git: 07582060825d - main - dns/bind920: update to 9.20.26

From: Mathieu Arnold <mat_at_FreeBSD.org>
Date: Sat, 25 Jul 2026 12:50:59 UTC
The branch main has been updated by mat:

URL: https://cgit.FreeBSD.org/ports/commit/?id=07582060825de2b8ad51748979f4c16156b36212

commit 07582060825de2b8ad51748979f4c16156b36212
Author:     Mathieu Arnold <mat@FreeBSD.org>
AuthorDate: 2026-07-22 15:54:05 +0000
Commit:     Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2026-07-25 12:50:27 +0000

    dns/bind920: update to 9.20.26
    
    Changes:        https://downloads.isc.org/isc/bind9/9.20.26/doc/arm/html/notes.html#notes-for-bind-9-20-26
    Security:       CVE-2026-10723 CVE-2026-10822 CVE-2026-11331
                    CVE-2026-11605 CVE-2026-11622 CVE-2026-11721
                    CVE-2026-12617 CVE-2026-13204 CVE-2026-13321
---
 dns/bind-tools/pkg-plist                           | 10 +++++-----
 dns/bind920/Makefile                               |  6 +++---
 dns/bind920/distinfo                               |  6 +++---
 dns/bind920/files/extrapatch-bind-min-override-ttl | 22 +++++++++++-----------
 dns/bind920/pkg-plist                              | 11 +++++------
 5 files changed, 27 insertions(+), 28 deletions(-)

diff --git a/dns/bind-tools/pkg-plist b/dns/bind-tools/pkg-plist
index 7db5ae3d37d1..a94c7d1b1280 100644
--- a/dns/bind-tools/pkg-plist
+++ b/dns/bind-tools/pkg-plist
@@ -19,15 +19,15 @@ bin/nsec3hash
 bin/nslookup
 bin/nsupdate
 lib/bind-tools/libdns.so
-lib/bind-tools/libdns-9.20.24.so
+lib/bind-tools/libdns-9.20.26.so
 lib/bind-tools/libisc.so
-lib/bind-tools/libisc-9.20.24.so
+lib/bind-tools/libisc-9.20.26.so
 lib/bind-tools/libisccc.so
-lib/bind-tools/libisccc-9.20.24.so
+lib/bind-tools/libisccc-9.20.26.so
 lib/bind-tools/libisccfg.so
-lib/bind-tools/libisccfg-9.20.24.so
+lib/bind-tools/libisccfg-9.20.26.so
 lib/bind-tools/libns.so
-lib/bind-tools/libns-9.20.24.so
+lib/bind-tools/libns-9.20.26.so
 share/man/man1/arpaname.1.gz
 share/man/man1/delv.1.gz
 share/man/man1/dig.1.gz
diff --git a/dns/bind920/Makefile b/dns/bind920/Makefile
index 21a4abf62f94..5eea0b78529f 100644
--- a/dns/bind920/Makefile
+++ b/dns/bind920/Makefile
@@ -1,13 +1,13 @@
 # pkg-help formatted with fmt 59 63
 
 PORTNAME=	bind
-DISTVERSION=	9.20.24
+DISTVERSION=	9.20.26
 .if defined(BIND_TOOLS_SLAVE)
 # dns/bind-tools here
-PORTREVISION=	1
+PORTREVISION=	0
 .else
 # dns/bind920 here
-PORTREVISION=	1
+PORTREVISION=	0
 .endif
 CATEGORIES=	dns net
 MASTER_SITES=	ISC/bind9/${DISTVERSION}
diff --git a/dns/bind920/distinfo b/dns/bind920/distinfo
index dd59da7d203a..c4b1a832b1fc 100644
--- a/dns/bind920/distinfo
+++ b/dns/bind920/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1781874222
-SHA256 (bind-9.20.24.tar.xz) = 989fef1fc88ea59d04cd86f854dca5a4616a20a9968bcdde3c1a3668ab36be08
-SIZE (bind-9.20.24.tar.xz) = 5854912
+TIMESTAMP = 1784735549
+SHA256 (bind-9.20.26.tar.xz) = 55248def0f870c4c46b3de72978ea972615131516663188a4564dca1d20bf350
+SIZE (bind-9.20.26.tar.xz) = 5918032
diff --git a/dns/bind920/files/extrapatch-bind-min-override-ttl b/dns/bind920/files/extrapatch-bind-min-override-ttl
index a0a3259cb887..41f7bb1f13ae 100644
--- a/dns/bind920/files/extrapatch-bind-min-override-ttl
+++ b/dns/bind920/files/extrapatch-bind-min-override-ttl
@@ -1,8 +1,8 @@
 Add the override-cache-ttl feature.
 
