From nobody Wed Jan 25 16:36:52 2023 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4P28ch3J2Mz3bs6M; Wed, 25 Jan 2023 16:36:52 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4P28ch2nwKz4PwC; Wed, 25 Jan 2023 16:36:52 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1674664612; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1oKqCtCZiGM3/SI0yBwVkFoHpkTE7KTxNUfTI9A6HkY=; b=yJcn0MMNGZxVk6HlrZRU8R2cNwG2oseKp1kVIUVzw3ZneWtUZ3KySVN8euj1P8h6BkI48C PoBbkU3tSA9fqvqLCEdkFElw6X7k60mOamHvxCSp3YL7XYmK/n64XxMRQY026ZjK5904dI PxwZ/T8gOK68ZAVYPtGJPYyuuPWCCNiH9vB3QKtfhYyimVcnYLh90hP0dfTcPJjHRlf1sz 3iy/wCvTxIrFoPp1VT2L8oH2OJ5D6tZm8/S2e9Kshm8Cj3iAkzvogUKrWV7RW2DRaUDNml oeh6Pag+R5YNwh1GuELE63adjX5Za09khqkkWfzgg4KAAlcqPi3ANcGDD4sgBA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1674664612; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1oKqCtCZiGM3/SI0yBwVkFoHpkTE7KTxNUfTI9A6HkY=; b=HxT6dp1h4KEl7Uc+jGVSEHAAJ5KPCBnk3zRtWnmcjXj80QSJx7rgUG+XvdYPQVPCjfz1d9 hmSiZJl3ZcnCE2KDzbyA1HYsjRr4Cj0Qaq9ZJFZS4EwNvQmJueNLreBCOCKTq3tcRpP2ra W8MEeI6q6PFJtp0LeRu7TYzXlkkvmEKgoOHHbD2Foi+r9g+ginuC5uwTqsNjUN73cHrNlC Prgjgpz34Fup1PJ3sfS/FKja7TA86URO5/KYKFfpp/ZZb8fU1jeDXpBTFqi3PAvzbjh73/ IxKSDDzwpnYg0aKtswt0tO0IfPYeqSBYJpmH3LvZEDOveTdywSHNy6OsZejEKQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1674664612; a=rsa-sha256; cv=none; b=WNIaT+K1PvRixzWzStG0elbMJOMnJXdAzbHwPVi1kxyAQdua82426m0RoSP+Ldgjmvx2lo myjsrqnUgXGe6mzKaCHblB9S+kPAzF2H1cf0JWRET7bg9gCKfM2dCF/bFAj0456oFkz1LQ Q+67/FyNKDmev7Qu4oFSs0Se9ecbREc6/mVR8WgdWU40bwdqqYJJFnhIRCmn1SOFwf7hDn 7lRK9hbyOHtzX7qZiRp7hcBGiezzZgq+qUCqw3v6YsVLx8VlkY/X5ZCKPuTpqD3ycJgXH+ ka3mzTbqXWd91z0iBkr3cm3Q4/vGs5alrB3hOHJ8cXYgdgK/IS/qO0UI4mLBXQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4P28ch1Xm2zwXK; Wed, 25 Jan 2023 16:36:52 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 30PGaqss074067; Wed, 25 Jan 2023 16:36:52 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 30PGaqMj074066; Wed, 25 Jan 2023 16:36:52 GMT (envelope-from git) Date: Wed, 25 Jan 2023 16:36:52 GMT Message-Id: <202301251636.30PGaqMj074066@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Mathieu Arnold Subject: git: 06065425a534 - main - dns/bind916: upgrade to 9.16.37 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mat X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 06065425a534e8388cb1b8390b4e8b884bacdbad Auto-Submitted: auto-generated X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by mat: URL: https://cgit.FreeBSD.org/ports/commit/?id=06065425a534e8388cb1b8390b4e8b884bacdbad commit 06065425a534e8388cb1b8390b4e8b884bacdbad Author: Mathieu Arnold AuthorDate: 2023-01-25 16:26:29 +0000 Commit: Mathieu Arnold CommitDate: 2023-01-25 16:32:10 +0000 dns/bind916: upgrade to 9.16.37 Security: CVE-2022-3094 CVE-2022-3736 CVE-2022-3924 Changes: https://downloads.isc.org/isc/bind9/9.16.37/doc/arm/html/notes.html#notes-for-bind-9-16-37 --- dns/bind916/Makefile | 2 +- dns/bind916/distinfo | 6 +++--- dns/bind916/files/extrapatch-bind-min-override-ttl | 16 ++++++++-------- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/dns/bind916/Makefile b/dns/bind916/Makefile index 7720db68a6bf..ff27843fc5be 100644 --- a/dns/bind916/Makefile +++ b/dns/bind916/Makefile @@ -25,7 +25,7 @@ RUN_DEPENDS= bind-tools>0:dns/bind-tools USES= compiler:c11 cpe libedit pkgconfig ssl tar:xz # ISC releases things like 9.8.0-P1, which our versioning doesn't like -ISCVERSION= 9.16.36 +ISCVERSION= 9.16.37 CPE_VENDOR= isc CPE_VERSION= ${ISCVERSION:C/-.