bind: Update to 9.16.28

Message ID 20220422075536.21327-1-matthias.fischer@ipfire.org
State Accepted
Commit ffa5629d06f3ee08ba49ecf6ef6c298cc98d91c4
Headers
Series bind: Update to 9.16.28 |

Commit Message

Matthias Fischer April 22, 2022, 7:55 a.m. UTC
  For details see:
https://downloads.isc.org/isc/bind9/9.16.28/doc/arm/html/notes.html#notes-for-bind-9-16-28

"Notes for BIND 9.16.28
New Features

    Add a new configuration option reuseport to disable load balancing
    on sockets in situations where processing of Response Policy Zones
    (RPZ), Catalog Zones, or large zone transfers can cause service
    disruptions. See the BIND 9 ARM for more detail. [GL #3249]

Bug Fixes

    Invalid dnssec-policy definitions, where the defined keys did not
    cover both KSK and ZSK roles for a given algorithm, were being
    accepted. These are now checked, and the dnssec-policy is rejected
    if both roles are not present for all algorithms in use. [GL #3142]

    Handling of TCP write timeouts has been improved to track the
    timeout for each TCP write separately, leading to a faster
    connection teardown in case the other party is not reading the data.
    [GL #3200]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 config/rootfiles/common/bind | 14 +++++++-------
 lfs/bind                     |  4 ++--
 2 files changed, 9 insertions(+), 9 deletions(-)
  

Comments

Adolf Belka April 22, 2022, 9:34 p.m. UTC | #1
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>

On 22/04/2022 09:55, Matthias Fischer wrote:
> For details see:
> https://downloads.isc.org/isc/bind9/9.16.28/doc/arm/html/notes.html#notes-for-bind-9-16-28
>
> "Notes for BIND 9.16.28Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
> New Features
>
>      Add a new configuration option reuseport to disable load balancing
>      on sockets in situations where processing of Response Policy Zones
>      (RPZ), Catalog Zones, or large zone transfers can cause service
>      disruptions. See the BIND 9 ARM for more detail. [GL #3249]
>
> Bug Fixes
>
>      Invalid dnssec-policy definitions, where the defined keys did not
>      cover both KSK and ZSK roles for a given algorithm, were being
>      accepted. These are now checked, and the dnssec-policy is rejected
>      if both roles are not present for all algorithms in use. [GL #3142]
>
>      Handling of TCP write timeouts has been improved to track the
>      timeout for each TCP write separately, leading to a faster
>      connection teardown in case the other party is not reading the data.
>      [GL #3200]"
>
> Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
> ---
>   config/rootfiles/common/bind | 14 +++++++-------
>   lfs/bind                     |  4 ++--
>   2 files changed, 9 insertions(+), 9 deletions(-)
>
> diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
> index df3df4f47..0d41c90e5 100644
> --- a/config/rootfiles/common/bind
> +++ b/config/rootfiles/common/bind
> @@ -274,24 +274,24 @@ usr/bin/nsupdate
>   #usr/include/pk11/site.h
>   #usr/include/pkcs11
>   #usr/include/pkcs11/pkcs11.h
> -usr/lib/libbind9-9.16.27.so
> +usr/lib/libbind9-9.16.28.so
>   #usr/lib/libbind9.la
>   #usr/lib/libbind9.so
> -usr/lib/libdns-9.16.27.so
> +usr/lib/libdns-9.16.28.so
>   #usr/lib/libdns.la
>   #usr/lib/libdns.so
> -usr/lib/libirs-9.16.27.so
> +usr/lib/libirs-9.16.28.so
>   #usr/lib/libirs.la
>   #usr/lib/libirs.so
> -usr/lib/libisc-9.16.27.so
> +usr/lib/libisc-9.16.28.so
>   #usr/lib/libisc.la
>   #usr/lib/libisc.so
> -usr/lib/libisccc-9.16.27.so
> +usr/lib/libisccc-9.16.28.so
>   #usr/lib/libisccc.la
>   #usr/lib/libisccc.so
> -usr/lib/libisccfg-9.16.27.so
> +usr/lib/libisccfg-9.16.28.so
>   #usr/lib/libisccfg.la
>   #usr/lib/libisccfg.so
> -usr/lib/libns-9.16.27.so
> +usr/lib/libns-9.16.28.so
>   #usr/lib/libns.la
>   #usr/lib/libns.so
> diff --git a/lfs/bind b/lfs/bind
> index c558cfa01..e3efc84a1 100644
> --- a/lfs/bind
> +++ b/lfs/bind
> @@ -25,7 +25,7 @@
>   
>   include Config
>   
> -VER        = 9.16.27
> +VER        = 9.16.28
>   
>   THISAPP    = bind-$(VER)
>   DL_FILE    = $(THISAPP).tar.xz
> @@ -43,7 +43,7 @@ objects = $(DL_FILE)
>   
>   $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>   
> -$(DL_FILE)_BLAKE2 = 37b49ce81aa5122493a4feb2bb7be53c5d46ff2ce28456aec31ce1332520a09c10bb2293c736bffe7badbc2bc3d156c05f83367678bd101e17b99ca3ff69bebf
> +$(DL_FILE)_BLAKE2 = 55932faa004c2021cd4c3384c14d4a58ca43d5a853602e271b58c9022256a5ec2eb1317168ac07c2b233b19407ddfb8c7f64a50d93169207cb3b4fe535a78afa
>   
>   install : $(TARGET)
>
  

Patch

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index df3df4f47..0d41c90e5 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -274,24 +274,24 @@  usr/bin/nsupdate
 #usr/include/pk11/site.h
 #usr/include/pkcs11
 #usr/include/pkcs11/pkcs11.h
-usr/lib/libbind9-9.16.27.so
+usr/lib/libbind9-9.16.28.so
 #usr/lib/libbind9.la
 #usr/lib/libbind9.so
-usr/lib/libdns-9.16.27.so
+usr/lib/libdns-9.16.28.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libirs-9.16.27.so
+usr/lib/libirs-9.16.28.so
 #usr/lib/libirs.la
 #usr/lib/libirs.so
-usr/lib/libisc-9.16.27.so
+usr/lib/libisc-9.16.28.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.16.27.so
+usr/lib/libisccc-9.16.28.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.16.27.so
+usr/lib/libisccfg-9.16.28.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.16.27.so
+usr/lib/libns-9.16.28.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index c558cfa01..e3efc84a1 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@ 
 
 include Config
 
-VER        = 9.16.27
+VER        = 9.16.28
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 37b49ce81aa5122493a4feb2bb7be53c5d46ff2ce28456aec31ce1332520a09c10bb2293c736bffe7badbc2bc3d156c05f83367678bd101e17b99ca3ff69bebf
+$(DL_FILE)_BLAKE2 = 55932faa004c2021cd4c3384c14d4a58ca43d5a853602e271b58c9022256a5ec2eb1317168ac07c2b233b19407ddfb8c7f64a50d93169207cb3b4fe535a78afa
 
 install : $(TARGET)