bind: Update ot 9.20.16

Message ID 20251121164001.3523889-1-matthias.fischer@ipfire.org
State Accepted
Commit 4a2999cc9969b0e087f5e1e8dc90663ea70e7757
Headers
Series bind: Update ot 9.20.16 |

Commit Message

Matthias Fischer 21 Nov 2025, 4:39 p.m. UTC
For details see:

https://downloads.isc.org/isc/bind9/9.20.16/doc/arm/html/notes.html#notes-for-bind-9-20-16

"Notes for BIND 9.20.16
Bug Fixes

    Skip unsupported algorithms when looking for a signing key.

    A mix of supported and unsupported DNSSEC algorithms in the same zone
    could cause validation failures. Unsupported algorithms are now ignored
    when looking for signing keys. [GL #5622]

    Fix dnssec-keygen key collision checking for KEY RRtype keys.

    The dnssec-keygen utility program failed to detect possible KEY ID
    collisions with existing keys generated using the non-default -T KEY
    option (e.g., for SIG(0)). This has been fixed. [GL #5506]

    dnssec-verify now uses exit code 1 when failing due to illegal options.

    Previously, dnssec-verify exited with code 0 if the options could not
    be parsed. This has been fixed. [GL #5574]

    Prevent assertion failures of dig when a server is specified before the -b option.

    Previously, dig could exit with an assertion failure when a server was
    specified before the dig -b option. This has been fixed. [GL #5609]

    Skip buffer allocations if not logging.

    Previously, we allocated a 2KB buffer for IXFR change logging,
    regardless of the log level.

    This results in a 28% speedup in some scenarios."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 config/rootfiles/common/bind | 10 +++++-----
 lfs/bind                     |  4 ++--
 2 files changed, 7 insertions(+), 7 deletions(-)
  

Patch

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index eff7149ca..90ce93c01 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -241,18 +241,18 @@  usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.15.so
+usr/lib/libdns-9.20.16.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.15.so
+usr/lib/libisc-9.20.16.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.15.so
+usr/lib/libisccc-9.20.16.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.15.so
+usr/lib/libisccfg-9.20.16.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.15.so
+usr/lib/libns-9.20.16.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index e5f8de750..fc86eb54a 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@ 
 
 include Config
 
-VER        = 9.20.15
+VER        = 9.20.16
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f272fc5e7a107b28cb71b55d2e87cfb2b215612c38289483044445f6c5ae57b0eb7003a368386122fb1fed551ac7be2e4e9bb34c2f8908e379e1aaf4e761c394
+$(DL_FILE)_BLAKE2 = 1a083efbd7a95df8c9c05966681be577cb119f1a75292cbf65a31cdf0fc7677a70834be4f8599984635b9ea09a909c1453b489e920e5f27502ab2b496aa278b0
 
 install : $(TARGET)