Re: [PATCH] bind: Update to 9.16.32

["Peter Müller" <peter.mueller@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 3660 bytes --]

Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org>

> For details see:
> https://downloads.isc.org/isc/bind9/9.16.32/doc/arm/html/notes.html#notes-for-bind-9-16-32
> 
> Excerpt from changelog:
> 
> "5934.	[func]		Improve fetches-per-zone fetch limit logging to log
> 			the final allowed and spilled values of the fetch
> 			counters before the counter object gets destroyed.
> 			[GL #3461]
> 
> 5933.	[port]		Automatically disable RSASHA1 and NSEC3RSASHA1 in
> 			named on Fedorda 33, Oracle Linux 9 and RHEL9 when
> 			they are disabled by the security policy. [GL #3469]
> 
> 5932.	[bug]		Fix rndc dumpdb -expired and always include expired
> 			RRsets, not just for RBTDB_VIRTUAL time window.
> 			[GL #3462]
> 
> 5929.	[bug]		The "max-zone-ttl" option in "dnssec-policy" was
> 			not fully effective; it was used for timing key
> 			rollovers but did not actually place an upper limit
> 			on TTLs when loading a zone. This has been
> 			corrected, and the documentation has been clarified
> 			to indicate that the old "max-zone-ttl" zone option
> 			is now ignored when "dnssec-policy" is in use.
> 			[GL #2918]

Interesting to see what kind of bugs Bind has from times to times... :-)

> 
> 5924.	[func]		When it's necessary to use AXFR to respond to an
> 			IXFR request, a message explaining the reason
> 			is now logged at level info. [GL #2683]
> 
> 5923.	[bug]		Fix inheritance for dnssec-policy when checking for
> 			inline-signing. [GL #3438]
> 
> 5922.	[bug]		Forwarding of UPDATE message could fail with the
> 			introduction of netmgr. This has been fixed. [GL #3389]"
> 
> Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
> ---
>  config/rootfiles/common/bind | 14 +++++++-------
>  lfs/bind                     |  4 ++--
>  2 files changed, 9 insertions(+), 9 deletions(-)
> 
> diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
> index bdb0fb7e4..5aea1853b 100644
> --- a/config/rootfiles/common/bind
> +++ b/config/rootfiles/common/bind
> @@ -274,24 +274,24 @@ usr/bin/nsupdate
>  #usr/include/pk11/site.h
>  #usr/include/pkcs11
>  #usr/include/pkcs11/pkcs11.h
> -usr/lib/libbind9-9.16.31.so
> +usr/lib/libbind9-9.16.32.so
>  #usr/lib/libbind9.la
>  #usr/lib/libbind9.so
> -usr/lib/libdns-9.16.31.so
> +usr/lib/libdns-9.16.32.so
>  #usr/lib/libdns.la
>  #usr/lib/libdns.so
> -usr/lib/libirs-9.16.31.so
> +usr/lib/libirs-9.16.32.so
>  #usr/lib/libirs.la
>  #usr/lib/libirs.so
> -usr/lib/libisc-9.16.31.so
> +usr/lib/libisc-9.16.32.so
>  #usr/lib/libisc.la
>  #usr/lib/libisc.so
> -usr/lib/libisccc-9.16.31.so
> +usr/lib/libisccc-9.16.32.so
>  #usr/lib/libisccc.la
>  #usr/lib/libisccc.so
> -usr/lib/libisccfg-9.16.31.so
> +usr/lib/libisccfg-9.16.32.so
>  #usr/lib/libisccfg.la
>  #usr/lib/libisccfg.so
> -usr/lib/libns-9.16.31.so
> +usr/lib/libns-9.16.32.so
>  #usr/lib/libns.la
>  #usr/lib/libns.so
> diff --git a/lfs/bind b/lfs/bind
> index 6b2fe87fe..bb5c26e1e 100644
> --- a/lfs/bind
> +++ b/lfs/bind
> @@ -25,7 +25,7 @@
>  
>  include Config
>  
> -VER        = 9.16.31
> +VER        = 9.16.32
>  
>  THISAPP    = bind-$(VER)
>  DL_FILE    = $(THISAPP).tar.xz
> @@ -43,7 +43,7 @@ objects = $(DL_FILE)
>  
>  $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>  
> -$(DL_FILE)_BLAKE2 = 75c9038c00fe289161a15a8e4fdadaef5a6a7f3ca03068ec24e82aa9f30ac82d0ded9cf73df83219058cd81b198ea8f561211a323e31b41407294f6932dc61d3
> +$(DL_FILE)_BLAKE2 = df6f2c878138015da580dfaf0e16b5a97b11ead9f99c1425a09da8484954196ea3dafb828ac3ab386200ce2b180646c7eb1e0e62a84c153162270a4a1e19a5fc
>  
>  install : $(TARGET)
>