git: 073246303d6d - 2026Q1 - dns/bind920: update to 9.20.21
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 25 Mar 2026 16:53:06 UTC
The branch 2026Q1 has been updated by mat:
URL: https://cgit.FreeBSD.org/ports/commit/?id=073246303d6d28f5aacfe2869e4b683a446aea71
commit 073246303d6d28f5aacfe2869e4b683a446aea71
Author: Mathieu Arnold <mat@FreeBSD.org>
AuthorDate: 2026-03-25 14:20:11 +0000
Commit: Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2026-03-25 16:52:25 +0000
dns/bind920: update to 9.20.21
Changes: https://downloads.isc.org/isc/bind9/9.20.21/doc/arm/html/notes.html#notes-for-bind-9-20-21
Security: CVE-2026-1519, CVE-2026-3104, CVE-2026-3119, CVE-2026-3591
(cherry picked from commit 0739234032aa2570691c4e0bbbf140bb67ade2f7)
---
dns/bind-tools/pkg-plist | 10 +++++-----
dns/bind920/Makefile | 2 +-
dns/bind920/distinfo | 6 +++---
dns/bind920/files/extrapatch-bind-min-override-ttl | 16 ++++++++--------
dns/bind920/pkg-plist | 10 +++++-----
5 files changed, 22 insertions(+), 22 deletions(-)
diff --git a/dns/bind-tools/pkg-plist b/dns/bind-tools/pkg-plist
index 7e3c1cbb4eea..77f418e9f73c 100644
--- a/dns/bind-tools/pkg-plist
+++ b/dns/bind-tools/pkg-plist
@@ -19,15 +19,15 @@ bin/nsec3hash
bin/nslookup
bin/nsupdate
lib/bind-tools/libdns.so
-lib/bind-tools/libdns-9.20.20.so
+lib/bind-tools/libdns-9.20.21.so
lib/bind-tools/libisc.so
-lib/bind-tools/libisc-9.20.20.so
+lib/bind-tools/libisc-9.20.21.so
lib/bind-tools/libisccc.so
-lib/bind-tools/libisccc-9.20.20.so
+lib/bind-tools/libisccc-9.20.21.so
lib/bind-tools/libisccfg.so
-lib/bind-tools/libisccfg-9.20.20.so
+lib/bind-tools/libisccfg-9.20.21.so
lib/bind-tools/libns.so
-lib/bind-tools/libns-9.20.20.so
+lib/bind-tools/libns-9.20.21.so
share/man/man1/arpaname.1.gz
share/man/man1/delv.1.gz
share/man/man1/dig.1.gz
diff --git a/dns/bind920/Makefile b/dns/bind920/Makefile
index fb4a363f860d..e554a8d8dcfb 100644
--- a/dns/bind920/Makefile
+++ b/dns/bind920/Makefile
@@ -1,7 +1,7 @@
# pkg-help formatted with fmt 59 63
PORTNAME= bind
-DISTVERSION= 9.20.20
+DISTVERSION= 9.20.21
.if defined(BIND_TOOLS_SLAVE)
# dns/bind-tools here
PORTREVISION= 0
diff --git a/dns/bind920/distinfo b/dns/bind920/distinfo
index 33faae857e89..f9604c5c716e 100644
--- a/dns/bind920/distinfo
+++ b/dns/bind920/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1772304231
-SHA256 (bind-9.20.20.tar.xz) = 19b8335d25305231d5eb8f7d924240d1ac97c4da7c93eaa6273503133aa6106a
-SIZE (bind-9.20.20.tar.xz) = 5802548
+TIMESTAMP = 1774447931
+SHA256 (bind-9.20.21.tar.xz) = 15e1b5a227d2890f7c4e823a6ea018de70ee2f3a0e859cbff3d82aad8590de03
+SIZE (bind-9.20.21.tar.xz) = 5808576
diff --git a/dns/bind920/files/extrapatch-bind-min-override-ttl b/dns/bind920/files/extrapatch-bind-min-override-ttl
index c29e8e7002e5..7a6865b9e506 100644
--- a/dns/bind920/files/extrapatch-bind-min-override-ttl
+++ b/dns/bind920/files/extrapatch-bind-min-override-ttl
@@ -1,6 +1,6 @@
Add the override-cache-ttl feature.
