[pkgsrc/pkgsrc-2020Q1]: pkgsrc/net/bind914 Pullup ticket #6209 - requested by...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/8e6fc1a6d35e
branches:  pkgsrc-2020Q1
changeset: 432293:8e6fc1a6d35e
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Wed May 20 19:42:25 2020 +0000

description:
Pullup ticket #6209 - requested by taca
net/bind914: security fix

Revisions pulled up:
- net/bind914/Makefile                                          1.21
- net/bind914/distinfo                                          1.15

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue May 19 10:23:04 UTC 2020

   Modified Files:
        pkgsrc/net/bind914: Makefile distinfo

   Log Message:
   net/bind914: update to 9.14.12

   Update bind914 to 9.14.12 (BIND 9.14.12).

   Note from release announce:

   BIND 9.14.12 is the final planned release in the now End-of-Life (EOL)
   9.14 branch.

        --- 9.14.12 released ---

   5395.        [security]      Further limit the number of queries that can be
                        triggered from a request.  Root and TLD servers
                        are no longer exempt from max-recursion-queries.
                        Fetches for missing name server address records
                        are limited to 4 for any domain. (CVE-2020-8616)
                        [GL #1388]

   5390.        [security]      Replaying a TSIG BADTIME response as a request could
                        trigger an assertion failure. (CVE-2020-8617)
                        [GL #1703]

   5376.        [bug]           Fix ineffective DNS rebinding protection when BIND is
                        configured as a forwarding DNS server. Thanks to Tobias
                        Klein. [GL #1574]

   5358.        [bug]           Inline master zones whose master files were touched
                        but otherwise unchanged and were subsequently reloaded
                        may have stopped re-signing. [GL !3135]

   5357.        [bug]           Newly added RRSIG records with expiry times before
                        the previous earliest expiry times might not be
                        re-signed in time.  This was a side effect of 5315.
                        [GL !3137]

diffstat:

 net/bind914/Makefile |   4 ++--
 net/bind914/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (36 lines):

diff -r c1a0928005c5 -r 8e6fc1a6d35e net/bind914/Makefile
--- a/net/bind914/Makefile      Wed May 20 19:35:46 2020 +0000
+++ b/net/bind914/Makefile      Wed May 20 19:42:25 2020 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.20 2020/03/26 13:54:35 nia Exp $
+# $NetBSD: Makefile,v 1.20.2.1 2020/05/20 19:42:25 bsiegert Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.14.11
+BIND_VERSION=  9.14.12
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r c1a0928005c5 -r 8e6fc1a6d35e net/bind914/distinfo
--- a/net/bind914/distinfo      Wed May 20 19:35:46 2020 +0000
+++ b/net/bind914/distinfo      Wed May 20 19:42:25 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.14 2020/02/20 16:37:06 taca Exp $
+$NetBSD: distinfo,v 1.14.2.1 2020/05/20 19:42:25 bsiegert Exp $
 
-SHA1 (bind-9.14.11.tar.gz) = f65a3eb9183cb235ba313101d8f7db648cce6d07
-RMD160 (bind-9.14.11.tar.gz) = 9d7f376f63d5b39a1ce76414291160254321c20b
-SHA512 (bind-9.14.11.tar.gz) = ec34254d6fe5d72c704ba743d1af5582f2ea6b79363f132013ea9ebebed72c74a3ea9ae8a7978ca2b28f908ef848b9c2961cec85254b7d88680c269233b40524
-Size (bind-9.14.11.tar.gz) = 6310200 bytes
+SHA1 (bind-9.14.12.tar.gz) = 20fd9f09f251dcd367b6221a954ef68ac501de51
+RMD160 (bind-9.14.12.tar.gz) = 82ac9214698eee669f658e3d833727b431b8579a
+SHA512 (bind-9.14.12.tar.gz) = f4e6c50cbe8fdb44cdd8e30b4560b6fe2fccd0fd5bde527a897a66e85065265da0d0aceb95af42d5568dea95d59e68574e5a486bbb7e6c5d0af275538c353ddf
+Size (bind-9.14.12.tar.gz) = 6318913 bytes
 SHA1 (patch-bin_named_Makefile.in) = 741e3708c670baaec45446f6bb364ada448ae330
 SHA1 (patch-bin_named_main.c) = 51c8ab464a009575b6513c7ed4b79f89446eb7d0
 SHA1 (patch-bin_named_pfilter.c) = b54f872c883c8fbc2d9c04df65c185dc057cc36b