From patchwork Fri Nov 18 19:19:26 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 6134 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4NDRRs1bKzz3wgd for ; Fri, 18 Nov 2022 19:19:37 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4NDRRq2XLqzyZ; Fri, 18 Nov 2022 19:19:35 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4NDRRq0rkFz2y9s; Fri, 18 Nov 2022 19:19:35 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4NDRRn6JbRz2xZK for ; Fri, 18 Nov 2022 19:19:33 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4NDRRm62yczDD for ; Fri, 18 Nov 2022 19:19:32 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1668799172; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=MYdqFOR4/yTvUyDq0jDWefc8tRTLDvhTJJmblNBLBNo=; b=X86/NyUp5tbPybksuMmzDnpBhyogZKQDOBLFqfrwWyxTPkAbRbl2IsZirZDwh5HcOfx0Ad M8gVglmNdPkc1sCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1668799172; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=MYdqFOR4/yTvUyDq0jDWefc8tRTLDvhTJJmblNBLBNo=; b=pxmO6ntSaUG7YQ8vefB9Y2UEqfz/ru3oce/TreuQl5bjN4YdCxBNihUnh9xzpQdkbNPOZD LZdwAnFpdtRaOgccFw4+htMR7LPJj6QxgqlS4q1sswq3Dtcy5KRQoZ9joHyQRvJMRwFuV2 kJMOFqAc+0/HuOn5ILNanuCfHZ7vJ2jzfpQlmtMVa7f3dbskCD2EopiZaXpqGQUdjJL8rF N8owijyGW2cJhzsTNWBch4LSEitrIn4U6avFWwVHTPJuLAp+qKbXDL6lgEn2o1JeQiCaOq VocI35iUxuHiP2TA4+QXDTH9rABHpVsiJYP42jxE5H3IBg4HKjsvP/6RZhBejQ== From: Matthias Fischer To: development@lists.ipfire.org Subject: [PATCH] bind: Update to 9.16.35 Date: Fri, 18 Nov 2022 20:19:26 +0100 Message-Id: <20221118191926.2244-1-matthias.fischer@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" For details for 9.16.35 and 9.16.34 (we skipped the last) see: https://downloads.isc.org/isc/bind9/9.16.35/doc/arm/html/notes.html#notes-for-bind-9-16-35 "Notes for BIND 9.16.35 Bug Fixes A crash was fixed that happened when a dnssec-policy zone that used NSEC3 was reconfigured to enable inline-signing. [GL #3591] In certain resolution scenarios, quotas could be erroneously reached for servers, including any configured forwarders, resulting in SERVFAIL answers being sent to clients. This has been fixed. [GL #3598] rpz-ip rules in response-policy zones could be ineffective in some cases if a query had the CD (Checking Disabled) bit set to 1. This has been fixed. [GL #3247] Previously, if Internet connectivity issues were experienced during the initial startup of named, a BIND resolver with dnssec-validation set to auto could enter into a state where it would not recover without stopping named, manually deleting the managed-keys.bind and managed-keys.bind.jnl files, and starting named again. This has been fixed. [GL #2895] The statistics counter representing the current number of clients awaiting recursive resolution results (RecursClients) could overflow in certain resolution scenarios. This has been fixed. [GL #3584] Previously, BIND failed to start on Solaris-based systems with hundreds of CPUs. This has been fixed. [GL #3563] When a DNS resource record’s TTL value was equal to the resolver’s configured prefetch “eligibility” value, the record was erroneously not treated as eligible for prefetching. This has been fixed. [GL #3603] ... Notes for BIND 9.16.34 Bug Fixes Changing just the TSIG key names for primaries in catalog zones’ member zones was not effective. This has been fixed. [GL #3557]" Signed-off-by: Matthias Fischer Reviewed-by: Peter Müller Reviewed-by: Michael Tremer --- config/rootfiles/common/bind | 14 +++++++------- lfs/bind | 4 ++-- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 879f8c832..6a83df8ce 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -271,24 +271,24 @@ usr/bin/nsupdate #usr/include/pk11/site.h #usr/include/pkcs11 #usr/include/pkcs11/pkcs11.h -usr/lib/libbind9-9.16.33.so +usr/lib/libbind9-9.16.35.so #usr/lib/libbind9.la #usr/lib/libbind9.so -usr/lib/libdns-9.16.33.so +usr/lib/libdns-9.16.35.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libirs-9.16.33.so +usr/lib/libirs-9.16.35.so #usr/lib/libirs.la #usr/lib/libirs.so -usr/lib/libisc-9.16.33.so +usr/lib/libisc-9.16.35.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.16.33.so +usr/lib/libisccc-9.16.35.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.16.33.so +usr/lib/libisccfg-9.16.35.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.16.33.so +usr/lib/libns-9.16.35.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/lfs/bind b/lfs/bind index aeff480a2..16fc9ba97 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.16.33 +VER = 9.16.35 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4246b61ce91af3d494ace4b8065b4c0043b2cfaf28c6de326691a969837e7d1cfbc0dac6b1e1a5182fc32af68048abcfa1202d00022951f3caa13afb03ebeb69 +$(DL_FILE)_BLAKE2 = c3d23e939c882e9bebe2aa83d91ab40bfe8c4b9882890acdb0908d4bfe16f00a98b87ba9155da68e75936be5d057ec025efa80541bf86a08a5bb85e4b4bd10e2 install : $(TARGET)