bind: Update to 9.16.32

Message ID 20220827070200.1201-1-matthias.fischer@ipfire.org
State Accepted
Commit ceff14d956a92c0eecb8d0902af3a9d536dcd733
Headers
Series bind: Update to 9.16.32 |

Commit Message

Matthias Fischer Aug. 27, 2022, 7:02 a.m. UTC
  For details see:
https://downloads.isc.org/isc/bind9/9.16.32/doc/arm/html/notes.html#notes-for-bind-9-16-32

Excerpt from changelog:

"5934.	[func]		Improve fetches-per-zone fetch limit logging to log
			the final allowed and spilled values of the fetch
			counters before the counter object gets destroyed.
			[GL #3461]

5933.	[port]		Automatically disable RSASHA1 and NSEC3RSASHA1 in
			named on Fedorda 33, Oracle Linux 9 and RHEL9 when
			they are disabled by the security policy. [GL #3469]

5932.	[bug]		Fix rndc dumpdb -expired and always include expired
			RRsets, not just for RBTDB_VIRTUAL time window.
			[GL #3462]

5929.	[bug]		The "max-zone-ttl" option in "dnssec-policy" was
			not fully effective; it was used for timing key
			rollovers but did not actually place an upper limit
			on TTLs when loading a zone. This has been
			corrected, and the documentation has been clarified
			to indicate that the old "max-zone-ttl" zone option
			is now ignored when "dnssec-policy" is in use.
			[GL #2918]

5924.	[func]		When it's necessary to use AXFR to respond to an
			IXFR request, a message explaining the reason
			is now logged at level info. [GL #2683]

5923.	[bug]		Fix inheritance for dnssec-policy when checking for
			inline-signing. [GL #3438]

5922.	[bug]		Forwarding of UPDATE message could fail with the
			introduction of netmgr. This has been fixed. [GL #3389]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 config/rootfiles/common/bind | 14 +++++++-------
 lfs/bind                     |  4 ++--
 2 files changed, 9 insertions(+), 9 deletions(-)
  

Comments

Peter Müller Sept. 11, 2022, 1:59 p.m. UTC | #1
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>

