Pullup ticket #6208 - requested by taca

net/bind911: security fix

Revisions pulled up:
- net/bind911/Makefile                                          1.23-1.24
- net/bind911/PLIST                                             1.3
- net/bind911/distinfo                                          1.17-1.18

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Apr 18 06:12:28 UTC 2020

   Modified Files:
   	pkgsrc/net/bind911: Makefile PLIST distinfo

   Log Message:
   net/bind911: update to 9.11.18

   Update bind911 to 9.11.18 (BIND 9.11.18).

   	--- 9.11.18 released ---

   5380.	[contrib]	Fix building MySQL DLZ modules against MySQL 8
   			libraries. [GL #1678]

   5379.	[doc]		Clean up serve-stale related options that leaked into
   			the BIND 9.11 release. [GL !3265]

   5378.	[bug]		Receiving invalid DNS data was triggering an assertion
   			failure in nslookup. [GL #1652]

   5377.	[feature]	Detect atomic operations support on ppc64le. Thanks to
   			Petr Men=A8=EDk. [GL !3295]

   5376.	[bug]		Fix ineffective DNS rebinding protection when BIND is
   			configured as a forwarding DNS server. Thanks to Tobias
   			Klein. [GL #1574]

   5368.	[bug]		Named failed to restart if 'rndc addzone' names
   			contained special characters (e.g. '/'). [GL #1655]

   	--- 9.11.17 released ---

   5358.	[bug]		Inline master zones whose master files were touched
   			but otherwise unchanged and were subsequently reloaded
   			may have stopped re-signing. [GL !3135]

   5357.	[bug]		Newly added RRSIG records with expiry times before
   			the previous earliest expiry times might not be
   			re-signed in time.  The was a side effect of 5315.
   			[GL !3137]

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 19 10:21:25 UTC 2020

   Modified Files:
   	pkgsrc/net/bind911: Makefile distinfo

   Log Message:
   net/bind911: update to 9.11.19

   Update bind911 to 9.11.19 (BIND 9.11.19).

   	--- 9.11.19 released ---

   5404.	[bug]		'named-checkconf -z' could incorrectly indicate
   			success if errors were found in one view but not in a
   			subsequent one. [GL #1807]

   5398.	[bug]		Named could fail to restart if a zone with a double
   			quote (") in its name was added with 'rndc addzone'.
   			[GL #1695]

   5395.	[security]	Further limit the number of queries that can be
   			triggered from a request.  Root and TLD servers
   			are no longer exempt from max-recursion-queries.
   			Fetches for missing name server address records
   			are limited to 4 for any domain. (CVE-2020-8616)
   			[GL #1388]

   5394.	[cleanup]	Named formerly attempted to change the effective UID an=
   d
   			GID in named_os_openfile(), which could trigger a
   			spurious log message if they were already set to the
   			desired values. This has been fixed. [GL #1042]
   			[GL #1090]

   5390.	[security]	Replaying a TSIG BADTIME response as a request could
   			trigger an assertion failure. (CVE-2020-8617)
   			[GL #1703]

   5387.	[func]		Warn about AXFR streams with inconsistent message IDs.
   			[GL #1674]

3 files changed, 9 insertions, 10 deletions

diff --git a/net/bind911/Makefile b/net/bind911/Makefile
index de91c01bbe8..c64fae2bd60 100644
--- a/net/bind911/Makefile
+++ b/net/bind911/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.22 2020/02/20 16:38:16 taca Exp $
+# $NetBSD: Makefile,v 1.22.2.1 2020/05/20 19:35:46 bsiegert Exp $
 
 DISTNAME=	bind-${BIND_VERSION}
 PKGNAME=	${DISTNAME:S/-P/pl/}
@@ -14,7 +14,7 @@ CONFLICTS+=	host-[0-9]*
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.11.16
+BIND_VERSION=	9.11.19
 
 .include "../../mk/bsd.prefs.mk"
 
diff --git a/net/bind911/PLIST b/net/bind911/PLIST
index 591519da93f..7d7d0e67e56 100644
--- a/net/bind911/PLIST
+++ b/net/bind911/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2019/09/18 14:32:10 taca Exp $
+@comment $NetBSD: PLIST,v 1.2.4.1 2020/05/20 19:35:46 bsiegert Exp $
 bin/arpaname
 bin/bind9-config
 bin/delv
@@ -208,6 +208,7 @@ include/isc/sockaddr.h
 include/isc/socket.h
 include/isc/stat.h
 include/isc/stats.h
+include/isc/stdatomic.h
 include/isc/stdio.h
 include/isc/stdlib.h
 include/isc/stdtime.h
@@ -268,8 +269,6 @@ include/pk11/site.h
 include/pkcs11/cryptoki.h
 include/pkcs11/eddsa.h
 include/pkcs11/pkcs11.h
-include/pkcs11/pkcs11f.h
-include/pkcs11/pkcs11t.h
 lib/libbind9.la
 lib/libdns.la
 lib/libirs.la
diff --git a/net/bind911/distinfo b/net/bind911/distinfo
index 10cb2310faa..397b64d1ebf 100644
--- a/net/bind911/distinfo
+++ b/net/bind911/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.16 2020/02/20 16:38:16 taca Exp $
+$NetBSD: distinfo,v 1.16.2.1 2020/05/20 19:35:46 bsiegert Exp $
 
-SHA1 (bind-9.11.16.tar.gz) = 0317a5e610bdb4ececb08acd8ec347a206c5aa6a
-RMD160 (bind-9.11.16.tar.gz) = 90d657d41995db409d093a510012127897e4ec4e
-SHA512 (bind-9.11.16.tar.gz) = c5832d19a4c09a8aa332d0cdad20861a85fe7fc66d79f8aba4c1a522480a7456dc2aeb70edd496ca1ed12a2271eafeb34103929627dc29f2af6fbf65e41803e4
-Size (bind-9.11.16.tar.gz) = 8206345 bytes
+SHA1 (bind-9.11.19.tar.gz) = f62726f2379eb1f2921c64c20f6668ce3db190c2
+RMD160 (bind-9.11.19.tar.gz) = 1c3fb7df3a88e2e13053f606b6a2d6a3efd73185
+SHA512 (bind-9.11.19.tar.gz) = 4378afcd8c72a3f1b597e180a21674e1bbfc44b8378831ab3256395bdc46dce74da31aaa855fbae29d4c93e360dad233e3c8e3e69326779ddfecddbc96511ea2
+Size (bind-9.11.19.tar.gz) = 8230483 bytes
 SHA1 (patch-bin_named_server.c) = 0294d74eb3039049c4672a3de6eb371407bb382d
 SHA1 (patch-bin_pkcs11_pkcs11-keygen.c) = ca2671a5e3216a08a212cf893e070b01705ef9ee
 SHA1 (patch-bin_tests_system_metadata_tests.sh) = d01a492d0b7738760bdbff714248e279a78fef28