NetBSD Problem Report #58170
From www@netbsd.org Wed Apr 17 21:48:51 2024
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
by mollari.NetBSD.org (Postfix) with ESMTPS id 16A4B1A9238
for <gnats-bugs@gnats.NetBSD.org>; Wed, 17 Apr 2024 21:48:51 +0000 (UTC)
Message-Id: <20240417214849.6245A1A923A@mollari.NetBSD.org>
Date: Wed, 17 Apr 2024 21:48:49 +0000 (UTC)
From: toku@tokugawa.org
Reply-To: toku@tokugawa.org
To: gnats-bugs@NetBSD.org
Subject: NetBSD10.0 /usr/sbin/bind problem
X-Send-Pr-Version: www-1.0
>Number: 58170
>Category: bin
>Synopsis: NetBSD10.0 /usr/sbin/bind problem
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: christos
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Wed Apr 17 21:50:00 +0000 2024
>Last-Modified: Tue Apr 23 16:20:03 +0000 2024
>Originator: Yoshitaka Tokugawa
>Release: NetBSD 10.0
>Organization:
>Environment:
NetBSD tamgw.tokugawa.or.jp 10.0 NetBSD 10.0 (NETBSD) #14: Mon Apr 1 09:09:51 JST 2024 toku@hpms.tokugawa.org:/sys/arch/amd64/compile/NETBSD amd64
>Description:
NetBSD10 bind supports blocklistd, but it seems to block even valid queries.
Compared to "denied (allow-query-cache did not match)" in the named's logs, blocklistd blocks far more addresses.
But many of which queries from blocked addresses are appears to be valid queries.
>How-To-Repeat:
>Fix:
I don't know well about bind behavior, but following patch seems to be solves my problem.
*** external/mpl/bind/dist/lib/ns/query.c.orig Tue Apr 16 14:44:32 2024
--- external/mpl/bind/dist/lib/ns/query.c Thu Apr 18 06:35:25 2024
***************
*** 909,915 ****
msg);
}
} else {
- pfilter_notify(result, client, "checkcacheaccess");
/*
* We were denied by the "allow-query-cache" ACL.
* There is no need to clear NS_QUERYATTR_CACHEACLOK
--- 909,914 ----
***************
*** 920,925 ****
--- 919,925 ----
NULL);
if (log) {
+ pfilter_notify(result, client, "checkcacheaccess");
ns_client_aclmsg("query (cache)", name, qtype,
client->view->rdclass, msg,
sizeof(msg));
>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: bin-bug-people->christos
Responsible-Changed-By: riastradh@NetBSD.org
Responsible-Changed-When: Wed, 17 Apr 2024 21:53:46 +0000
Responsible-Changed-Why:
christos, can you take a look at this bind/blocklistd integration issue?
From: Christos Zoulas <christos@zoulas.com>
To: gnats-bugs@netbsd.org
Cc: Christos Zoulas <christos@netbsd.org>,
gnats-admin@netbsd.org,
netbsd-bugs@netbsd.org,
"riastradh@netbsd.org" <riastradh@NetBSD.org>,
toku@tokugawa.org
Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
Date: Fri, 19 Apr 2024 08:33:42 -0400
The only difference is that the old code was inside a log statement so =
it never
fired. Moving it inside the log just does not make sense (blocking =
should not
depend on logging). The question is if we should remove the filtering =
statement
that blocks a querier when the query is not allowed. I think we should, =
since the
querier has no way to know that there is an ACL preventing the query so =
this
is not an abuse.
christos
From: "Christos Zoulas" <christos@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc:
Subject: PR/58170 CVS commit: src/external/mpl/bind/dist/lib/ns
Date: Fri, 19 Apr 2024 08:35:28 -0400
Module Name: src
Committed By: christos
Date: Fri Apr 19 12:35:28 UTC 2024
Modified Files:
src/external/mpl/bind/dist/lib/ns: query.c
Log Message:
PR/58170: Yoshitaka Tokugawa: Remove blocking statement when the requestor
asks for for an address that is in the cache and that access is prevented
by a cache acl because the querier has no way to know that this access is
denied, so it is not an abuse.
