public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
From: Matthias Fischer <matthias.fischer@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH] bind: Update to 9.20.6
Date: Fri, 21 Feb 2025 00:37:04 +0100	[thread overview]
Message-ID: <20250220233706.1200-1-matthias.fischer@ipfire.org> (raw)

[-- Attachment #1: Type: text/plain, Size: 4494 bytes --]

For details see:
https://downloads.isc.org/isc/bind9/9.20.5/doc/arm/html/notes.html#notes-for-bind-9-20-6

"Notes for BIND 9.20.6
New Features

    Adds support for EDE code 1 and 2.

    Support was added for EDE codes 1 and 2, which might occur during
    DNSSEC validation in the case of an unsupported RRSIG algorithm or
    DNSKEY digest. [GL #2715]

    Add an rndc command to toggle jemalloc profiling.

    The new command is rndc memprof; the memory profiling status is also
    reported inside rndc status. The status shows whether named can toggle
    memory profiling, and whether the server is built with jemalloc. [GL
    #4759]

    Add support for multiple extended DNS errors.

    The Extended DNS Error (EDE) mechanism may raise errors during a DNS
    resolution. named is now able to add up to three EDE codes in a DNS
    response. If there are duplicate error codes, only the first one is
    part of the DNS response. [GL #5085]

    Print the expiration time of stale records.

    BIND now prints the expiration time of any stale RRsets in the cache
    dump.

Bug Fixes

    Recently expired records could be returned with a timestamp in future.

    Under rare circumstances, an RRSet that expired at the time of the
    query could be returned with a TTL in the future. This has been fixed.

    As a side effect, the expiration time of expired RRSets is no longer
    returned in a cache dump. [GL #5094]

    YAML string not terminated in negative response in delv.
    [GL #5098]

    Fix a bug in dnssec-signzone related to keys being offline.

    When dnssec-signzone was called on an already-signed zone and the
    private key file was unavailable, a signature that needed to be
    refreshed was dropped without being able to generate a replacement.
    This has been fixed. [GL #5126]

    Apply the memory limit only to ADB database items.

    Under heavy load, a resolver could exhaust the memory available for
    storing the information in the Address Database (ADB), effectively
    discarding previously stored information in the ADB. The memory used to
    retrieve and provide information from the ADB is no longer subject to
    the same memory limits that are applied to the Address Database. [GL
    #5127]

    Avoid unnecessary locking in the zone/cache database.

    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves zone and
    cache database performance for any heavily contended database nodes.
    [GL #5130]

    Fix reporting of Extended DNS Error 22 (No Reachable Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]"

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
---
 config/rootfiles/common/bind | 10 +++++-----
 lfs/bind                     |  4 ++--
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index c0ef2a3f2..2eee6aa5b 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -239,18 +239,18 @@ usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.5.so
+usr/lib/libdns-9.20.6.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.5.so
+usr/lib/libisc-9.20.6.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.5.so
+usr/lib/libisccc-9.20.6.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.5.so
+usr/lib/libisccfg-9.20.6.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.5.so
+usr/lib/libns-9.20.6.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index cad711ed2..c23fb1a9d 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 9.20.5
+VER        = 9.20.6
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = bf470c9c881b865baeaf469f94601bb6884d9989c0eee634b6f8dd88d4bafa07b138ec56dfe6e333d8ea729b483b6f41272992c6e036217fb9df1a9d23d0db29
+$(DL_FILE)_BLAKE2 = 2ee3770517a811f64899993ead37d919e746960a72e754546d6cfcab4e57b034392254eda7341efd1b7fdd976225b951c42cf52ed462a7a136829dbdad43312d
 
 install : $(TARGET)
 
-- 
2.43.0


                 reply	other threads:[~2025-02-20 23:37 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20250220233706.1200-1-matthias.fischer@ipfire.org \
    --to=matthias.fischer@ipfire.org \
    --cc=development@lists.ipfire.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox