git: 076689801fda - main - dns/bind9-devel: update to 9.21.26
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 16 Sep 2026 18:25:04 UTC
The branch main has been updated by mat:
URL: https://cgit.FreeBSD.org/ports/commit/?id=076689801fdaf575584e21649ea04f2cdd2892d9
commit 076689801fdaf575584e21649ea04f2cdd2892d9
Author: Mathieu Arnold <mat@FreeBSD.org>
AuthorDate: 2026-09-16 13:31:06 +0000
Commit: Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2026-09-16 18:23:54 +0000
dns/bind9-devel: update to 9.21.26
Changes: https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html
Security: CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
CVE-2026-75029 CVE-2026-77692 CVE-2026-81736
CVE-2026-76163 CVE-2026-78301 CVE-2026-80274
CVE-2026-81563
---
dns/bind-tools/pkg-plist-devel | 11 ++++++-----
dns/bind9-devel/Makefile | 2 +-
dns/bind9-devel/distinfo | 6 +++---
.../files/extrapatch-bind-min-override-ttl | 22 +++++++++++-----------
dns/bind9-devel/files/patch-meson.build | 22 +++++++++++-----------
dns/bind9-devel/pkg-plist | 11 ++++++-----
6 files changed, 38 insertions(+), 36 deletions(-)
diff --git a/dns/bind-tools/pkg-plist-devel b/dns/bind-tools/pkg-plist-devel
index fb1b929e2b46..217f61cc7db3 100644
--- a/dns/bind-tools/pkg-plist-devel
+++ b/dns/bind-tools/pkg-plist-devel
@@ -18,11 +18,11 @@ bin/named-rrchecker
bin/nsec3hash
bin/nslookup
bin/nsupdate
-lib/bind-tools/libdns-9.21.25.so
-lib/bind-tools/libisc-9.21.25.so
-lib/bind-tools/libisccc-9.21.25.so
-lib/bind-tools/libisccfg-9.21.25.so
-lib/bind-tools/libns-9.21.25.so
+lib/bind-tools/libdns-9.21.26.so
+lib/bind-tools/libisc-9.21.26.so
+lib/bind-tools/libisccc-9.21.26.so
+lib/bind-tools/libisccfg-9.21.26.so
+lib/bind-tools/libns-9.21.26.so
share/man/man1/arpaname.1.gz
share/man/man1/delv.1.gz
share/man/man1/dig.1.gz
@@ -46,6 +46,7 @@ share/man/man1/mdig.1.gz
@comment share/man/man1/named-makejournal.1.gz
@comment share/man/man1/named-nzd2nzf.1.gz
share/man/man1/named-rrchecker.1.gz
+@comment share/man/man1/named-wireformat.1.gz
share/man/man1/nsec3hash.1.gz
share/man/man1/nslookup.1.gz
share/man/man1/nsupdate.1.gz
diff --git a/dns/bind9-devel/Makefile b/dns/bind9-devel/Makefile
index 681f2ba4c69f..c1d3686e7984 100644
--- a/dns/bind9-devel/Makefile
+++ b/dns/bind9-devel/Makefile
@@ -1,7 +1,7 @@
# pkg-help formatted with fmt 59 63
PORTNAME= bind
-DISTVERSION= 9.21.25
+DISTVERSION= 9.21.26
.if defined(BIND_TOOLS_SLAVE)
# dns/bind-tools here
PORTREVISION= 0
diff --git a/dns/bind9-devel/distinfo b/dns/bind9-devel/distinfo
index dae7471dafee..6cc0639a5fd4 100644
--- a/dns/bind9-devel/distinfo
+++ b/dns/bind9-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1787132542
-SHA256 (bind-9.21.25.tar.xz) = 8e01712ba7f59515be41981d27e8ec6c9b5d196fc681f8d14a163deea686d7b8
-SIZE (bind-9.21.25.tar.xz) = 5515532
+TIMESTAMP = 1789564913
+SHA256 (bind-9.21.26.tar.xz) = bec622d80eeaa5a97b3cebc2afb6545c888e6e5fca98f63b04fd958d26463d7b
+SIZE (bind-9.21.26.tar.xz) = 5565140
diff --git a/dns/bind9-devel/files/extrapatch-bind-min-override-ttl b/dns/bind9-devel/files/extrapatch-bind-min-override-ttl
index a17259527067..99eddbba4dda 100644
--- a/dns/bind9-devel/files/extrapatch-bind-min-override-ttl
+++ b/dns/bind9-devel/files/extrapatch-bind-min-override-ttl
@@ -1,6 +1,6 @@
Add the override-cache-ttl feature.