To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 src/external/mpl/bind/dist/lib/ns/query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
From: Robert Elz <kre@munnari.OZ.AU>
To: Christos Zoulas <christos@zoulas.com>
Cc: gnats-bugs@netbsd.org, Christos Zoulas <christos@netbsd.org>,
netbsd-bugs@netbsd.org, toku@tokugawa.org
Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
Date: Fri, 19 Apr 2024 20:38:59 +0700
Date: Fri, 19 Apr 2024 08:33:42 -0400
From: Christos Zoulas <christos@zoulas.com>
Message-ID: <5F2DA85C-AC6A-499C-A1DC-23921081C54B@zoulas.com>
| I think we should, since the querier has no way to know that there
| is an ACL preventing the query so this is not an abuse.
I don't know what it takes to install the block, but the typical way
this would happen is if a client was using the wrong DNS server as its
back end. If that's what is happening (many queries, all being sent
to the wrong server) then it may not be abuse, but blocking that client
is still a reasonable thing to do.
If it is just an occasional query (like someone running dig and specifying
a particular server) then a block might be an over reaction.
If the server is supposed to be handling those queries, then its config
should be fixed to allow them.
kre
From: Christos Zoulas <christos@zoulas.com>
To: Robert Elz <kre@munnari.OZ.AU>
Cc: gnats-bugs@netbsd.org,
Christos Zoulas <christos@netbsd.org>,
netbsd-bugs@netbsd.org,
toku@tokugawa.org
Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
Date: Fri, 19 Apr 2024 11:38:01 -0400
I guess the best way to find out is to turn on logging and look at the =
log file :-)
christos
> On Apr 19, 2024, at 9:38=E2=80=AFAM, Robert Elz <kre@munnari.OZ.AU> =
wrote:
>=20
> Date: Fri, 19 Apr 2024 08:33:42 -0400
> From: Christos Zoulas <christos@zoulas.com>
> Message-ID: <5F2DA85C-AC6A-499C-A1DC-23921081C54B@zoulas.com>
>=20
> | I think we should, since the querier has no way to know that there
> | is an ACL preventing the query so this is not an abuse.
>=20
> I don't know what it takes to install the block, but the typical way
> this would happen is if a client was using the wrong DNS server as its
> back end. If that's what is happening (many queries, all being sent
> to the wrong server) then it may not be abuse, but blocking that =
client
> is still a reasonable thing to do.
>=20
> If it is just an occasional query (like someone running dig and =
specifying
> a particular server) then a block might be an over reaction.
>=20
> If the server is supposed to be handling those queries, then its =
config
> should be fixed to allow them.
>=20
> kre
From: toku@tokugawa.org
To: gnats-bugs@netbsd.org, christos@netbsd.org, gnats-admin@netbsd.org,
netbsd-bugs@netbsd.org
Cc: toku@tokugawa.org
Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
Date: Sat, 20 Apr 2024 05:50:43 +0900
My server tamgw.tokugawa.or.jp is runnning NetBSD10. This host is an
authorized DNS server for several zones. For example, tokugawa.or.jp,
tokugawa-art-museum.jp, yakumo.co.jp, etc.
The following log is excerpts from blocklistd, named and tcpdump logs.
The query at 05:04:27 is a query that should be blocked, but the other
queries are valid query. Nevertheless, named notifies blocklistd.
Thank you for reading my poor English.
Yoshitaka Tokugawa
05:04:00.902087 IP 78.47.149.66.45743 > 219.166.13.186.53: 25208% [1au]
AAAA? bsd1.YakuMO.co.jp. (46)
Apr 20 05:04:00 tamgw blocklistd[23684]: processing type=1 fd=7
remote=78.47.149.66:45743 msg=checkcacheacces uid=0 gid=0
05:04:00.903961 IP 219.166.13.186.53 > 78.47.149.66.45743: 25208*- 1/3/2
AAAA 2400:4010:43d:d01::2 (192)
05:04:01.166475 IP 78.47.119.231.38418 > 219.166.13.186.53: 48937% [1au]
NS? tOkUGAwA-dOrMiTORy.jP. (50)
Apr 20 05:04:01 tamgw blocklistd[23684]: processing type=1 fd=7
remote=78.47.119.231:38418 msg=checkcacheacces uid=0 gid=0
05:04:01.168275 IP 219.166.13.186.53 > 78.47.119.231.38418: 48937*-
3/0/1 NS tish.tokugawa.org., NS bsd1.yakumo.co.jp., NS
tamgw.tokugawa.or.jp. (173)
05:04:01.182865 IP 78.47.119.231.59328 > 219.166.13.186.53: 53762% [1au]
AAAA? tAmgW.ToKugAwa.Or.JP. (49)
Apr 20 05:04:01 tamgw blocklistd[23684]: processing type=1 fd=7
remote=78.47.119.231:59328 msg=checkcacheacces uid=0 gid=0
05:04:01.184640 IP 219.166.13.186.53 > 78.47.119.231.59328: 53762*-
1/3/2 AAAA 2400:4100:100:3c01::2 (195)
05:04:01.186981 IP 78.47.119.231.61462 > 219.166.13.186.53: 5136% [1au]
AAAA? bsd1.yAKumo.co.jP. (46)
Apr 20 05:04:01 tamgw blocklistd[23684]: processing type=1 fd=7
remote=78.47.119.231:61462 msg=checkcacheacces uid=0 gid=0
05:04:01.188644 IP 219.166.13.186.53 > 78.47.119.231.61462: 5136*- 1/3/2
AAAA 2400:4010:43d:d01::2 (192)
05:04:14.023601 IP 203.178.139.60.55067 > 219.166.13.186.53: 22817+ ANY?
