From: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Fri, 21 Nov 2025 16:39:59 +0000 (+0100)
Subject: bind: Update ot 9.20.16
X-Git-Tag: v2.29-core199~17^2~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4a2999cc9969b0e087f5e1e8dc90663ea70e7757;p=ipfire-2.x.git

bind: Update ot 9.20.16

For details see:

https://downloads.isc.org/isc/bind9/9.20.16/doc/arm/html/notes.html#notes-for-bind-9-20-16

"Notes for BIND 9.20.16
Bug Fixes

    Skip unsupported algorithms when looking for a signing key.

    A mix of supported and unsupported DNSSEC algorithms in the same zone
    could cause validation failures. Unsupported algorithms are now ignored
    when looking for signing keys. [GL #5622]

    Fix dnssec-keygen key collision checking for KEY RRtype keys.

    The dnssec-keygen utility program failed to detect possible KEY ID
    collisions with existing keys generated using the non-default -T KEY
    option (e.g., for SIG(0)). This has been fixed. [GL #5506]

    dnssec-verify now uses exit code 1 when failing due to illegal options.

    Previously, dnssec-verify exited with code 0 if the options could not
    be parsed. This has been fixed. [GL #5574]

    Prevent assertion failures of dig when a server is specified before the -b option.

    Previously, dig could exit with an assertion failure when a server was
    specified before the dig -b option. This has been fixed. [GL #5609]

    Skip buffer allocations if not logging.

    Previously, we allocated a 2KB buffer for IXFR change logging,
    regardless of the log level.

    This results in a 28% speedup in some scenarios."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index eff7149ca..90ce93c01 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -241,18 +241,18 @@ usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.15.so
+usr/lib/libdns-9.20.16.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.15.so
+usr/lib/libisc-9.20.16.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.15.so
+usr/lib/libisccc-9.20.16.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.15.so
+usr/lib/libisccfg-9.20.16.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.15.so
+usr/lib/libns-9.20.16.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index e5f8de750..fc86eb54a 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 9.20.15
+VER        = 9.20.16
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f272fc5e7a107b28cb71b55d2e87cfb2b215612c38289483044445f6c5ae57b0eb7003a368386122fb1fed551ac7be2e4e9bb34c2f8908e379e1aaf4e761c394
+$(DL_FILE)_BLAKE2 = 1a083efbd7a95df8c9c05966681be577cb119f1a75292cbf65a31cdf0fc7677a70834be4f8599984635b9ea09a909c1453b489e920e5f27502ab2b496aa278b0
 
 install : $(TARGET)