---- bin/include/defaultconfig.h.orig 2026-08-05 13:41:18 UTC
+--- bin/include/defaultconfig.h.orig 2026-09-03 13:06:38 UTC
+++ bin/include/defaultconfig.h
@@ -161,6 +161,7 @@ options {\n\
notify-source *;\n\
@@ -10,9 +10,9 @@ Add the override-cache-ttl feature.
parental-source *;\n\
parental-source-v6 *;\n\
provide-ixfr true;\n\
---- bin/named/server.c.orig 2026-08-05 13:41:18 UTC
+--- bin/named/server.c.orig 2026-09-03 13:06:38 UTC
+++ bin/named/server.c
-@@ -4129,6 +4129,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
+@@ -4137,6 +4137,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
}
obj = NULL;
@@ -24,9 +24,9 @@ Add the override-cache-ttl feature.
result = named_config_get(maps, "max-cache-ttl", &obj);
INSIST(result == ISC_R_SUCCESS);
view->maxcachettl = cfg_obj_asduration(obj);
---- doc/arm/reference.rst.orig 2026-08-05 13:41:18 UTC
+--- doc/arm/reference.rst.orig 2026-09-03 13:06:38 UTC
+++ doc/arm/reference.rst
-@@ -4259,6 +4259,10 @@ Tuning
+@@ -4267,6 +4267,10 @@ Tuning
cannot exceed 7 days and is silently truncated to 7 days if set to a
greater value.
@@ -37,7 +37,7 @@ Add the override-cache-ttl feature.
.. namedconf:statement:: max-cache-ttl
:tags: server
:short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers.
---- doc/misc/options.orig 2026-08-05 13:41:18 UTC
+--- doc/misc/options.orig 2026-09-03 13:06:38 UTC
+++ doc/misc/options
@@ -171,6 +171,7 @@ options {
masterfile-style ( full | relative );
@@ -47,9 +47,9 @@ Add the override-cache-ttl feature.
max-cache-ttl <duration>;
max-clients-per-query <integer>;
max-delegation-servers <integer>; // experimental
---- lib/dns/include/dns/view.h.orig 2026-08-05 13:41:18 UTC
+--- lib/dns/include/dns/view.h.orig 2026-09-03 13:06:38 UTC
+++ lib/dns/include/dns/view.h
-@@ -159,6 +159,7 @@ struct dns_view {
+@@ -157,6 +157,7 @@ struct dns_view {
bool requestzoneversion;
bool sendcookie;
dns_ttl_t maxcachettl;
@@ -57,9 +57,9 @@ Add the override-cache-ttl feature.
dns_ttl_t maxncachettl;
dns_ttl_t mincachettl;
dns_ttl_t minncachettl;
---- lib/dns/resolver.c.orig 2026-08-05 13:41:18 UTC
+--- lib/dns/resolver.c.orig 2026-09-03 13:06:38 UTC
+++ lib/dns/resolver.c
-@@ -6240,6 +6240,12 @@ fixttls(dns_view_t *view, dns_rdataset_t *rdataset,
+@@ -6256,6 +6256,12 @@ fixttls(dns_view_t *view, dns_rdataset_t *rdataset,
fixttls(dns_view_t *view, dns_rdataset_t *rdataset,
dns_rdataset_t *sigrdataset) {
/*
@@ -72,7 +72,7 @@ Add the override-cache-ttl feature.
* Enforce the configured maximum and minimum cache TTL.