yakumo.co.jp. (30)
Apr 20 05:04:14 tamgw blocklistd[23684]: processing type=1 fd=7
remote=203.178.139.60:55067 msg=checkcacheacces uid=0 gid=0
05:04:14.025501 IP 219.166.13.186.53 > 203.178.139.60.55067: 22817*-
10/0/3 SOA, NS tish.tokugawa.org., NS bsd1.yakumo.co.jp., NS
tamgw.tokugawa.or.jp., A 219.163.48.122, MX tamgw.tokugawa.or.jp. 20, MX
bsd2.yakumo.co.jp. 5, MX hpms.tokugawa.org. 10, TXT "v=spf1
ip4:219.163.48.112/28 ip4:219.166.13.184/29 ip6:2400:4100:0100:3c00::/56
ip6:2400:4010:043d:0c00::/55 -all", TXT
"google-site-verification=ygRShFrbX51KmGCjQ9hDOiMIb_zp-kdQGwKT4axPNvw" (506)
05:04:27.488213 IP 203.178.139.60.55034 > 219.166.13.186.53: 43181+ ANY?
sl. (20)
Apr 20 05:04:27 tamgw blocklistd[23684]: processing type=1 fd=7
remote=203.178.139.60:55034 msg=checkcacheacces uid=0 gid=0
pr 20 05:04:27 tamgw named[5699]: client @0x7248c66e8d70
203.178.139.60#55034 (sl): query (cache) 'sl/ANY/IN' denied
(allow-query-cache did not match)
05:04:27.490088 IP 219.166.13.186.53 > 203.178.139.60.55034: 43181
Refused- 0/0/0 (20)
05:04:28.685961 IP 80.0.248.62.28949 > 219.166.13.186.53: 7080 [1au] A?
www.tokugawa-art-museum.jp. (55)
Apr 20 05:04:28 tamgw blocklistd[23684]: processing type=1 fd=7
remote=80.0.248.62:28949 msg=checkcacheacces uid=0 gid=0
05:04:28.686541 IP 219.166.13.186.53 > 80.0.248.62.28949: 7080*- 1/3/1 A
150.60.27.115 (173)
On 2024/04/20 0:40, Christos Zoulas wrote:
> The following reply was made to PR bin/58170; it has been noted by GNATS.
>
> From: Christos Zoulas <christos@zoulas.com>
> To: Robert Elz <kre@munnari.OZ.AU>
> Cc: gnats-bugs@netbsd.org,
> Christos Zoulas <christos@netbsd.org>,
> netbsd-bugs@netbsd.org,
> toku@tokugawa.org
> Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
> Date: Fri, 19 Apr 2024 11:38:01 -0400
>
> I guess the best way to find out is to turn on logging and look at the =
> log file :-)
>
> christos
>
> > On Apr 19, 2024, at 9:38=E2=80=AFAM, Robert Elz <kre@munnari.OZ.AU> =
> wrote:
> >=20
> > Date: Fri, 19 Apr 2024 08:33:42 -0400
> > From: Christos Zoulas <christos@zoulas.com>
> > Message-ID: <5F2DA85C-AC6A-499C-A1DC-23921081C54B@zoulas.com>
> >=20
> > | I think we should, since the querier has no way to know that there
> > | is an ACL preventing the query so this is not an abuse.
> >=20
> > I don't know what it takes to install the block, but the typical way
> > this would happen is if a client was using the wrong DNS server as its
> > back end. If that's what is happening (many queries, all being sent
> > to the wrong server) then it may not be abuse, but blocking that =
> client
> > is still a reasonable thing to do.
