From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bjnpF01CYz3368 for ; Thu, 17 Jul 2025 22:36:21 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bjnp939VZz2y7D for ; Thu, 17 Jul 2025 22:36:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4bjnp84bmJzc7; Thu, 17 Jul 2025 22:36:16 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1752791776; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=pt/PjgMbWrQcT5AB0GaremVImq3Qxt9gvcJtPNLwMx0=; b=k29rsnKpErPq7uGORMef4otf2rAgcVeT9lT7lJomLl0uc4JhI4DapO1/QCdjL05KpCUuqA nLh2duy89KLtzjCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1752791776; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=pt/PjgMbWrQcT5AB0GaremVImq3Qxt9gvcJtPNLwMx0=; b=n942EJ9/nJAjv+BEXNTp/jm4tFD+SQSRE4fNDHLUf9+fSoiM9HKdXkTyDNKk6io0ZKDWLq TbgK/YnWpyURToYh3XB4DfKnccmKbt6HuCePkHutJAHlX7OZv9+JyYeWQ1pfePumSuo62W FiYPbZJLE/omnKC7TGX+bY2Sqm9iIdlrC09nJHv5bVrRFAygwqcyidRJPYWzzdoRE3LFbA I5PAOpfKU8M84BwH0fuvE/DYUOJoV2rN+JIuCxnXocLPzZARwjf2kbeC5fIiU/hOJP3v9K m7XEu4E29FvSa/GRHB08la4NwwLT52yyMTkOS9L1dmrmpJpxwQPoEPGWSJZXqg== From: Matthias Fischer To: development@lists.ipfire.org Cc: Matthias Fischer Subject: [PATCH] bind: Update ot 9.20.11 Date: Fri, 18 Jul 2025 00:35:56 +0200 Message-ID: <20250717223607.110698-1-matthias.fischer@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit For details see: https://downloads.isc.org/isc/bind9/9.20.11/doc/arm/html/notes.html#notes-for-bind-9-20-11 "Notes for BIND 9.20.11 Security Fixes Fix a possible assertion failure when stale-answer-client-timeout is set to 0. In specific circumstances the named resolver process could exit with an assertion failure when stale answers were enabled and the stale-answer-client-timeout configuration option was set to 0. This has been fixed. (CVE-2025-40777) [GL #5372] New Features Add support for the CO flag to dig. Add support for Compact Denial of Existence to dig. This includes showing the CO (Compact Answers OK) flag when displaying messages and adding an option to set the CO flag when making queries (dig +coflag). [GL #5319] Bug Fixes Correct the default interface-interval from 60s to 60m. When the interface-interval parser was changed from a uint32 parser to a duration parser, the default value stayed at plain number 60 which now means 60 seconds instead of 60 minutes. The documentation also incorrectly states that the value is in minutes. That has been fixed. [GL #5246] Fix a purge-keys bug when using multiple views of a zone. Previously, when a DNSSEC key was purged by one zone view, other zone views would return an error about missing key files. This has been fixed. [GL #5315] Use IPv6 queries in delv +ns. delv +ns invokes the same code to perform name resolution as named, but it neglected to set up an IPv6 dispatch object first. Consequently, it was behaving more like named -4. It now sets up dispatch objects for both address families, and performs resolver queries to both IPv4 and IPv6 addresses, except when one of the address families has been suppressed by using delv -4 or delv -6. [GL #5352]" Signed-off-by: Matthias Fischer --- config/rootfiles/common/bind | 10 +++++----- lfs/bind | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index f387a31a7..fb6220c47 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -240,18 +240,18 @@ usr/bin/nsupdate #usr/include/ns/types.h #usr/include/ns/update.h #usr/include/ns/xfrout.h -usr/lib/libdns-9.20.10.so +usr/lib/libdns-9.20.11.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libisc-9.20.10.so +usr/lib/libisc-9.20.11.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.20.10.so +usr/lib/libisccc-9.20.11.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.20.10.so +usr/lib/libisccfg-9.20.11.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.20.10.so +usr/lib/libns-9.20.11.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/lfs/bind b/lfs/bind index cdba7c307..fa4d73d04 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.20.10 +VER = 9.20.11 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e5a7824ff5b901be447a2f4f067aa8b3345eb8187ed86f3bf6bc623e2b6c812722667eefd1f915026dab078846011e222336a30c4da640c4e54aa828398b180d +$(DL_FILE)_BLAKE2 = 582e6de2699713e870dfc853f461c78b2d2b505bed0b571f853c94a731be9006783f45a4f897692289c1a9411725eac0b4de3818f1641221e62754316f410081 install : $(TARGET) -- 2.43.0