*/
if (rdataset->ttl > view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig 2026-08-05 13:41:18 UTC
+--- lib/isccfg/namedconf.c.orig 2026-09-03 13:06:38 UTC
+++ lib/isccfg/namedconf.c
@@ -2422,6 +2422,7 @@ static cfg_clausedef_t view_clauses[] = {
{ "nta-lifetime", &cfg_type_duration, 0, NULL },
diff --git a/dns/bind9-devel/files/patch-meson.build b/dns/bind9-devel/files/patch-meson.build
index 9265a6c60973..b35a734fecd6 100644
--- a/dns/bind9-devel/files/patch-meson.build
+++ b/dns/bind9-devel/files/patch-meson.build
@@ -1,6 +1,6 @@
Use bind-tools option to ease the server/tools package split
---- meson.build.orig 2026-08-05 13:41:18 UTC
+--- meson.build.orig 2026-09-03 13:06:38 UTC
+++ meson.build
@@ -73,6 +73,8 @@ zlib_opt = get_option('zlib').enable_auto_if(developer
tracing_opt = get_option('tracing')
@@ -11,7 +11,7 @@ Use bind-tools option to ease the server/tools package split
build_options = meson.build_options()
if build_options == ''
build_options = 'default'
-@@ -1403,6 +1405,7 @@ libisccfg_dep = declare_dependency(
+@@ -1382,6 +1384,7 @@ libisccfg_dep = declare_dependency(
include_directories: isccfg_inc,
)
@@ -19,7 +19,7 @@ Use bind-tools option to ease the server/tools package split
executable(
'arpaname',
arpaname_src,
-@@ -1630,7 +1633,9 @@ executable(
+@@ -1609,7 +1612,9 @@ executable(
libisc_dep,
],
)
@@ -29,7 +29,7 @@ Use bind-tools option to ease the server/tools package split
executable(
'named-checkconf',
named_checkconf_src,
-@@ -1707,7 +1712,9 @@ executable(
+@@ -1686,7 +1691,9 @@ executable(
lmdb_dep,
],
)
@@ -39,7 +39,7 @@ Use bind-tools option to ease the server/tools package split
executable(
'named-rrchecker',
named_rrchecker_src,
-@@ -1721,6 +1728,7 @@ executable(
+@@ -1700,6 +1707,7 @@ executable(
],
)
@@ -47,7 +47,7 @@ Use bind-tools option to ease the server/tools package split
named_deps = []
-@@ -1758,6 +1766,7 @@ named_srcconf = named_srcset.apply(config, strict: fal
+@@ -1737,6 +1745,7 @@ named_srcconf = named_srcset.apply(config, strict: fal
named_srcconf = named_srcset.apply(config, strict: false)
@@ -55,7 +55,7 @@ Use bind-tools option to ease the server/tools package split
executable(
'named',
named_srcconf.sources(),
-@@ -1787,7 +1796,9 @@ executable(
+@@ -1766,7 +1775,9 @@ executable(
named_srcconf.dependencies(),
],
)
@@ -65,7 +65,7 @@ Use bind-tools option to ease the server/tools package split
executable(
'nsec3hash',
nsec3hash_src,
-@@ -1835,7 +1846,9 @@ executable(
+@@ -1814,7 +1825,9 @@ executable(
edit_dep,
],
)
@@ -75,7 +75,7 @@ Use bind-tools option to ease the server/tools package split
executable(
'rndc-confgen',
rndc_confgen_src,
-@@ -1946,6 +1959,7 @@ shared_library(
+@@ -1925,6 +1938,7 @@ shared_library(
libns_dep,
],
)
@@ -83,7 +83,7 @@ Use bind-tools option to ease the server/tools package split
subdir('doc')
subdir('tests')
-@@ -2028,7 +2042,6 @@ print(release_date, end="")
+@@ -2007,7 +2021,6 @@ print(release_date, end="")
print(release_date, end="")
'''
@@ -91,7 +91,7 @@ Use bind-tools option to ease the server/tools package split
release_date = ''
if python.found()
release_date = run_command(python, ['-c', get_release_date], check: true).stdout()
-@@ -2049,6 +2062,7 @@ if doc_opt.allowed()
+@@ -2028,6 +2041,7 @@ if doc_opt.allowed()
install_man(man_pages)
diff --git a/dns/bind9-devel/pkg-plist b/dns/bind9-devel/pkg-plist
index 66bb14f957e4..69901f311f3a 100644
--- a/dns/bind9-devel/pkg-plist
+++ b/dns/bind9-devel/pkg-plist
@@ -244,11 +244,11 @@ include/ns/xfrout.h
lib/bind/filter-a.so
lib/bind/filter-aaaa.so
lib/bind/synthrecord.so
-lib/libdns-9.21.25.so
-lib/libisc-9.21.25.so
-lib/libisccc-9.21.25.so
-lib/libisccfg-9.21.25.so
-lib/libns-9.21.25.so
+lib/libdns-9.21.26.so
+lib/libisc-9.21.26.so
+lib/libisccc-9.21.26.so
+lib/libisccfg-9.21.26.so
+lib/libns-9.21.26.so
@comment share/man/man1/arpaname.1.gz
@comment share/man/man1/delv.1.gz
@comment share/man/man1/dig.1.gz
@@ -272,6 +272,7 @@ share/man/man1/named-journalprint.1.gz
share/man/man1/named-makejournal.1.gz
share/man/man1/named-nzd2nzf.1.gz
@comment share/man/man1/named-rrchecker.1.gz
+share/man/man1/named-wireformat.1.gz
@comment share/man/man1/nsec3hash.1.gz
@comment share/man/man1/nslookup.1.gz
@comment share/man/man1/nsupdate.1.gz