From patchwork Fri Apr 22 07:55:36 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 5527 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Kl6Cp0JWSz3xfS for ; Fri, 22 Apr 2022 07:55:50 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Kl6Ck5fdHz1y7; Fri, 22 Apr 2022 07:55:46 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Kl6Ck4B8Tz2yjv; Fri, 22 Apr 2022 07:55:46 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Kl6Ch30gDz2xHK for ; Fri, 22 Apr 2022 07:55:44 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Kl6Cf745nz17w for ; Fri, 22 Apr 2022 07:55:42 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1650614143; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=EJ3aMZFpFMZoD7axzPHUtXxUTLHYoNh0cTArTJ5X/PE=; b=NRZd5U08TAMStOnx0SMYdppCxCtW6lZW9mewG6f8bZYrAdzVM54IcWSbTwvt4vycdts3VS HRoLdYopUdltTCDg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1650614143; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=EJ3aMZFpFMZoD7axzPHUtXxUTLHYoNh0cTArTJ5X/PE=; b=Ixuu/ekSZygvPWy65ooNHZuF+YlJA9YCS1zDvn01qY0+2i5Y43jI/wJDup6II3ANWrwRpT aXqUc+wkVvh7YzXIpANsuq9NUdTKBHsTMVXwPQ7/0/YqszQJhdfmpnhFeecvvXKjfZGzn8 DeC02uWuzKnJ9n/a9Wl+TdX3VGBwt3bbsppobFyrSijhwthRl+aKTT9fbVkUvpM0jfrBFs vloqdMc3UFey4vJA6N6G60/Doj5B1ZQdy+0Mr7clFgAVV9PWxDYRWdQG/mfslBFsDKAZoO sUHwXolMNEeowu/7i9D003aVBOtmk86cmyin9jX45jcYsZU1opRdHH+Ji6anAA== From: Matthias Fischer To: development@lists.ipfire.org Subject: [PATCH] bind: Update to 9.16.28 Date: Fri, 22 Apr 2022 09:55:36 +0200 Message-Id: <20220422075536.21327-1-matthias.fischer@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" For details see: https://downloads.isc.org/isc/bind9/9.16.28/doc/arm/html/notes.html#notes-for-bind-9-16-28 "Notes for BIND 9.16.28 New Features Add a new configuration option reuseport to disable load balancing on sockets in situations where processing of Response Policy Zones (RPZ), Catalog Zones, or large zone transfers can cause service disruptions. See the BIND 9 ARM for more detail. [GL #3249] Bug Fixes Invalid dnssec-policy definitions, where the defined keys did not cover both KSK and ZSK roles for a given algorithm, were being accepted. These are now checked, and the dnssec-policy is rejected if both roles are not present for all algorithms in use. [GL #3142] Handling of TCP write timeouts has been improved to track the timeout for each TCP write separately, leading to a faster connection teardown in case the other party is not reading the data. [GL #3200]" Signed-off-by: Matthias Fischer Reviewed-by: Adolf Belka --- config/rootfiles/common/bind | 14 +++++++------- lfs/bind | 4 ++-- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index df3df4f47..0d41c90e5 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -274,24 +274,24 @@ usr/bin/nsupdate #usr/include/pk11/site.h #usr/include/pkcs11 #usr/include/pkcs11/pkcs11.h -usr/lib/libbind9-9.16.27.so +usr/lib/libbind9-9.16.28.so #usr/lib/libbind9.la #usr/lib/libbind9.so -usr/lib/libdns-9.16.27.so +usr/lib/libdns-9.16.28.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libirs-9.16.27.so +usr/lib/libirs-9.16.28.so #usr/lib/libirs.la #usr/lib/libirs.so -usr/lib/libisc-9.16.27.so +usr/lib/libisc-9.16.28.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.16.27.so +usr/lib/libisccc-9.16.28.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.16.27.so +usr/lib/libisccfg-9.16.28.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.16.27.so +usr/lib/libns-9.16.28.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/lfs/bind b/lfs/bind index c558cfa01..e3efc84a1 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.16.27 +VER = 9.16.28 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 37b49ce81aa5122493a4feb2bb7be53c5d46ff2ce28456aec31ce1332520a09c10bb2293c736bffe7badbc2bc3d156c05f83367678bd101e17b99ca3ff69bebf +$(DL_FILE)_BLAKE2 = 55932faa004c2021cd4c3384c14d4a58ca43d5a853602e271b58c9022256a5ec2eb1317168ac07c2b233b19407ddfb8c7f64a50d93169207cb3b4fe535a78afa install : $(TARGET)