[pkgsrc/trunk]: pkgsrc/net/bind916 net/bind916: update to 9.16.20

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b4489428296b
branches:  trunk
changeset: 457149:b4489428296b
user:      taca <taca%pkgsrc.org@localhost>
date:      Thu Aug 19 03:33:49 2021 +0000

description:
net/bind916: update to 9.16.20

This update contains security fix: CVE-2021-25218.


        --- 9.16.20 released ---

5689.   [security]      An assertion failure occurred when named attempted to
                        send a UDP packet that exceeded the MTU size, if
                        Response Rate Limiting (RRL) was enabled.
                        (CVE-2021-25218) [GL #2856]

5688.   [bug]           Zones using KASP and inline-signed zones failed to apply
                        changes from the unsigned zone to the signed zone under
                        certain circumstances. This has been fixed. [GL #2735]

5687.   [bug]           "rndc reload <zonename>" could trigger a redundant
                        reload for an inline-signed zone whose zone file was not
                        modified since the last "rndc reload". This has been
                        fixed. [GL #2855]

5686.   [func]          The number of internal data structures allocated for
                        each zone was reduced. [GL #2829]

5685.   [bug]           named failed to check the opcode of responses when
                        performing zone refreshes, stub zone updates, and UPDATE
                        forwarding. This has been fixed. [GL #2762]

5682.   [bug]           Some changes to "zone-statistics" settings were not
                        properly processed by "rndc reconfig". This has been
                        fixed. [GL #2820]

5681.   [func]          Relax the checks in the dns_zone_cdscheck() function to
                        allow CDS and CDNSKEY records in the zone that do not
                        match an existing DNSKEY record, as long as the
                        algorithm matches. This allows a clean rollover from one
                        provider to another in a multi-signer DNSSEC
                        configuration. [GL #2710]

5679.   [func]          Thread affinity is no longer set. [GL #2822]

5678.   [bug]           The "check DS" code failed to release all resources upon
                        named shutdown when a refresh was in progress. This has
                        been fixed. [GL #2811]

5672.   [bug]           Authentication of rndc messages could fail if a
                        "controls" statement was configured with multiple key
                        algorithms for the same listener. This has been fixed.
                        [GL #2756]

diffstat:

 net/bind916/Makefile |   4 ++--
 net/bind916/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (36 lines):

diff -r 4add7fbdc526 -r b4489428296b net/bind916/Makefile
--- a/net/bind916/Makefile      Thu Aug 19 02:59:39 2021 +0000
+++ b/net/bind916/Makefile      Thu Aug 19 03:33:49 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.23 2021/08/02 18:45:35 jklos Exp $
+# $NetBSD: Makefile,v 1.24 2021/08/19 03:33:49 taca Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.16.19
+BIND_VERSION=  9.16.20
 
 BUILD_DEFS+=   BIND_DIR VARBASE
 
diff -r 4add7fbdc526 -r b4489428296b net/bind916/distinfo
--- a/net/bind916/distinfo      Thu Aug 19 02:59:39 2021 +0000
+++ b/net/bind916/distinfo      Thu Aug 19 03:33:49 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.19 2021/07/22 13:30:24 he Exp $
+$NetBSD: distinfo,v 1.20 2021/08/19 03:33:49 taca Exp $
 
-SHA1 (bind-9.16.19.tar.xz) = c10ee1a30dc340acaa8cefb3925b3d315c82909b
-RMD160 (bind-9.16.19.tar.xz) = b4f9ad228db8658aa2e9aa2fadde218df3913f50
-SHA512 (bind-9.16.19.tar.xz) = 47a0867a34c73dd939f6e24ab63e1a9cc7ba3e4d42987dbf1be424afe320734587b09b26c3b3371861fe79e3ddc08a81a019bba0cadecf76e20f717103578dca
-Size (bind-9.16.19.tar.xz) = 5039240 bytes
+SHA1 (bind-9.16.20.tar.xz) = 771bbb31ab0bfcf3f50effa0af4df6014853ac86
+RMD160 (bind-9.16.20.tar.xz) = d8104c704a599b9d3bd4247bfe22ea0f8f60e559
+SHA512 (bind-9.16.20.tar.xz) = bd4ffcc2589ca8f1ac228576ec11e86f317d5a78d7964a0a7ae70b2fa38831d5bd65c2e8c35d8190502de7139f85d8b080b3b8ee968811a8df78e5761781525d
+Size (bind-9.16.20.tar.xz) = 5042196 bytes
 SHA1 (patch-bin_dig_dighost.c) = b1073911d80ecd519af98b6678968296ff8c0c98
 SHA1 (patch-bin_dig_include_dig_dig.h) = 10166f5bb98b208c7b10d63eb31e8253f704acc8
 SHA1 (patch-bin_named_Makefile.in) = f1367da6a226ba44d0ee13acf00b8abeb5b1b7eb