Pullup ticket #6990 - requested by taca

net/bind918: Security fix

Revisions pulled up:
- net/bind918/Makefile                                          1.54
- net/bind918/distinfo                                          1.30

---
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Wed Jul 16 14:48:02 UTC 2025

   Modified Files:
           pkgsrc/net/bind918: Makefile distinfo

   Log Message:
   net/bind918: update to 9.18.38

   BIND 9.18.38 (2025-07-16)

   This release contains fixes for security vulnerabilities
   (CVE-2025-40776, CVE-2025-40777), about which more information is
   provided in the following Security Advisories:

       https://kb.isc.org/docs/cve-2025-40776
       https://kb.isc.org/docs/cve-2025-40777

   Security Fixes

   * Fix an issue when some specific queries could remain unanswered with
     serve-stale enabled.

     When named was running with stale answers enabled and with the
     stale-answer-client-timeout configuration option set to 0, in certain
     situations it was possible that some queries could remain unanswered.
     This has been fixed.  [GL #5383]

   New Features

   * Add support for the CO flag to dig.

     Add support for Compact Denial of Existence to dig.  This includes showing
     the CO (Compact Answers OK) flag when displaying messages and adding an
     option to set the CO flag when making queries (dig +coflag).  [GL #5319]

   Bug Fixes

   * Correct the default interface-interval from 60s to 60m.

     When the interface-interval parser was changed from a uint32 parser to a
     duration parser, the default value stayed at plain number 60 which now
     means 60 seconds instead of 60 minutes.  The documentation also
     incorrectly states that the value is in minutes.  That has been fixed.
     [GL #5246]

   * Fix a purge-keys bug when using multiple views of a zone.

     Previously, when a DNSSEC key was purged by one zone view, other zone
     views would return an error about missing key files.  This has been fixed.
     [GL #5315]

Author: coypoop

net/bind918/Makefile

@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.52 2025/05/21 13:24:35 taca Exp $
+# $NetBSD: Makefile,v 1.52.2.1 2025/07/17 22:24:56 maya Exp $
 
 DISTNAME=	bind-${BIND_VERSION}
 PKGNAME=	${DISTNAME:S/-P/pl/}
@@ -15,7 +15,7 @@ CONFLICTS+=	host-[0-9]*
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.18.37
+BIND_VERSION=	9.18.38
 
 BUILD_DEFS+=	BIND_DIR VARBASE
 

net/bind918/distinfo

@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.29 2025/05/21 13:24:35 taca Exp $
+$NetBSD: distinfo,v 1.29.2.1 2025/07/17 22:24:56 maya Exp $
 
-BLAKE2s (bind-9.18.37.tar.xz) = 07648b91bd1932db7434e8fbe9fbfa803ffb24819c474e7e387641ab8dba4c47
-SHA512 (bind-9.18.37.tar.xz) = 9789cb3fa7739cc7e1b137d1642861d9517adc4391e2f8c526bfa271e13f7489794ed20cb5f64c26e432d7b79cfe7aa1f7d59c476fd2749bc2dccfb85c514943
-Size (bind-9.18.37.tar.xz) = 5358128 bytes
+BLAKE2s (bind-9.18.38.tar.xz) = c433a12b128e6d3e228f379470387f0d58aa7c5755056a3f9ef2d3d861fd7b67
+SHA512 (bind-9.18.38.tar.xz) = 38710646a817dca0df6247b660cd244c79da13d0fed2898da139ae206bc8732fddd93af6fc2cbeca805c0c0d0789ec22eacf26789db288154581478ab2eaf44c
+Size (bind-9.18.38.tar.xz) = 5362772 bytes
 SHA1 (patch-bin_named_main.c) = 4e4a763c478f1fcecb7e65968cf6ca20dacf01f1
 SHA1 (patch-bin_named_os.c) = 5ecb0883076575d8ac5fcad68f9daad6c9be0d0b
 SHA1 (patch-bin_named_server.c) = 52190897c4c4b141d98ca5bca7cc3eb4c83ac584