> >=20
> > If it is just an occasional query (like someone running dig and =
> specifying
> > a particular server) then a block might be an over reaction.
> >=20
> > If the server is supposed to be handling those queries, then its =
> config
> > should be fixed to allow them.
> >=20
> > kre
>
From: Christos Zoulas <christos@zoulas.com>
To: gnats-bugs@netbsd.org
Cc: Christos Zoulas <christos@netbsd.org>,
gnats-admin@netbsd.org,
netbsd-bugs@netbsd.org,
toku@tokugawa.org
Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
Date: Fri, 19 Apr 2024 16:56:14 -0400
--Apple-Mail=_6D0913D6-19FA-48B0-BC06-A47E016EC76C
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=us-ascii
I understand now. https://kb.isc.org/docs/aa-00503
We should not block when we deny a cached query which is what I committed
to head.
Thanks,
christos
--Apple-Mail=_6D0913D6-19FA-48B0-BC06-A47E016EC76C
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
charset=us-ascii
<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">I understand now. <a href="https://kb.isc.org/docs/aa-00503">https://kb.isc.org/docs/aa-00503</a><div>We should not block when we deny a cached query which is what I committed</div><div>to head.</div><div><br></div><div>Thanks,</div><div><br></div><div>christos<br id="lineBreakAtBeginningOfMessage"><div><br></div></div></body></html>
--Apple-Mail=_6D0913D6-19FA-48B0-BC06-A47E016EC76C--
From: "Takahiro Kambe" <taca@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc:
Subject: PR/58170 CVS commit: pkgsrc/net/bind916
Date: Sat, 20 Apr 2024 14:01:08 +0000
Module Name: pkgsrc
Committed By: taca
Date: Sat Apr 20 14:01:08 UTC 2024
Modified Files:
pkgsrc/net/bind916: Makefile distinfo
pkgsrc/net/bind916/patches: patch-lib_ns_query.c
Log Message:
net/bind916: fix blocklist handling
Apply change of revision 1.21 in NetBSD base which fixed PR bin/58170.
Bump PKGREVISION.
To generate a diff of this commit:
cvs rdiff -u -r1.71 -r1.72 pkgsrc/net/bind916/Makefile
cvs rdiff -u -r1.55 -r1.56 pkgsrc/net/bind916/distinfo
cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind916/patches/patch-lib_ns_query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
From: "Takahiro Kambe" <taca@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc:
Subject: PR/58170 CVS commit: pkgsrc/net/bind918
Date: Sat, 20 Apr 2024 14:02:40 +0000
Module Name: pkgsrc
Committed By: taca
Date: Sat Apr 20 14:02:40 UTC 2024
Modified Files:
pkgsrc/net/bind918: Makefile distinfo
pkgsrc/net/bind918/patches: patch-lib_ns_query.c
Log Message:
net/bind918: fix blocklist handling
Apply change of revision 1.21 in NetBSD base which fixed PR bin/58170.
Bump PKGREVISION.
To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.17 -r1.18 pkgsrc/net/bind918/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind918/patches/patch-lib_ns_query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
From: "Benny Siegert" <bsiegert@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc:
Subject: PR/58170 CVS commit: [pkgsrc-2024Q1] pkgsrc/net/bind918
Date: Tue, 23 Apr 2024 16:18:48 +0000
Module Name: pkgsrc
Committed By: bsiegert
Date: Tue Apr 23 16:18:48 UTC 2024
Modified Files:
pkgsrc/net/bind918 [pkgsrc-2024Q1]: Makefile distinfo
pkgsrc/net/bind918/patches [pkgsrc-2024Q1]: patch-lib_ns_query.c
Log Message:
Pullup ticket #6851 - requested by taca
net/bind918: blocklist handling fix (PR bin/58170)
Revisions pulled up:
- net/bind918/Makefile 1.29-1.31
- net/bind918/distinfo 1.17-1.18
- net/bind918/patches/patch-lib_ns_query.c 1.2
---
Module Name: pkgsrc
Committed By: wiz
Date: Fri Apr 5 14:01:01 UTC 2024
Modified Files:
pkgsrc/audio/forked-daapd: Makefile
