[git.ipfire.org] IPFire 2.x development tree branch, next, updated. fbe50152d997049cdcdb71b38baf989c5a119a1a

[Michael Tremer <git@ipfire.org>]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 5383 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  fbe50152d997049cdcdb71b38baf989c5a119a1a (commit)
      from  cb010e23da05a5acd966265fd2daca9736db734b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit fbe50152d997049cdcdb71b38baf989c5a119a1a
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date:   Sat Sep 13 14:53:48 2025 +0200

    bind: Update ot 9.20.13
    
    For details see:
    
    https://downloads.isc.org/isc/bind9/9.20.13/doc/arm/html/notes.html#notes-for-bind-9-20-13
    
    "Notes for BIND 9.20.13
    New Features
    
        Add a new option manual-mode to dnssec-policy.
    
        When enabled, named will not modify DNSSEC keys or key states
        automatically. The proposed change will be logged and only after manual
        confirmation with rndc dnssec -step will the modification be made. [GL
        #4606]
    
        Add a new option servfail-until-ready to response-policy zones.
    
        By default, when named is started, it starts answering queries before
        all response policy zones are completely loaded and processed. This new
        option instructs named to respond with SERVFAIL until all the response
        policy zones are processed and ready. Note that if one or more response
        policy zones fail to load, named starts responding to queries according
        to those zones that did load.
    
        Note, that enabling this option has no effect when a DNS Response
        Policy Service (DNSRPS) interface is used. [GL #5222]
    
        Support for parsing HHIT and BRID records has been added.
    
        [GL #5444]
    
    Removed Features
    
        Deprecate the tkey-gssapi-credential statement.
    
        The tkey-gssapi-keytab statement allows GSS-TSIG to be set up in a
        simpler and more reliable way than using the tkey-gssapi-credential
        statement and setting environment variables (e.g. KRB5_KTNAME).
        Therefore, the tkey-gssapi-credential statement has been deprecated;
        tkey-gssapi-keytab should be used instead.
    
        For configurations currently using a combination of both
        tkey-gssapi-keytab and tkey-gssapi-credential, the latter should be
        dropped and the keytab pointed to by tkey-gssapi-keytab should now only
        contain the credential previously specified by tkey-gssapi-credential.
        [GL #4204]
    
        Obsolete the “tkey-domain” statement.
    
        Mark the tkey-domain statement as obsolete because it has not had any
        effect on server behavior since support for TKEY Mode 2
        (Diffie-Hellman) was removed (in BIND 9.20.0). [GL #4204]
    
    Bug Fixes
    
        Prevent spurious SERVFAILs for certain 0-TTL resource records.
    
        Under certain circumstances, BIND 9 can return SERVFAIL when updating
        existing entries in the cache with new NS, A, AAAA, or DS records that
        have a TTL of zero. [GL #5294]
    
        Fix unexpected termination if catalog-zones had undefined
        default-primaries.
    
        The issue manifested only if the server was reloaded or reconfigured
        twice. [GL #5494]"
    
    Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/common/bind | 10 +++++-----
 lfs/bind                     |  4 ++--
 2 files changed, 7 insertions(+), 7 deletions(-)

Difference in files:
diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index 538f4a6dd..db57a9d40 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -241,18 +241,18 @@ usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.12.so
+usr/lib/libdns-9.20.13.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.12.so
+usr/lib/libisc-9.20.13.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.12.so
+usr/lib/libisccc-9.20.13.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.12.so
+usr/lib/libisccfg-9.20.13.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.12.so
+usr/lib/libns-9.20.13.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index d62846f58..9befe9bfc 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 9.20.12
+VER        = 9.20.13
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f2135301ab04121c1ae82fc9283f0f03b0d11b634aaee49c072bb9a2a0f7e643a8f6c1f3890648e5d008a7d2c84953617b330241e3f856e33b56e64fb0312f0a
+$(DL_FILE)_BLAKE2 = c3738ebe468849293bec3d89499d7607b76fb636c7d21833dd56414fb569c1edfaa84d152ff9febfe0ebd5c65fa351423fbfbeaaee294d57949eb45631fd5623
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree