Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id AB1B184D38 for ; Wed, 20 Sep 2023 13:37:17 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id r24Z5L298ZH2 for ; Wed, 20 Sep 2023 13:37:17 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 09CC384D27 for ; Wed, 20 Sep 2023 13:37:17 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 0750EFBDB; Wed, 20 Sep 2023 13:37:17 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1695217037277460" MIME-Version: 1.0 Date: Wed, 20 Sep 2023 13:37:17 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/net/bind918 To: pkgsrc-changes@NetBSD.org Approved: commit_and_comment Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20230920133717.0750EFBDB@cvs.NetBSD.org> This is a multi-part message in MIME format. --_----------=_1695217037277460 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: taca Date: Wed Sep 20 13:37:16 UTC 2023 Modified Files: pkgsrc/net/bind918: Makefile distinfo Log Message: net/bind918: update to 9.18.19 9.18.19 (2023-09-20) 6246. [security] Fix use-after-free error in TLS DNS code when sending data. (CVE-2023-4236) [GL #4242] 6245. [security] Limit the amount of recursion that can be performed by isccc_cc_fromwire. (CVE-2023-3341) [GL #4152] 6244. [bug] Adjust log levels on malformed messages to NOTICE when transferring in a zone. [GL #4290] 6241. [bug] Take into account the possibility of partial TLS writes in TLS DNS code. That helps to prevent DNS messages corruption on long DNS over TLS streams. [GL #4255] 6240. [bug] Use dedicated per-worker thread jemalloc memory arenas for send buffers allocation to reduce memory consumption and avoid lock contention. [GL #4038] 6239. [func] Deprecate the 'dnssec-must-be-secure' option. [GL #3700] 6237. [bug] Address memory leaks due to not clearing OpenSSL error stack. [GL #4159] 6235. [doc] Clarify BIND 9 time formats. [GL #4266] 6234. [bug] Restore stale-refresh-time value after flushing the cache. [GL #4278] 6232. [bug] Following the introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs update rules, removal of nonexistent PTR and SRV records via UPDATE could fail. [GL #4280] 6231. [func] Make nsupdate honor -v for SOA requests if the server is specified. [GL #1181] 6230. [bug] Prevent an unnecessary query restart if a synthesized CNAME target points to the CNAME owner. [GL #3835] 6227. [bug] Check the statistics-channel HTTP Content-length to prevent negative or overflowing values from causing a crash. [GL #4125] 6224. [bug] Check the If-Modified-Since value length to prevent out-of-bounds write. [GL #4124] To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 pkgsrc/net/bind918/Makefile cvs rdiff -u -r1.11 -r1.12 pkgsrc/net/bind918/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1695217037277460 Content-Disposition: inline Content-Length: 1779 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/net/bind918/Makefile diff -u pkgsrc/net/bind918/Makefile:1.18 pkgsrc/net/bind918/Makefile:1.19 --- pkgsrc/net/bind918/Makefile:1.18 Tue Sep 19 16:19:27 2023 +++ pkgsrc/net/bind918/Makefile Wed Sep 20 13:37:16 2023 @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.18 2023/09/19 16:19:27 he Exp $ +# $NetBSD: Makefile,v 1.19 2023/09/20 13:37:16 taca Exp $ DISTNAME= bind-${BIND_VERSION} PKGNAME= ${DISTNAME:S/-P/pl/} @@ -15,7 +15,7 @@ CONFLICTS+= host-[0-9]* MAKE_JOBS_SAFE= no -BIND_VERSION= 9.18.18 +BIND_VERSION= 9.18.19 BUILD_DEFS+= BIND_DIR VARBASE Index: pkgsrc/net/bind918/distinfo diff -u pkgsrc/net/bind918/distinfo:1.11 pkgsrc/net/bind918/distinfo:1.12 --- pkgsrc/net/bind918/distinfo:1.11 Tue Aug 29 14:47:21 2023 +++ pkgsrc/net/bind918/distinfo Wed Sep 20 13:37:16 2023 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.11 2023/08/29 14:47:21 taca Exp $ +$NetBSD: distinfo,v 1.12 2023/09/20 13:37:16 taca Exp $ -BLAKE2s (bind-9.18.18.tar.xz) = 6f7f87ab9cfcb090acf9447e2d75d9949700dad118d09d9bf5e9dfe78585365d -SHA512 (bind-9.18.18.tar.xz) = 8d94ec93915c776b9035bce2c3e707c6fb2fa526dbc3b08211c8265daa2c3c88bde51bec08dc416b5b7ba61604754846c4d1efa3f09eebd23847c417c9dc8760 -Size (bind-9.18.18.tar.xz) = 5490428 bytes +BLAKE2s (bind-9.18.19.tar.xz) = c264efe37f8f386ecafaa46b689084bf43f74513c07f6fd7dc7435e1617e628c +SHA512 (bind-9.18.19.tar.xz) = 51af9a246f23afc9ac9a1ef2d793bc91f43fe835b6c4101ad557799ee3aa4253bd12b2f12d9d101c1ce616e2a852a42c5567b031adaaaf06677fcc11c98cf393 +Size (bind-9.18.19.tar.xz) = 5508464 bytes SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b SHA1 (patch-bin_named_server.c) = 6e59d3f637ebb829eec2f76ba7c350fb5cf9be6d --_----------=_1695217037277460--