pkgsrc/audio/mixxx: Makefile
pkgsrc/audio/strawberry: Makefile
pkgsrc/audio/termusic: Makefile
pkgsrc/biology/plinkseq: Makefile
pkgsrc/chat/ekg: Makefile
pkgsrc/chat/libgadu: Makefile buildlink3.mk
pkgsrc/chat/mumble: Makefile
pkgsrc/databases/mysql80-server: Makefile
pkgsrc/databases/postgresql-postgis2: Makefile
pkgsrc/devel/compizconfig-backend-gconf: Makefile buildlink3.mk
pkgsrc/devel/libcompizconfig: Makefile buildlink3.mk
pkgsrc/devel/protobuf: buildlink3.mk
pkgsrc/devel/protobuf-c: Makefile buildlink3.mk
pkgsrc/devel/py-compizconfig: Makefile buildlink3.mk
pkgsrc/finance/bitcoin: Makefile
pkgsrc/geography/qgis: Makefile
pkgsrc/graphics/digikam: Makefile
pkgsrc/graphics/opencv: Makefile buildlink3.mk
pkgsrc/graphics/opencv-contrib-face: Makefile buildlink3.mk
pkgsrc/graphics/py-Willow: Makefile
pkgsrc/misc/marble: Makefile
pkgsrc/multimedia/vlc: Makefile
pkgsrc/net/bind916: Makefile
pkgsrc/net/bind918: Makefile
pkgsrc/net/frr: Makefile
pkgsrc/net/grpc: Makefile buildlink3.mk
pkgsrc/net/kopete: Makefile
pkgsrc/net/mosh: Makefile
pkgsrc/net/py-grpcio: Makefile
pkgsrc/net/py-grpcio-tools: Makefile
pkgsrc/net/qt6-qtgrpc: Makefile buildlink3.mk
pkgsrc/net/ratman: Makefile
pkgsrc/net/unbound: Makefile
pkgsrc/sysutils/collectd-grpc: Makefile
pkgsrc/sysutils/collectd-pinba: Makefile
pkgsrc/sysutils/collectd-riemann: Makefile
pkgsrc/sysutils/collectd-write_prometheus: Makefile
pkgsrc/sysutils/riemann-client: Makefile
pkgsrc/wm/ccsm: Makefile
Log Message:
*: recursive bump for protobuf 26.1
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Apr 18 13:37:53 UTC 2024
Modified Files:
pkgsrc/net/bind918: Makefile distinfo
Log Message:
net/bind918: update to 9.18.62
9.18.26 (2024-04-17)
6364. [protocol] Add RESOLVER.ARPA to the built in empty zones.
[GL #4580]
6363. [bug] dig/mdig +ednsflags=<non-zero-value> did not re-enable
EDNS if it had been disabled. [GL #4641]
6361. [bug] Some invalid ISO 8601 durations were accepted
erroneously. [GL #4624]
6360. [bug] Don't return static-stub synthesised NS RRset.
[GL #4608]
6359. [bug] Fix bug in Depends (keymgr_dep) function. [GL #4552]
6351. [protocol] Support for the RESINFO record type has been added.
[GL #4413]
6346. [bug] Cleaned up several minor bugs in the RBTDB dbiterator
implementation. [GL !8741]
6345. [bug] Added missing dns_rdataset_disassociate calls in
validator.c:findnsec3proofs. [GL #4571]
6340. [test] Fix incorrectly reported errors when running tests
with `make test` on platforms with older pytest.
[GL #4560]
6338. [func] Optimize slabheader placement, so the infrastructure
records are put in the beginning of the slabheader
linked list. [GL !8675]
6334. [doc] Improve ARM parental-agents definition. [GL #4531]
6333. [bug] Fix the DNS_GETDB_STALEFIRST flag, which was defined
incorrectly in lib/ns/query.c. [GL !8683]
6330. [doc] Update ZSK minimum lifetime documentation in ARM, also
depends on signing delay. [GL #4510]
6328. [func] Add workaround to enforce dynamic linker to pull
jemalloc earlier than libc to ensure all memory
allocations are done via jemalloc. [GL #4404]
6326. [bug] Changes to "listen-on" statements were ignored on
reconfiguration unless the port or interface address was
changed, making it impossible to change a related
listener transport type. Thanks to Thomas Amgarten.
[GL #4518] [GL #4528]
6325. [func] Expose the TCP client count in statistics channel.
[GL #4425]
6324. [bug] Fix a possible crash in 'dig +nssearch +nofail' and
'host -C' commands when one of the name servers returns
SERVFAIL. [GL #4508]
6313. [bug] When dnssec-policy is in effect the DNSKEY's TTLs in
the zone where not being updated to match the policy.