---- bin/named/config.c.orig	2026-05-08 14:50:58 UTC
+--- bin/named/config.c.orig	2026-07-20 14:47:53 UTC
 +++ bin/named/config.c
-@@ -185,6 +185,7 @@ options {\n\
+@@ -186,6 +186,7 @@ options {\n\
  	notify-source *;\n\
  	notify-source-v6 *;\n\
  	nsec3-test-zone no;\n\
@@ -10,9 +10,9 @@ Add the override-cache-ttl feature.
  	parental-source *;\n\
  	parental-source-v6 *;\n\
  	provide-ixfr true;\n\
---- bin/named/server.c.orig	2026-05-08 14:50:58 UTC
+--- bin/named/server.c.orig	2026-07-20 14:47:53 UTC
 +++ bin/named/server.c
-@@ -4678,6 +4678,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
+@@ -4679,6 +4679,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
  	}
  
  	obj = NULL;
@@ -24,9 +24,9 @@ Add the override-cache-ttl feature.
  	result = named_config_get(maps, "max-cache-ttl", &obj);
  	INSIST(result == ISC_R_SUCCESS);
  	view->maxcachettl = cfg_obj_asduration(obj);
---- doc/arm/reference.rst.orig	2026-05-08 14:50:58 UTC
+--- doc/arm/reference.rst.orig	2026-07-20 14:47:53 UTC
 +++ doc/arm/reference.rst
-@@ -4397,6 +4397,10 @@ Tuning
+@@ -4411,6 +4411,10 @@ Tuning
     cannot exceed 7 days and is silently truncated to 7 days if set to a
     greater value.
  
@@ -37,7 +37,7 @@ Add the override-cache-ttl feature.
  .. namedconf:statement:: max-cache-ttl
     :tags: server
     :short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers.
---- lib/dns/include/dns/view.h.orig	2026-05-08 14:50:58 UTC
+--- lib/dns/include/dns/view.h.orig	2026-07-20 14:47:54 UTC
 +++ lib/dns/include/dns/view.h
 @@ -151,6 +151,7 @@ struct dns_view {
  	bool		      requestnsid;
@@ -47,9 +47,9 @@ Add the override-cache-ttl feature.
  	dns_ttl_t	      maxncachettl;
  	dns_ttl_t	      mincachettl;
  	dns_ttl_t	      minncachettl;
---- lib/dns/resolver.c.orig	2026-05-08 14:50:58 UTC
+--- lib/dns/resolver.c.orig	2026-07-20 14:47:54 UTC
 +++ lib/dns/resolver.c
-@@ -6069,6 +6069,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes
+@@ -6225,6 +6225,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes
  		}
  
  		/*
@@ -62,9 +62,9 @@ Add the override-cache-ttl feature.
  		 * Enforce the configure maximum cache TTL.
  		 */
  		if (rdataset->ttl > res->view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig	2026-05-08 14:50:58 UTC
+--- lib/isccfg/namedconf.c.orig	2026-07-20 14:47:54 UTC
 +++ lib/isccfg/namedconf.c
-@@ -2240,6 +2240,7 @@ static cfg_clausedef_t view_clauses[] = {
+@@ -2241,6 +2241,7 @@ static cfg_clausedef_t view_clauses[] = {
  	{ "nta-lifetime", &cfg_type_duration, 0 },
  	{ "nta-recheck", &cfg_type_duration, 0 },
  	{ "nxdomain-redirect", &cfg_type_astring, 0 },
diff --git a/dns/bind920/pkg-plist b/dns/bind920/pkg-plist
index 41102697b922..125af683d38d 100644
--- a/dns/bind920/pkg-plist
+++ b/dns/bind920/pkg-plist
@@ -140,7 +140,6 @@ include/isc/getaddresses.h
 include/isc/hash.h
 include/isc/hashmap.h
 include/isc/heap.h
-include/isc/helper.h
 include/isc/hex.h
 include/isc/histo.h
 include/isc/hmac.h
@@ -242,15 +241,15 @@ include/ns/update.h
 include/ns/xfrout.h
 lib/bind/filter-a.so
 lib/bind/filter-aaaa.so
-lib/libdns-9.20.24.so
+lib/libdns-9.20.26.so
 lib/libdns.so
-lib/libisc-9.20.24.so
+lib/libisc-9.20.26.so
 lib/libisc.so
-lib/libisccc-9.20.24.so
+lib/libisccc-9.20.26.so
 lib/libisccc.so
-lib/libisccfg-9.20.24.so
+lib/libisccfg-9.20.26.so
 lib/libisccfg.so
-lib/libns-9.20.24.so
+lib/libns-9.20.26.so
 lib/libns.so
 @comment share/man/man1/arpaname.1.gz
 @comment share/man/man1/delv.1.gz