git: 0731929037e0 - 2026Q1 - dns/bind9-devel: update to 9.21.17
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 21 Jan 2026 16:06:34 UTC
The branch 2026Q1 has been updated by mat:
URL: https://cgit.FreeBSD.org/ports/commit/?id=0731929037e08f7e0209e471f67771b558ff05df
commit 0731929037e08f7e0209e471f67771b558ff05df
Author: Mathieu Arnold <mat@FreeBSD.org>
AuthorDate: 2026-01-21 14:43:31 +0000
Commit: Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2026-01-21 16:06:10 +0000
dns/bind9-devel: update to 9.21.17
Changes: https://downloads.isc.org/isc/bind9/9.21.17/doc/arm/html/notes.html#notes-for-bind-9-21-17
Security: CVE-2025-13878
(cherry picked from commit 073271007fa7a524a0c2403d1cdbda477e7fae09)
---
dns/bind-tools/pkg-plist-devel | 10 +++++-----
dns/bind9-devel/Makefile | 2 +-
dns/bind9-devel/distinfo | 6 +++---
.../files/extrapatch-bind-min-override-ttl | 22 +++++++++++-----------
dns/bind9-devel/pkg-plist | 12 +++++++-----
5 files changed, 27 insertions(+), 25 deletions(-)
diff --git a/dns/bind-tools/pkg-plist-devel b/dns/bind-tools/pkg-plist-devel
index 970451051e17..f02c39df9686 100644
--- a/dns/bind-tools/pkg-plist-devel
+++ b/dns/bind-tools/pkg-plist-devel
@@ -18,11 +18,11 @@ bin/named-rrchecker
bin/nsec3hash
bin/nslookup
bin/nsupdate
-lib/bind-tools/libdns-9.21.16.so
-lib/bind-tools/libisc-9.21.16.so
-lib/bind-tools/libisccc-9.21.16.so
-lib/bind-tools/libisccfg-9.21.16.so
-lib/bind-tools/libns-9.21.16.so
+lib/bind-tools/libdns-9.21.17.so
+lib/bind-tools/libisc-9.21.17.so
+lib/bind-tools/libisccc-9.21.17.so
+lib/bind-tools/libisccfg-9.21.17.so
+lib/bind-tools/libns-9.21.17.so
share/man/man1/arpaname.1.gz
share/man/man1/delv.1.gz
share/man/man1/dig.1.gz
diff --git a/dns/bind9-devel/Makefile b/dns/bind9-devel/Makefile
index 8b8442060c41..18202596d9ab 100644
--- a/dns/bind9-devel/Makefile
+++ b/dns/bind9-devel/Makefile
@@ -1,7 +1,7 @@
# pkg-help formatted with fmt 59 63
PORTNAME= bind
-DISTVERSION= 9.21.16
+DISTVERSION= 9.21.17
.if defined(BIND_TOOLS_SLAVE)
# dns/bind-tools here
PORTREVISION= 0
diff --git a/dns/bind9-devel/distinfo b/dns/bind9-devel/distinfo
index bf2d00c72c50..dc72a50dc72c 100644
--- a/dns/bind9-devel/distinfo
+++ b/dns/bind9-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1765983486
-SHA256 (bind-9.21.16.tar.xz) = 521aa2003c5a7d78d8e589787025f39384065535818f4344cf9e14c086fda98d
-SIZE (bind-9.21.16.tar.xz) = 5271888
+TIMESTAMP = 1769006056
+SHA256 (bind-9.21.17.tar.xz) = 3cefdbc795f6347aff11af478dded6f036ff7b3a00f9ca3c9d0e80f0deeb0d05
+SIZE (bind-9.21.17.tar.xz) = 5296892
diff --git a/dns/bind9-devel/files/extrapatch-bind-min-override-ttl b/dns/bind9-devel/files/extrapatch-bind-min-override-ttl
index f927b1a4772b..9afa8208d7ae 100644
--- a/dns/bind9-devel/files/extrapatch-bind-min-override-ttl
+++ b/dns/bind9-devel/files/extrapatch-bind-min-override-ttl
@@ -1,6 +1,6 @@
Add the override-cache-ttl feature.
