diff options
| author | taca <taca@pkgsrc.org> | 2021-08-19 03:33:49 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2021-08-19 03:33:49 +0000 |
| commit | dc0a9b9531b82d7aab3d201105b474944e1e5b15 (patch) | |
| tree | 9f6efccdc5dd3eb8629144e5c42dc17095f7cfb0 /net | |
| parent | 9f5109ce40d17691bd547cceb0e506032c6ec8e0 (diff) | |
| download | pkgsrc-dc0a9b9531b82d7aab3d201105b474944e1e5b15.tar.gz | |
net/bind916: update to 9.16.20
This update contains security fix: CVE-2021-25218.
--- 9.16.20 released ---
5689. [security] An assertion failure occurred when named attempted to
send a UDP packet that exceeded the MTU size, if
Response Rate Limiting (RRL) was enabled.
(CVE-2021-25218) [GL #2856]
5688. [bug] Zones using KASP and inline-signed zones failed to apply
changes from the unsigned zone to the signed zone under
certain circumstances. This has been fixed. [GL #2735]
5687. [bug] "rndc reload <zonename>" could trigger a redundant
reload for an inline-signed zone whose zone file was not
modified since the last "rndc reload". This has been
fixed. [GL #2855]
5686. [func] The number of internal data structures allocated for
each zone was reduced. [GL #2829]
5685. [bug] named failed to check the opcode of responses when
performing zone refreshes, stub zone updates, and UPDATE
forwarding. This has been fixed. [GL #2762]
5682. [bug] Some changes to "zone-statistics" settings were not
properly processed by "rndc reconfig". This has been
fixed. [GL #2820]
5681. [func] Relax the checks in the dns_zone_cdscheck() function to
allow CDS and CDNSKEY records in the zone that do not
match an existing DNSKEY record, as long as the
algorithm matches. This allows a clean rollover from one
provider to another in a multi-signer DNSSEC
configuration. [GL #2710]
5679. [func] Thread affinity is no longer set. [GL #2822]
5678. [bug] The "check DS" code failed to release all resources upon
named shutdown when a refresh was in progress. This has
been fixed. [GL #2811]
5672. [bug] Authentication of rndc messages could fail if a
"controls" statement was configured with multiple key
algorithms for the same listener. This has been fixed.
[GL #2756]
Diffstat (limited to 'net')
| -rw-r--r-- | net/bind916/Makefile | 4 | ||||
| -rw-r--r-- | net/bind916/distinfo | 10 |
2 files changed, 7 insertions, 7 deletions
diff --git a/net/bind916/Makefile b/net/bind916/Makefile index 5b3ccf9ada2..4fd0b0ae989 100644 --- a/net/bind916/Makefile +++ b/net/bind916/Makefile @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.23 2021/08/02 18:45:35 jklos Exp $ +# $NetBSD: Makefile,v 1.24 2021/08/19 03:33:49 taca Exp $ DISTNAME= bind-${BIND_VERSION} PKGNAME= ${DISTNAME:S/-P/pl/} @@ -15,7 +15,7 @@ CONFLICTS+= host-[0-9]* MAKE_JOBS_SAFE= no -BIND_VERSION= 9.16.19 +BIND_VERSION= 9.16.20 BUILD_DEFS+= BIND_DIR VARBASE diff --git a/net/bind916/distinfo b/net/bind916/distinfo index bd552dfc25e..5cff4793fad 100644 --- a/net/bind916/distinfo +++ b/net/bind916/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.19 2021/07/22 13:30:24 he Exp $ +$NetBSD: distinfo,v 1.20 2021/08/19 03:33:49 taca Exp $ -SHA1 (bind-9.16.19.tar.xz) = c10ee1a30dc340acaa8cefb3925b3d315c82909b -RMD160 (bind-9.16.19.tar.xz) = b4f9ad228db8658aa2e9aa2fadde218df3913f50 -SHA512 (bind-9.16.19.tar.xz) = 47a0867a34c73dd939f6e24ab63e1a9cc7ba3e4d42987dbf1be424afe320734587b09b26c3b3371861fe79e3ddc08a81a019bba0cadecf76e20f717103578dca -Size (bind-9.16.19.tar.xz) = 5039240 bytes +SHA1 (bind-9.16.20.tar.xz) = 771bbb31ab0bfcf3f50effa0af4df6014853ac86 +RMD160 (bind-9.16.20.tar.xz) = d8104c704a599b9d3bd4247bfe22ea0f8f60e559 +SHA512 (bind-9.16.20.tar.xz) = bd4ffcc2589ca8f1ac228576ec11e86f317d5a78d7964a0a7ae70b2fa38831d5bd65c2e8c35d8190502de7139f85d8b080b3b8ee968811a8df78e5761781525d +Size (bind-9.16.20.tar.xz) = 5042196 bytes SHA1 (patch-bin_dig_dighost.c) = b1073911d80ecd519af98b6678968296ff8c0c98 SHA1 (patch-bin_dig_include_dig_dig.h) = 10166f5bb98b208c7b10d63eb31e8253f704acc8 SHA1 (patch-bin_named_Makefile.in) = f1367da6a226ba44d0ee13acf00b8abeb5b1b7eb |