From nobody Mon Feb 03 10:03:01 2025 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Ymhrk0WHNz5mqBV; Mon, 03 Feb 2025 10:03:02 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Ymhrj5shvz3TcC; Mon, 03 Feb 2025 10:03:01 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1738576981; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=RUbIhuNB8vT2qyWJd1SG/iRr+lNksG0M1sXpodmRehI=; b=NZJB02xk2f3Sdnk1gYWDm48UeAWI+v+hqozgLrXIy3Ezf/4pXwRVqkhBLeN+RcsRPaG6Xp hlMTU6bh6+6UfxglQ8yYrw15zA6NYmvkYhi5dOSRddiwyGrWSyWEAwsEkbgqSGoBfLryAu JnI5Q1lC1bitP9ZRXaUYZthhGcc0R8J/zbSuoyCn0fNZtZcy3W3wL8Az+Pzwuj422aqXc3 widmQXb+ZRRXV00wwJlCxUHoe+U45Tt/whxP2GKPoivxeDzUTsGn/X9AduePt7ozc6BV26 s4hwzkO9yXKxPnPtlUdc1yPtCppuyKclZbLzPV665FhMf2DS8xN16B0B9EuhoQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1738576981; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=RUbIhuNB8vT2qyWJd1SG/iRr+lNksG0M1sXpodmRehI=; b=X6lrUCZPHHCFyJsDX6pqn6/yDV7hKbq6iNnNGJckIEfNIEQEWuG1BhR5GU3eOODS2eQaVx V8llzc13sXtFY82FIUr/wQxKYlzoCYaD8ukf7rT3NHQyNTb05+jbckxHtvtCeWTKwACr3f XNDDrEgs6q5+OVJ+Xuuc210DNbyzRWhsDfpBYjjOr8uZ85GottPVcwnTrRZqwapXP0myhW H5OpBMNtha4/7nUEWEZett0q5HtHN3yf0NCJsm3jP+Pg7dqs+J5VDmPsQB+zfkXOmw0zsM SvPwt0qI89zU/w09aM0iDBPYYXkSa/ubIDMcL6dJuQ8PaT6Ej3voGdriwYCnAQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1738576981; a=rsa-sha256; cv=none; b=chLVmlF7ZrVOfSnW4WsntXReMf0zgaHdHvSR0ukk/riCHboSvgU0qDeyWEszhbKvpI6GjV Z9GlTWkvPU++E+8yTlJMqUF56NaenrTja2h9U6sHTUuMlm9AE7524YSBv5Fp+sDIJ/1l1u fuMuasv+5isNGEhSXEevVbB3ZN7+h7k8Pu0kEdCsjyRv1T3ZZiw/i0ew3sIR3Q4l3AguT2 P05zEiotjmuIlyLaKS4ra7Iig0ty31vAZLPRCgcNW70V3nd480TUSQ5paIHCx4jLR/9dIh TwHv7HhOL/4hQWudPZfAypHkczWwim5wQBaznI4ZQnBMDJq8ulPapzv6xWSwUw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Ymhrj5M9MzXWt; Mon, 03 Feb 2025 10:03:01 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 513A31uF037476; Mon, 3 Feb 2025 10:03:01 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 513A318l037473; Mon, 3 Feb 2025 10:03:01 GMT (envelope-from git) Date: Mon, 3 Feb 2025 10:03:01 GMT Message-Id: <202502031003.513A318l037473@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org From: Mathieu Arnold Subject: git: 069160055426 - 2025Q1 - dns/bind920: upgrade to 9.20.5 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mat X-Git-Repository: ports X-Git-Refname: refs/heads/2025Q1 X-Git-Reftype: branch X-Git-Commit: 0691600554262bb87d6830f47adbc8aaeb09a648 Auto-Submitted: auto-generated The branch 2025Q1 has been updated by mat: URL: https://cgit.FreeBSD.org/ports/commit/?id=0691600554262bb87d6830f47adbc8aaeb09a648 commit 0691600554262bb87d6830f47adbc8aaeb09a648 Author: Mathieu Arnold AuthorDate: 2025-02-03 09:57:04 +0000 Commit: Mathieu Arnold CommitDate: 2025-02-03 