*//} diff --git a/dns/bind916/distinfo b/dns/bind916/distinfo index f55ad1acf8be..ecb2a7dcd61e 100644 --- a/dns/bind916/distinfo +++ b/dns/bind916/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1671811369 -SHA256 (bind-9.16.36.tar.xz) = 508c94e8c9884f6075fa820a51efae04a1758dbdd157b01695ea6cd07049c221 -SIZE (bind-9.16.36.tar.xz) = 5105696 +TIMESTAMP = 1674661960 +SHA256 (bind-9.16.37.tar.xz) = 0e4661d522a2fe1f111c1f0685e7d6993d657f81dae24e7a75dbd8db3ef2e2ab +SIZE (bind-9.16.37.tar.xz) = 5109440 diff --git a/dns/bind916/files/extrapatch-bind-min-override-ttl b/dns/bind916/files/extrapatch-bind-min-override-ttl index 9b4f3614413c..8bdbde740cfd 100644 --- a/dns/bind916/files/extrapatch-bind-min-override-ttl +++ b/dns/bind916/files/extrapatch-bind-min-override-ttl @@ -1,8 +1,8 @@ Add the override-cache-ttl feature. ---- bin/named/config.c.orig 2022-12-12 14:43:23 UTC +--- bin/named/config.c.orig 2023-01-12 22:45:02 UTC +++ bin/named/config.c -@@ -176,6 +176,7 @@ options {\n\ +@@ -177,6 +177,7 @@ options {\n\ notify-source *;\n\ notify-source-v6 *;\n\ nsec3-test-zone no;\n\ @@ -10,9 +10,9 @@ Add the override-cache-ttl feature. parental-source *;\n\ parental-source-v6 *;\n\ provide-ixfr true;\n\ ---- bin/named/server.c.orig 2022-12-12 14:43:23 UTC +--- bin/named/server.c.orig 2023-01-12 22:45:02 UTC +++ bin/named/server.c -@@ -4437,6 +4437,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl +@@ -4444,6 +4444,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl } obj = NULL; @@ -24,7 +24,7 @@ Add the override-cache-ttl feature. result = named_config_get(maps, "max-cache-ttl", &obj); INSIST(result == ISC_R_SUCCESS); view->maxcachettl = cfg_obj_asduration(obj); ---- lib/dns/include/dns/view.h.orig 2022-12-12 14:43:23 UTC +--- lib/dns/include/dns/view.h.orig 2023-01-12 22:45:02 UTC +++ lib/dns/include/dns/view.h @@ -154,6 +154,7 @@ struct dns_view { bool requestnsid; @@ -34,7 +34,7 @@ Add the override-cache-ttl feature. dns_ttl_t maxncachettl; dns_ttl_t mincachettl; dns_ttl_t minncachettl; ---- lib/dns/resolver.c.orig 2022-12-12 14:43:23 UTC +--- lib/dns/resolver.c.orig 2023-01-12 22:45:02 UTC +++ lib/dns/resolver.c @@ -6494,6 +6494,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes } @@ -49,9 +49,9 @@ Add the override-cache-ttl feature. * Enforce the configure maximum cache TTL. */ if (rdataset->ttl > res->view->maxcachettl) { ---- lib/isccfg/namedconf.c.orig 2022-12-12 14:43:23 UTC +--- lib/isccfg/namedconf.c.orig 2023-01-12 22:45:02 UTC +++ lib/isccfg/namedconf.c -@@ -2053,6 +2053,7 @@ static cfg_clausedef_t view_clauses[] = { +@@ -2054,6 +2054,7 @@ static cfg_clausedef_t view_clauses[] = { #endif /* ifdef HAVE_LMDB */ { "max-acache-size", &cfg_type_sizenodefault, CFG_CLAUSEFLAG_OBSOLETE }, { "max-cache-size", &cfg_type_sizeorpercent, 0 },