CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Sep 20 13:37:16 UTC 2023

Modified Files:
        pkgsrc/net/bind918: Makefile distinfo

Log Message:
net/bind918: update to 9.18.19

9.18.19 (2023-09-20)

6246.   [security]      Fix use-after-free error in TLS DNS code when sending
                        data. (CVE-2023-4236) [GL #4242]

6245.   [security]      Limit the amount of recursion that can be performed
                        by isccc_cc_fromwire. (CVE-2023-3341) [GL #4152]

6244.   [bug]           Adjust log levels on malformed messages to NOTICE when
                        transferring in a zone. [GL #4290]

6241.   [bug]           Take into account the possibility of partial TLS writes
                        in TLS DNS code. That helps to prevent DNS messages
                        corruption on long DNS over TLS streams. [GL #4255]

6240.   [bug]           Use dedicated per-worker thread jemalloc memory
                        arenas for send buffers allocation to reduce memory
                        consumption and avoid lock contention. [GL #4038]

6239.   [func]          Deprecate the 'dnssec-must-be-secure' option.
                        [GL #3700]

6237.   [bug]           Address memory leaks due to not clearing OpenSSL error
                        stack. [GL #4159]

6235.   [doc]           Clarify BIND 9 time formats. [GL #4266]

6234.   [bug]           Restore stale-refresh-time value after flushing the
                        cache. [GL #4278]

6232.   [bug]           Following the introduction of krb5-subdomain-self-rhs
                        and ms-subdomain-self-rhs update rules, removal of
                        nonexistent PTR and SRV records via UPDATE could fail.
                        [GL #4280]

6231.   [func]          Make nsupdate honor -v for SOA requests if the server
                        is specified. [GL #1181]

6230.   [bug]           Prevent an unnecessary query restart if a synthesized
                        CNAME target points to the CNAME owner. [GL #3835]

6227.   [bug]           Check the statistics-channel HTTP Content-length
                        to prevent negative or overflowing values from
                        causing a crash. [GL #4125]

6224.   [bug]           Check the If-Modified-Since value length to prevent
                        out-of-bounds write. [GL #4124]


To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/net/bind918/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.18 pkgsrc/net/bind918/Makefile:1.19
--- pkgsrc/net/bind918/Makefile:1.18    Tue Sep 19 16:19:27 2023
+++ pkgsrc/net/bind918/Makefile Wed Sep 20 13:37:16 2023
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.18 2023/09/19 16:19:27 he Exp $
+# $NetBSD: Makefile,v 1.19 2023/09/20 13:37:16 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.18
+BIND_VERSION=  9.18.19
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.11 pkgsrc/net/bind918/distinfo:1.12
--- pkgsrc/net/bind918/distinfo:1.11    Tue Aug 29 14:47:21 2023
+++ pkgsrc/net/bind918/distinfo Wed Sep 20 13:37:16 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.11 2023/08/29 14:47:21 taca Exp $
+$NetBSD: distinfo,v 1.12 2023/09/20 13:37:16 taca Exp $
 
-BLAKE2s (bind-9.18.18.tar.xz) = 6f7f87ab9cfcb090acf9447e2d75d9949700dad118d09d9bf5e9dfe78585365d
-SHA512 (bind-9.18.18.tar.xz) = 8d94ec93915c776b9035bce2c3e707c6fb2fa526dbc3b08211c8265daa2c3c88bde51bec08dc416b5b7ba61604754846c4d1efa3f09eebd23847c417c9dc8760
-Size (bind-9.18.18.tar.xz) = 5490428 bytes
+BLAKE2s (bind-9.18.19.tar.xz) = c264efe37f8f386ecafaa46b689084bf43f74513c07f6fd7dc7435e1617e628c
+SHA512 (bind-9.18.19.tar.xz) = 51af9a246f23afc9ac9a1ef2d793bc91f43fe835b6c4101ad557799ee3aa4253bd12b2f12d9d101c1ce616e2a852a42c5567b031adaaaf06677fcc11c98cf393
+Size (bind-9.18.19.tar.xz) = 5508464 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 6e59d3f637ebb829eec2f76ba7c350fb5cf9be6d