---- bin/named/config.c.orig 2026-02-26 21:18:34 UTC
+--- bin/named/config.c.orig 2026-03-13 22:01:10 UTC
+++ bin/named/config.c
@@ -185,6 +185,7 @@ options {\n\
notify-source *;\n\
@@ -10,9 +10,9 @@ Add the override-cache-ttl feature.
parental-source *;\n\
parental-source-v6 *;\n\
provide-ixfr true;\n\
---- bin/named/server.c.orig 2026-02-26 21:18:34 UTC
+--- bin/named/server.c.orig 2026-03-13 22:01:10 UTC
+++ bin/named/server.c
-@@ -4673,6 +4673,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
+@@ -4675,6 +4675,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
}
obj = NULL;
@@ -24,9 +24,9 @@ Add the override-cache-ttl feature.
result = named_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asduration(obj);
---- doc/arm/reference.rst.orig 2026-02-26 21:18:34 UTC
+--- doc/arm/reference.rst.orig 2026-03-13 22:01:10 UTC
+++ doc/arm/reference.rst
-@@ -4385,6 +4385,10 @@ Tuning
+@@ -4397,6 +4397,10 @@ Tuning
cannot exceed 7 days and is silently truncated to 7 days if set to a
greater value.
@@ -37,7 +37,7 @@ Add the override-cache-ttl feature.
.. namedconf:statement:: max-cache-ttl
:tags: server
:short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers.
---- lib/dns/include/dns/view.h.orig 2026-02-26 21:18:34 UTC
+--- lib/dns/include/dns/view.h.orig 2026-03-13 22:01:10 UTC
+++ lib/dns/include/dns/view.h
@@ -151,6 +151,7 @@ struct dns_view {
bool requestnsid;
@@ -47,7 +47,7 @@ Add the override-cache-ttl feature.
dns_ttl_t maxncachettl;
dns_ttl_t mincachettl;
dns_ttl_t minncachettl;
---- lib/dns/resolver.c.orig 2026-02-26 21:18:34 UTC
+--- lib/dns/resolver.c.orig 2026-03-13 22:01:10 UTC
+++ lib/dns/resolver.c
@@ -6099,6 +6099,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes
}
@@ -62,7 +62,7 @@ Add the override-cache-ttl feature.
* Enforce the configure maximum cache TTL.
*/
if (rdataset->ttl > res->view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig 2026-02-26 21:18:34 UTC
+--- lib/isccfg/namedconf.c.orig 2026-03-13 22:01:10 UTC
+++ lib/isccfg/namedconf.c
@@ -2240,6 +2240,7 @@ static cfg_clausedef_t view_clauses[] = {
{ "nta-lifetime", &cfg_type_duration, 0 },
diff --git a/dns/bind920/pkg-plist b/dns/bind920/pkg-plist
index 75c35a0acb64..9753c93a5ddb 100644
--- a/dns/bind920/pkg-plist
+++ b/dns/bind920/pkg-plist
@@ -242,15 +242,15 @@ include/ns/update.h
include/ns/xfrout.h
lib/bind/filter-a.so
lib/bind/filter-aaaa.so
-lib/libdns-9.20.20.so
+lib/libdns-9.20.21.so
lib/libdns.so
-lib/libisc-9.20.20.so
+lib/libisc-9.20.21.so
lib/libisc.so
-lib/libisccc-9.20.20.so
+lib/libisccc-9.20.21.so
lib/libisccc.so
-lib/libisccfg-9.20.20.so
+lib/libisccfg-9.20.21.so
lib/libisccfg.so
-lib/libns-9.20.20.so
+lib/libns-9.20.21.so
lib/libns.so
@comment share/man/man1/arpaname.1.gz
@comment share/man/man1/delv.1.gz