> For details see:
> https://downloads.isc.org/isc/bind9/9.16.32/doc/arm/html/notes.html#notes-for-bind-9-16-32
> 
> Excerpt from changelog:
> 
> "5934.	[func]		Improve fetches-per-zone fetch limit logging to log
> 			the final allowed and spilled values of the fetch
> 			counters before the counter object gets destroyed.
> 			[GL #3461]
> 
> 5933.	[port]		Automatically disable RSASHA1 and NSEC3RSASHA1 in
> 			named on Fedorda 33, Oracle Linux 9 and RHEL9 when
> 			they are disabled by the security policy. [GL #3469]
> 
> 5932.	[bug]		Fix rndc dumpdb -expired and always include expired
> 			RRsets, not just for RBTDB_VIRTUAL time window.
> 			[GL #3462]
> 
> 5929.	[bug]		The "max-zone-ttl" option in "dnssec-policy" was
> 			not fully effective; it was used for timing key
> 			rollovers but did not actually place an upper limit
> 			on TTLs when loading a zone. This has been
> 			corrected, and the documentation has been clarified
> 			to indicate that the old "max-zone-ttl" zone option
> 			is now ignored when "dnssec-policy" is in use.
> 			[GL #2918]
> 
> 5924.	[func]		When it's necessary to use AXFR to respond to an
> 			IXFR request, a message explaining the reason
> 			is now logged at level info. [GL #2683]
> 
> 5923.	[bug]		Fix inheritance for dnssec-policy when checking for
> 			inline-signing. [GL #3438]
> 
> 5922.	[bug]		Forwarding of UPDATE message could fail with the
> 			introduction of netmgr. This has been fixed. [GL #3389]"
> 
> Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
> ---
>  config/rootfiles/common/bind | 14 +++++++-------
>  lfs/bind                     |  4 ++--
>  2 files changed, 9 insertions(+), 9 deletions(-)
> 
> diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
> index bdb0fb7e4..5aea1853b 100644
> --- a/config/rootfiles/common/bind
> +++ b/config/rootfiles/common/bind
> @@ -274,24 +274,24 @@ usr/bin/nsupdate
>  #usr/include/pk11/site.h
>  #usr/include/pkcs11
>  #usr/include/pkcs11/pkcs11.h
> -usr/lib/libbind9-9.16.31.so
> +usr/lib/libbind9-9.16.32.so
>  #usr/lib/libbind9.la
>  #usr/lib/libbind9.so
> -usr/lib/libdns-9.16.31.so
> +usr/lib/libdns-9.16.32.so
>  #usr/lib/libdns.la
>  #usr/lib/libdns.so
> -usr/lib/libirs-9.16.31.so
> +usr/lib/libirs-9.16.32.so
>  #usr/lib/libirs.la
>  #usr/lib/libirs.so
> -usr/lib/libisc-9.16.31.so
> +usr/lib/libisc-9.16.32.so
>  #usr/lib/libisc.la
>  #usr/lib/libisc.so
> -usr/lib/libisccc-9.16.31.so
> +usr/lib/libisccc-9.16.32.so
>  #usr/lib/libisccc.la
>  #usr/lib/libisccc.so
> -usr/lib/libisccfg-9.16.31.so
> +usr/lib/libisccfg-9.16.32.so
>  #usr/lib/libisccfg.la
>  #usr/lib/libisccfg.so
> -usr/lib/libns-9.16.31.so
> +usr/lib/libns-9.16.32.so
>  #usr/lib/libns.la
>  #usr/lib/libns.so
> diff --git a/lfs/bind b/lfs/bind
> index 6b2fe87fe..bb5c26e1e 100644
> --- a/lfs/bind
> +++ b/lfs/bind
> @@ -25,7 +25,7 @@
>  
>  include Config
>  
> -VER        = 9.16.31
> +VER        = 9.16.32
>  
>  THISAPP    = bind-$(VER)
>  DL_FILE    = $(THISAPP).tar.xz
> @@ -43,7 +43,7 @@ objects = $(DL_FILE)
>  
>  $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>  
> -$(DL_FILE)_BLAKE2 = 75c9038c00fe289161a15a8e4fdadaef5a6a7f3ca03068ec24e82aa9f30ac82d0ded9cf73df83219058cd81b198ea8f561211a323e31b41407294f6932dc61d3
> +$(DL_FILE)_BLAKE2 = df6f2c878138015da580dfaf0e16b5a97b11ead9f99c1425a09da8484954196ea3dafb828ac3ab386200ce2b180646c7eb1e0e62a84c153162270a4a1e19a5fc
>  
>  install : $(TARGET)
>
  

Patch

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index bdb0fb7e4..5aea1853b 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -274,24 +274,24 @@  usr/bin/nsupdate
 #usr/include/pk11/site.h
 #usr/include/pkcs11
 #usr/include/pkcs11/pkcs11.h
-usr/lib/libbind9-9.16.31.so
+usr/lib/libbind9-9.16.32.so
 #usr/lib/libbind9.la
 #usr/lib/libbind9.so
-usr/lib/libdns-9.16.31.so
+usr/lib/libdns-9.16.32.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libirs-9.16.31.so
+usr/lib/libirs-9.16.32.so
 #usr/lib/libirs.la
 #usr/lib/libirs.so
-usr/lib/libisc-9.16.31.so
+usr/lib/libisc-9.16.32.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.16.31.so
+usr/lib/libisccc-9.16.32.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.16.31.so
+usr/lib/libisccfg-9.16.32.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.16.31.so
+usr/lib/libns-9.16.32.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index 6b2fe87fe..bb5c26e1e 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@ 
 
 include Config
 
-VER        = 9.16.31
+VER        = 9.16.32
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 75c9038c00fe289161a15a8e4fdadaef5a6a7f3ca03068ec24e82aa9f30ac82d0ded9cf73df83219058cd81b198ea8f561211a323e31b41407294f6932dc61d3
+$(DL_FILE)_BLAKE2 = df6f2c878138015da580dfaf0e16b5a97b11ead9f99c1425a09da8484954196ea3dafb828ac3ab386200ce2b180646c7eb1e0e62a84c153162270a4a1e19a5fc
 
 install : $(TARGET)