--- - branch: MAIN date: Thu Nov 21 05:38:21 UTC 2019 files: - new: '1.17' old: '1.16' path: pkgsrc/net/bind911/Makefile pathrev: pkgsrc/net/bind911/Makefile@1.17 type: modified - new: '1.13' old: '1.12' path: pkgsrc/net/bind911/distinfo pathrev: pkgsrc/net/bind911/distinfo@1.13 type: modified id: 20191121T053821Z.d5702f2a2796f85f526e88e10c3b0b13505fff0a log: "net/bind911: update to 9.11.13\n\nUpdate bind911 to 9.11.3. It includes fix for CVS-2019-6477.\n\n\t--- 9.11.13 released ---\n\n5315.\t[bug]\t\tApply the inital RRSIG expiration spread fixed\n\t\t\tto all dynamically created records in the zone\n\t\t\tincluding NSEC3. Also fix the signature clusters\n\t\t\twhen the server has been offline for prolonged\n\t\t\tperiod of times. [GL #1256]\n\n5314.\t[func]\t\tAdded a new statistics variable \"tcp-highwater\"\n\t\t\tthat reports the maximum number of simultaneous TCP\n\t\t\tclients BIND has handled while running. [GL #1206]\n\n5313.\t[bug]\t\tThe default GeoIP2 database location did not match\n\t\t\tthe ARM. 'named -V' now reports the default\n\t\t\tlocation. [GL #1301]\n\n5310.\t[bug]\t\tTCP failures were affecting EDNS statistics. [GL #1059]\n\n5309.\t[bug]\t\t\"geoip-use-ecs yes;\" was not working for GeoIP2.\n\t\t\t[GL #1275]\n\n5308.\t[bug]\t\tDon't log DNS_R_UNCHANGED from sync_secure_journal()\n\t\t\tat ERROR level in receive_secure_serial(). [GL #1288]\n\n5307.\t[bug]\t\tFix hang when named-compilezone output is sent to pipe.\n\t\t\tThanks to Tony Finch. [GL !2481]\n\n5306.\t[security]\tSet a limit on the number of concurrently served\n\t\t\tpipelined TCP queries. (CVE-2019-6477) [GL #1264]\n\n5302.\t[bug]\t\tFix checking that \"dnstap-output\" is defined when\n\t\t\t\"dnstap\" is specified in a view. [GL #1281]\n\n5301.\t[bug]\t\tDetect partial prefixes / incomplete IPv4 address in\n\t\t\tacls. [GL #1143]\n" module: pkgsrc subject: 'CVS commit: pkgsrc/net/bind911' unixtime: '1574314701' user: taca