CVS commit: pkgsrc/net/bind918

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Apr 16 14:53:56 UTC 2025

Modified Files:
        pkgsrc/net/bind918: Makefile distinfo

Log Message:
net/bind918: update to 9.18.36

BIND 9.18.36 (2025-04-16)

Feature Changes

* Make TLS data processing more reliable in various network conditions.

  BIND now deciphers incoming TLS data before processing it, making it more
  similar to the handling of TCP.  This results in a more predictable
  behavior, particularly when reading from the stream is paused or resumed.
  Previously, this could result in an assertion failure when using XFR over
  TLS (XoT).  This has been fixed.  [GL #5247]

Bug Fixes

* Stop caching lack of EDNS support.

  named could falsely learn that a server did not support EDNS when a
  spoofed response was received; that subsequently prevented DNSSEC lookups
  from being made.  This has been fixed.  [GL #3949] [GL #5066]

* Fix resolver statistics counters for timed-out responses.

  When query responses timed out, the resolver could incorrectly increase
  the regular response counters, even if no response was received.  This has
  been fixed.  [GL #5193]

* Don't enforce NOAUTH/NOCONF flags in DNSKEYs.

  All DNSKEY keys are able to authenticate.  The DNS_KEYTYPE_NOAUTH (and
  DNS_KEYTYPE_NOCONF) flags were defined for the KEY rdata type, and are not
  applicable to DNSKEY.  Previously, however, because the DNSKEY
  implementation was built on top of KEY, the _NOAUTH flag prevented
  authentication in DNSKEYs as well.  This has been corrected.  [GL #5240]

* Fix inconsistency in CNAME/DNAME handling during resolution.

  Previously, in some cases, the resolver could return rdatasets of type
  CNAME or DNAME without the result code being set to DNS_R_CNAME or
  DNS_R_DNAME.  This could trigger an assertion failure.  This has been
  fixed.  [GL #5201]


To generate a diff of this commit:
cvs rdiff -u -r1.48 -r1.49 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/net/bind918/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/bind918/Makefile
diff -u pkgsrc/net/bind918/Makefile:1.48 pkgsrc/net/bind918/Makefile:1.49
--- pkgsrc/net/bind918/Makefile:1.48    Sun Apr 13 15:52:09 2025
+++ pkgsrc/net/bind918/Makefile Wed Apr 16 14:53:56 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.48 2025/04/13 15:52:09 taca Exp $
+# $NetBSD: Makefile,v 1.49 2025/04/16 14:53:56 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=   host-[0-9]*
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.18.35
+BIND_VERSION=  9.18.36
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 

Index: pkgsrc/net/bind918/distinfo
diff -u pkgsrc/net/bind918/distinfo:1.27 pkgsrc/net/bind918/distinfo:1.28
--- pkgsrc/net/bind918/distinfo:1.27    Sun Apr 13 15:52:09 2025
+++ pkgsrc/net/bind918/distinfo Wed Apr 16 14:53:56 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.27 2025/04/13 15:52:09 taca Exp $
+$NetBSD: distinfo,v 1.28 2025/04/16 14:53:56 taca Exp $
 
-BLAKE2s (bind-9.18.35.tar.xz) = 4ce3c40aa5d3d1b49d9742a82d5fe4ffdd746c0a54929ceb4bd0e483e34d1c1b
-SHA512 (bind-9.18.35.tar.xz) = 81764e1e4acb87e498cfce9e683dbdcadac13a5a5f2a517c988ff17967b34efb312ec0a9e94d7f9261e1e9bebbcfa295da6e37985c69961ef43031a8b99e8fc9
-Size (bind-9.18.35.tar.xz) = 5357312 bytes
+BLAKE2s (bind-9.18.36.tar.xz) = 635a34f2199c88a227f4ecc1996076cac95c0e5caf7d2008ec6d364c9e849857
+SHA512 (bind-9.18.36.tar.xz) = a95af586ee752705fa164c4d2f41b988e044a86ba9f078d1647d10025ca8f2872c95544dc5515717862b8fcb46b24e9cf6669d719196b6734a50d7a4c16a1288
+Size (bind-9.18.36.tar.xz) = 5357976 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584