exp $
 
-SHA1 (bind-9.11.35.tar.gz) = 03f22a422bd6920e143f594bd65a7791830b4d3f
-RMD160 (bind-9.11.35.tar.gz) = 2204f36cd69eb150e81e672f89b41d29d7f3c3af
-SHA512 (bind-9.11.35.tar.gz) = 78cccabded12cbe3a53421ef4731ccc6ea150b9c36ca4d159b6eaaa9c0b199c907876e00e4f0fe11862b0cfc01049d48ffb126b8acd6230aa71d588b6fab169d
-Size (bind-9.11.35.tar.gz) = 8308926 bytes
+SHA1 (bind-9.11.36.tar.gz) = 4b45d15edc1e3b7902129ce27baec58a50d76b5c
+RMD160 (bind-9.11.36.tar.gz) = 3357ec404f04a713b3e1285b0c193ea107993f0a
+SHA512 (bind-9.11.36.tar.gz) = eafaf86095f5d4446b004ad7690a5c0b16a597c135a306881b7038d247b8975032fd43d087d7c3d296ba77969f3ac83081a9ed4cbc1d4c66b6a04f2b74a54cb2
+Size (bind-9.11.36.tar.gz) = 8313276 bytes
 SHA1 (patch-bin_named_Makefile.in) = 3e5b98e3e0bdb701be679d3580d6d2d7609d655b
 SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
 SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee
 SHA1 (patch-config.threads.in) = 8341bdb11888d3efdde5f115de91b1f46aa40bd0
-SHA1 (patch-configure) = 25883b81834df9c0377578f89e1e1cbd8f25b1cb
+SHA1 (patch-configure) = c6d337d8afdb6c1eed756f67365b68ce88f1edd2
 SHA1 (patch-contrib_dlz_config.dlz.in) = 6c53d61aaaf1a952a867e4c4da0194db94f511d7
 SHA1 (patch-lib_dns_rbt.c) = 8af91b6d40b591d28d15f7f98c9b7a82df234381
 SHA1 (patch-lib_dns_view.c) = 39e71fe6a407e4f9bee49b1ee25adfa0ba74b338
diff -r a47916f3ba15 -r 2b5500545980 net/bind911/patches/patch-configure
--- a/net/bind911/patches/patch-configure       Mon Nov 01 22:06:32 2021 +0000
+++ b/net/bind911/patches/patch-configure       Mon Nov 01 22:14:43 2021 +0000
@@ -1,13 +1,12 @@
-$NetBSD: patch-configure,v 1.5 2021/07/22 22:50:40 taca Exp $
+$NetBSD: patch-configure,v 1.5.2.1 2021/11/01 22:14:43 tm Exp $
 
 * Add DragonFly support.
 * Use proper link options for NetBSD.
 * Link proper postgresql library.
-* Do not use "==" for test(1).
 
---- configure.orig     2021-07-09 08:55:20.000000000 +0000
+--- configure.orig     2021-10-11 19:35:49.000000000 +0000
 +++ configure
-@@ -16057,6 +16057,8 @@ case $host in
+@@ -16004,6 +16004,8 @@ case $host in
        use_threads=false ;;
  *-freebsd*)
        use_threads=true ;;
@@ -16,7 +15,7 @@
  *-bsdi[234]*)
        # Thread signals do not work reliably on some versions of BSD/OS.
        use_threads=false ;;
-@@ -18720,27 +18722,10 @@ case "$use_libjson" in
+@@ -18667,27 +18669,10 @@ case "$use_libjson" in
                libjson_libs=""
                ;;
        auto|yes)
@@ -48,7 +47,7 @@
                ;;
        *)
                if test -f "${use_libjson}/include/json/json.h"
-@@ -24492,7 +24477,7 @@ else
+@@ -24439,7 +24424,7 @@ else
  
  fi
                ;; #(
@@ -57,7 +56,7 @@
  
                 LDFLAGS="${LDFLAGS} -Wl,-E"
                 SO_CFLAGS="-fpic"
-@@ -24524,9 +24509,9 @@ fi
+@@ -24471,9 +24456,9 @@ fi
                ;; #(
    *-solaris*) :
  
@@ -70,7 +69,7 @@
                ;; #(
    ia64-hp-hpux*) :
  
-@@ -24786,8 +24771,8 @@ $as_echo "no" >&6; }
+@@ -24733,8 +24718,8 @@ $as_echo "no" >&6; }
        fi
        if test -n "-L$use_dlz_postgres_lib -lpq"
        then
@@ -81,12 +80,3 @@
        fi
  
  
-@@ -28111,7 +28096,7 @@ report() {
-     echo "    localstatedir: $localstatedir"
-     echo "-------------------------------------------------------------------------------"
-     echo "Compiler: $CC"
--    if test "yes" == "$GCC"; then
-+    if test "yes" = "$GCC"; then
-       $CC --version 2>&1 | sed 's/^/    /'
-     else
-       case "$host_os" in