---- bin/include/defaultconfig.h.orig 2025-12-09 17:51:25 UTC
+--- bin/include/defaultconfig.h.orig 2026-01-09 13:24:57 UTC
+++ bin/include/defaultconfig.h
@@ -159,6 +159,7 @@ options {\n\
notify-source *;\n\
@@ -10,9 +10,9 @@ Add the override-cache-ttl feature.
parental-source *;\n\
parental-source-v6 *;\n\
provide-ixfr true;\n\
---- bin/named/server.c.orig 2025-12-09 17:51:25 UTC
+--- bin/named/server.c.orig 2026-01-09 13:24:57 UTC
+++ bin/named/server.c
-@@ -4082,6 +4082,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
+@@ -4080,6 +4080,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
}
obj = NULL;
@@ -24,9 +24,9 @@ Add the override-cache-ttl feature.
result = named_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asduration(obj);
---- doc/arm/reference.rst.orig 2025-12-09 17:51:25 UTC
+--- doc/arm/reference.rst.orig 2026-01-09 13:24:57 UTC
+++ doc/arm/reference.rst
-@@ -4154,6 +4154,10 @@ Tuning
+@@ -4188,6 +4188,10 @@ Tuning
cannot exceed 7 days and is silently truncated to 7 days if set to a
greater value.
@@ -37,7 +37,7 @@ Add the override-cache-ttl feature.
.. namedconf:statement:: max-cache-ttl
:tags: server
:short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers.
---- doc/misc/options.orig 2025-12-09 17:51:25 UTC
+--- doc/misc/options.orig 2026-01-09 13:24:57 UTC
+++ doc/misc/options
@@ -171,6 +171,7 @@ options {
masterfile-style ( full | relative );
@@ -47,7 +47,7 @@ Add the override-cache-ttl feature.
max-cache-ttl <duration>;
max-clients-per-query <integer>;
max-ixfr-ratio ( unlimited | <percentage> );
---- lib/dns/include/dns/view.h.orig 2025-12-09 17:51:25 UTC
+--- lib/dns/include/dns/view.h.orig 2026-01-09 13:24:57 UTC
+++ lib/dns/include/dns/view.h
@@ -155,6 +155,7 @@ struct dns_view {
bool requestzoneversion;
@@ -57,9 +57,9 @@ Add the override-cache-ttl feature.
dns_ttl_t maxncachettl;
dns_ttl_t mincachettl;
dns_ttl_t minncachettl;
---- lib/dns/resolver.c.orig 2025-12-09 17:51:25 UTC
+--- lib/dns/resolver.c.orig 2026-01-09 13:24:57 UTC
+++ lib/dns/resolver.c
-@@ -6014,6 +6014,12 @@ fixttls(dns_view_t *view, dns_rdataset_t *rdataset,
+@@ -6004,6 +6004,12 @@ fixttls(dns_view_t *view, dns_rdataset_t *rdataset,
fixttls(dns_view_t *view, dns_rdataset_t *rdataset,
dns_rdataset_t *sigrdataset) {
/*
@@ -72,9 +72,9 @@ Add the override-cache-ttl feature.
* Enforce the configured maximum and minimum cache TTL.
*/
if (rdataset->ttl > view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig 2025-12-09 17:51:25 UTC
+--- lib/isccfg/namedconf.c.orig 2026-01-09 13:24:57 UTC
+++ lib/isccfg/namedconf.c
-@@ -2429,6 +2429,7 @@ static cfg_clausedef_t view_clauses[] = {
+@@ -2422,6 +2422,7 @@ static cfg_clausedef_t view_clauses[] = {
{ "nta-lifetime", &cfg_type_duration, 0, NULL },
{ "nta-recheck", &cfg_type_duration, 0, NULL },
{ "nxdomain-redirect", &cfg_type_astring, 0, NULL },
diff --git a/dns/bind9-devel/pkg-plist b/dns/bind9-devel/pkg-plist
index 0700b80365d0..624addb5d686 100644
--- a/dns/bind9-devel/pkg-plist
+++ b/dns/bind9-devel/pkg-plist
@@ -76,6 +76,7 @@ include/dns/rdataset.h
include/dns/rdatasetiter.h
include/dns/rdataslab.h
include/dns/rdatatype.h
+include/dns/rdatavec.h
include/dns/remote.h
include/dns/request.h
include/dns/resolver.h
@@ -185,6 +186,7 @@ include/isc/serial.h
include/isc/sieve.h
include/isc/signal.h
include/isc/siphash.h
+include/isc/slist.h
include/isc/sockaddr.h
include/isc/spinlock.h
include/isc/stats.h
@@ -237,11 +239,11 @@ include/ns/xfrout.h
lib/bind/filter-a.so
lib/bind/filter-aaaa.so
lib/bind/synthrecord.so
-lib/libdns-9.21.16.so
-lib/libisc-9.21.16.so
-lib/libisccc-9.21.16.so
-lib/libisccfg-9.21.16.so
-lib/libns-9.21.16.so
+lib/libdns-9.21.17.so
+lib/libisc-9.21.17.so
+lib/libisccc-9.21.17.so
+lib/libisccfg-9.21.17.so
+lib/libns-9.21.17.so
@comment share/man/man1/arpaname.1.gz
@comment share/man/man1/delv.1.gz
@comment share/man/man1/dig.1.gz