bind: Update to 9.20.6

Message ID 20250220233706.1200-1-matthias.fischer@ipfire.org
State New
Headers
Series bind: Update to 9.20.6 |

Commit Message

Matthias Fischer Feb. 20, 2025, 11:37 p.m. UTC
  For details see:
https://downloads.isc.org/isc/bind9/9.20.5/doc/arm/html/notes.html#notes-for-bind-9-20-6

"Notes for BIND 9.20.6
New Features

    Adds support for EDE code 1 and 2.

    Support was added for EDE codes 1 and 2, which might occur during
    DNSSEC validation in the case of an unsupported RRSIG algorithm or
    DNSKEY digest. [GL #2715]

    Add an rndc command to toggle jemalloc profiling.

    The new command is rndc memprof; the memory profiling status is also
    reported inside rndc status. The status shows whether named can toggle
    memory profiling, and whether the server is built with jemalloc. [GL
    #4759]

    Add support for multiple extended DNS errors.

    The Extended DNS Error (EDE) mechanism may raise errors during a DNS
    resolution. named is now able to add up to three EDE codes in a DNS
    response. If there are duplicate error codes, only the first one is
    part of the DNS response. [GL #5085]

    Print the expiration time of stale records.

    BIND now prints the expiration time of any stale RRsets in the cache
    dump.

Bug Fixes

    Recently expired records could be returned with a timestamp in future.

    Under rare circumstances, an RRSet that expired at the time of the
    query could be returned with a TTL in the future. This has been fixed.

    As a side effect, the expiration time of expired RRSets is no longer
    returned in a cache dump. [GL #5094]

    YAML string not terminated in negative response in delv.
    [GL #5098]

    Fix a bug in dnssec-signzone related to keys being offline.

    When dnssec-signzone was called on an already-signed zone and the
    private key file was unavailable, a signature that needed to be
    refreshed was dropped without being able to generate a replacement.
    This has been fixed. [GL #5126]

    Apply the memory limit only to ADB database items.

    Under heavy load, a resolver could exhaust the memory available for
    storing the information in the Address Database (ADB), effectively
    discarding previously stored information in the ADB. The memory used to
    retrieve and provide information from the ADB is no longer subject to
    the same memory limits that are applied to the Address Database. [GL
    #5127]

    Avoid unnecessary locking in the zone/cache database.

    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves zone and
    cache database performance for any heavily contended database nodes.
    [GL #5130]

    Fix reporting of Extended DNS Error 22 (No Reachable Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 config/rootfiles/common/bind | 10 +++++-----
 lfs/bind                     |  4 ++--
 2 files changed, 7 insertions(+), 7 deletions(-)
  

Patch

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index c0ef2a3f2..2eee6aa5b 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -239,18 +239,18 @@  usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.5.so
+usr/lib/libdns-9.20.6.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.5.so
+usr/lib/libisc-9.20.6.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.5.so
+usr/lib/libisccc-9.20.6.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.5.so
+usr/lib/libisccfg-9.20.6.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.5.so
+usr/lib/libns-9.20.6.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index cad711ed2..c23fb1a9d 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@ 
 
 include Config
 
-VER        = 9.20.5
+VER        = 9.20.6
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = bf470c9c881b865baeaf469f94601bb6884d9989c0eee634b6f8dd88d4bafa07b138ec56dfe6e333d8ea729b483b6f41272992c6e036217fb9df1a9d23d0db29
+$(DL_FILE)_BLAKE2 = 2ee3770517a811f64899993ead37d919e746960a72e754546d6cfcab4e57b034392254eda7341efd1b7fdd976225b951c42cf52ed462a7a136829dbdad43312d
 
 install : $(TARGET)