bind: Update ot 9.20.11

For details see:
https://downloads.isc.org/isc/bind9/9.20.11/doc/arm/html/notes.html#notes-for-bind-9-20-11

"Notes for BIND 9.20.11
Security Fixes

    Fix a possible assertion failure when stale-answer-client-timeout is
    set to 0.

    In specific circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0. This has
    been fixed. (CVE-2025-40777) [GL #5372]

New Features

    Add support for the CO flag to dig.

    Add support for Compact Denial of Existence to dig. This includes
    showing the CO (Compact Answers OK) flag when displaying messages and
    adding an option to set the CO flag when making queries (dig +coflag).
    [GL #5319]

Bug Fixes

    Correct the default interface-interval from 60s to 60m.

    When the interface-interval parser was changed from a uint32 parser to
    a duration parser, the default value stayed at plain number 60 which
    now means 60 seconds instead of 60 minutes. The documentation also
    incorrectly states that the value is in minutes. That has been fixed.
    [GL #5246]

    Fix a purge-keys bug when using multiple views of a zone.

    Previously, when a DNSSEC key was purged by one zone view, other zone
    views would return an error about missing key files. This has been
    fixed. [GL #5315]

    Use IPv6 queries in delv +ns.

    delv +ns invokes the same code to perform name resolution as named, but
    it neglected to set up an IPv6 dispatch object first. Consequently, it
    was behaving more like named -4. It now sets up dispatch objects for
    both address families, and performs resolver queries to both IPv4 and
    IPv6 addresses, except when one of the address families has been
    suppressed by using delv -4 or delv -6. [GL #5352]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index f387a31a795cf79a4a3500a442655be8640ab17b..fb6220c4756e5fd8054a180e166a9995fca232a6 100644 (file)
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -240,18 +240,18 @@ usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.10.so
+usr/lib/libdns-9.20.11.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.10.so
+usr/lib/libisc-9.20.11.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.10.so
+usr/lib/libisccc-9.20.11.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.10.so
+usr/lib/libisccfg-9.20.11.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.10.so
+usr/lib/libns-9.20.11.so
 #usr/lib/libns.la
 #usr/lib/libns.so

diff --git a/lfs/bind b/lfs/bind
index cdba7c307ef3d5b2f1faa8c2bba4458840d6beca..fa4d73d04e0de64e3814eb8881156672c31b406b 100644 (file)
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 9.20.10
+VER        = 9.20.11
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e5a7824ff5b901be447a2f4f067aa8b3345eb8187ed86f3bf6bc623e2b6c812722667eefd1f915026dab078846011e222336a30c4da640c4e54aa828398b180d
+$(DL_FILE)_BLAKE2 = 582e6de2699713e870dfc853f461c78b2d2b505bed0b571f853c94a731be9006783f45a4f897692289c1a9411725eac0b4de3818f1641221e62754316f410081
 
 install : $(TARGET)