10:02:30 +0000 dns/bind920: upgrade to 9.20.5 Security: CVE-2024-11187, CVE-2024-12705 (cherry picked from commit 06938960fb5a6b84e681e2447e581f38fe5de1aa) --- dns/bind-tools/pkg-plist | 10 +++++----- dns/bind920/Makefile | 2 +- dns/bind920/distinfo | 6 +++--- dns/bind920/files/extrapatch-bind-min-override-ttl | 22 +++++++++++----------- dns/bind920/pkg-plist | 10 +++++----- 5 files changed, 25 insertions(+), 25 deletions(-) diff --git a/dns/bind-tools/pkg-plist b/dns/bind-tools/pkg-plist index 16f2e4dfa0b8..7ff047b36763 100644 --- a/dns/bind-tools/pkg-plist +++ b/dns/bind-tools/pkg-plist @@ -19,15 +19,15 @@ bin/nsec3hash bin/nslookup bin/nsupdate lib/bind-tools/libdns.so -lib/bind-tools/libdns-9.20.4.so +lib/bind-tools/libdns-9.20.5.so lib/bind-tools/libisc.so -lib/bind-tools/libisc-9.20.4.so +lib/bind-tools/libisc-9.20.5.so lib/bind-tools/libisccc.so -lib/bind-tools/libisccc-9.20.4.so +lib/bind-tools/libisccc-9.20.5.so lib/bind-tools/libisccfg.so -lib/bind-tools/libisccfg-9.20.4.so +lib/bind-tools/libisccfg-9.20.5.so lib/bind-tools/libns.so -lib/bind-tools/libns-9.20.4.so +lib/bind-tools/libns-9.20.5.so share/man/man1/arpaname.1.gz share/man/man1/delv.1.gz share/man/man1/dig.1.gz diff --git a/dns/bind920/Makefile b/dns/bind920/Makefile index ac02ff159561..f019d4d5fc7c 100644 --- a/dns/bind920/Makefile +++ b/dns/bind920/Makefile @@ -1,7 +1,7 @@ # pkg-help formatted with fmt 59 63 PORTNAME= bind -DISTVERSION= 9.20.4 +DISTVERSION= 9.20.5 .if defined(BIND_TOOLS_SLAVE) # dns/bind-tools here PORTREVISION= 0 diff --git a/dns/bind920/distinfo b/dns/bind920/distinfo index b4af99bbc427..79c5c1ae8e1f 100644 --- a/dns/bind920/distinfo +++ b/dns/bind920/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1734171467 -SHA256 (bind-9.20.4.tar.xz) = 3a8e1a05e00e3e9bc02bdffded7862faf7726ba76ba997f42ab487777bd8210b -SIZE (bind-9.20.4.tar.xz) = 5620536 +TIMESTAMP = 1738572773 +SHA256 (bind-9.20.5.tar.xz) = 19274fd739c023772b4212a0b6c201cf4364855fa7e6a7d3db49693f55db1ab8 +SIZE (bind-9.20.5.tar.xz) = 5634832 diff --git a/dns/bind920/files/extrapatch-bind-min-override-ttl b/dns/bind920/files/extrapatch-bind-min-override-ttl index 974afc93a9ad..f462723a2896 100644 --- a/dns/bind920/files/extrapatch-bind-min-override-ttl +++ b/dns/bind920/files/extrapatch-bind-min-override-ttl @@ -1,8 +1,8 @@ Add the override-cache-ttl feature. ---- bin/named/config.c.orig 2024-12-03 12:33:15 UTC +--- bin/named/config.c.orig 2025-01-20 13:20:45 UTC +++ bin/named/config.c -@@ -183,6 +183,7 @@ options {\n\ +@@ -184,6 +184,7 @@ options {\n\ notify-source *;\n\ notify-source-v6 *;\n\ nsec3-test-zone no;\n\ @@ -10,9 +10,9 @@ Add the override-cache-ttl feature. parental-source *;\n\ parental-source-v6 *;\n\ provide-ixfr true;\n\ ---- bin/named/server.c.orig 2024-12-03 12:33:15 UTC +--- bin/named/server.c.orig 2025-01-20 13:20:45 UTC +++ bin/named/server.c -@@ -4604,6 +4604,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl +@@ -4618,6 +4618,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl } obj = NULL; @@ -24,9 +24,9 @@ Add the override-cache-ttl feature. result = named_config_get(maps, "max-cache-ttl", &obj); INSIST(result == ISC_R_SUCCESS); view->maxcachettl = cfg_obj_asduration(obj); ---- doc/arm/reference.rst.orig 2024-12-03 12:33:15 UTC +--- doc/arm/reference.rst.orig 2025-01-20 13:20:45 UTC +++ doc/arm/reference.rst -@@ -4363,6 +4363,10 @@ Tuning +@@ -4360,6 +4360,10 @@ Tuning cannot exceed 7 days and is silently truncated to 7 days if set to a greater value. @@ -37,7 +37,7 @@ Add the override-cache-ttl feature. .. namedconf:statement:: max-cache-ttl :tags: server :short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers. ---- lib/dns/include/dns/view.h.orig 2024-12-03 12:33:15 UTC +--- lib/dns/include/dns/view.h.orig 2025-01-20 13:20:45 UTC +++ lib/dns/include/dns/view.h @@ -151,6 +151,7 @@ struct dns_view { bool requestnsid; @@ -47,9 +47,9 @@ Add the override-cache-ttl feature. dns_ttl_t maxncachettl; dns_ttl_t mincachettl; dns_ttl_t minncachettl; ---- lib/dns/resolver.c.orig 2024-12-03 12:33:15 UTC +--- lib/dns/resolver.c.orig 2025-01-20 13:20:45 UTC +++ lib/dns/resolver.c -@@ -5893,6 +5893,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes +@@ -5963,6 +5963,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes } /* @@ -62,9 +62,9 @@ Add the override-cache-ttl feature. * Enforce the configure maximum cache TTL. */ if (rdataset->ttl > res->view->maxcachettl) { ---- lib/isccfg/namedconf.c.orig 2024-12-03 12:33:16 UTC +--- lib/isccfg/namedconf.c.orig 2025-01-20 13:20:46 UTC +++ lib/isccfg/namedconf.c -@@ -2215,6 +2215,7 @@ static cfg_clausedef_t view_clauses[] = { +@@ -2220,6 +2220,7 @@ static cfg_clausedef_t view_clauses[] = { #endif /* ifdef HAVE_LMDB */ { "max-acache-size", NULL, CFG_CLAUSEFLAG_ANCIENT }, { "max-cache-size", &cfg_type_sizeorpercent, 0 }, diff --git a/dns/bind920/pkg-plist b/dns/bind920/pkg-plist index 5699193ee047..bf23f2e994dc 100644 --- a/dns/bind920/pkg-plist +++ b/dns/bind920/pkg-plist @@ -241,15 +241,15 @@ include/ns/update.h include/ns/xfrout.h lib/bind/filter-a.so lib/bind/filter-aaaa.so -lib/libdns-9.20.4.so +lib/libdns-9.20.5.so lib/libdns.so -lib/libisc-9.20.4.so +lib/libisc-9.20.5.so lib/libisc.so -lib/libisccc-9.20.4.so +lib/libisccc-9.20.5.so lib/libisccc.so -lib/libisccfg-9.20.4.so +lib/libisccfg-9.20.5.so lib/libisccfg.so -lib/libns-9.20.4.so +lib/libns-9.20.5.so lib/libns.so @comment share/man/man1/arpaname.1.gz @comment share/man/man1/delv.1.gz