This lead to failures when DNSKEYs where updated as the
TTLs mismatched. [GL #4466]
---
Module Name: pkgsrc
Committed By: taca
Date: Sat Apr 20 14:02:40 UTC 2024
Modified Files:
pkgsrc/net/bind918: Makefile distinfo
pkgsrc/net/bind918/patches: patch-lib_ns_query.c
Log Message:
net/bind918: fix blocklist handling
Apply change of revision 1.21 in NetBSD base which fixed PR bin/58170.
Bump PKGREVISION.
To generate a diff of this commit:
cvs rdiff -u -r1.28 -r1.28.2.1 pkgsrc/net/bind918/Makefile
cvs rdiff -u -r1.16 -r1.16.2.1 pkgsrc/net/bind918/distinfo
cvs rdiff -u -r1.1 -r1.1.12.1 pkgsrc/net/bind918/patches/patch-lib_ns_query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
From: "Benny Siegert" <bsiegert@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc:
Subject: PR/58170 CVS commit: [pkgsrc-2024Q1] pkgsrc/net/bind916
Date: Tue, 23 Apr 2024 16:18:54 +0000
Module Name: pkgsrc
Committed By: bsiegert
Date: Tue Apr 23 16:18:54 UTC 2024
Modified Files:
pkgsrc/net/bind916 [pkgsrc-2024Q1]: Makefile distinfo
pkgsrc/net/bind916/patches [pkgsrc-2024Q1]: patch-lib_ns_query.c
Log Message:
Pullup ticket #6852 - requested by taca
net/bind916: blocklist handling fix (PR bin/58170)
Revisions pulled up:
- net/bind916/Makefile 1.70-1.72
- net/bind916/distinfo 1.55-1.56
- net/bind916/patches/patch-lib_ns_query.c 1.3
---
Module Name: pkgsrc
Committed By: wiz
Date: Fri Apr 5 14:01:01 UTC 2024
Modified Files:
pkgsrc/audio/forked-daapd: Makefile
pkgsrc/audio/mixxx: Makefile
pkgsrc/audio/strawberry: Makefile
pkgsrc/audio/termusic: Makefile
pkgsrc/biology/plinkseq: Makefile
pkgsrc/chat/ekg: Makefile
pkgsrc/chat/libgadu: Makefile buildlink3.mk
pkgsrc/chat/mumble: Makefile
pkgsrc/databases/mysql80-server: Makefile
pkgsrc/databases/postgresql-postgis2: Makefile
pkgsrc/devel/compizconfig-backend-gconf: Makefile buildlink3.mk
pkgsrc/devel/libcompizconfig: Makefile buildlink3.mk
pkgsrc/devel/protobuf: buildlink3.mk
pkgsrc/devel/protobuf-c: Makefile buildlink3.mk
pkgsrc/devel/py-compizconfig: Makefile buildlink3.mk
pkgsrc/finance/bitcoin: Makefile
pkgsrc/geography/qgis: Makefile
pkgsrc/graphics/digikam: Makefile
pkgsrc/graphics/opencv: Makefile buildlink3.mk
pkgsrc/graphics/opencv-contrib-face: Makefile buildlink3.mk
pkgsrc/graphics/py-Willow: Makefile
pkgsrc/misc/marble: Makefile
pkgsrc/multimedia/vlc: Makefile
pkgsrc/net/bind916: Makefile
pkgsrc/net/bind918: Makefile
pkgsrc/net/frr: Makefile
pkgsrc/net/grpc: Makefile buildlink3.mk
pkgsrc/net/kopete: Makefile
pkgsrc/net/mosh: Makefile
pkgsrc/net/py-grpcio: Makefile
pkgsrc/net/py-grpcio-tools: Makefile
pkgsrc/net/qt6-qtgrpc: Makefile buildlink3.mk
pkgsrc/net/ratman: Makefile
pkgsrc/net/unbound: Makefile
pkgsrc/sysutils/collectd-grpc: Makefile
pkgsrc/sysutils/collectd-pinba: Makefile
pkgsrc/sysutils/collectd-riemann: Makefile
pkgsrc/sysutils/collectd-write_prometheus: Makefile
pkgsrc/sysutils/riemann-client: Makefile
pkgsrc/wm/ccsm: Makefile
Log Message:
*: recursive bump for protobuf 26.1
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Apr 18 13:39:53 UTC 2024
Modified Files:
pkgsrc/net/bind916: Makefile distinfo
Log Message:
net/bind916: update to 9.16.50
9.16.50 (2024-04-17)
This release marks the end of maintenance for the BIND 9.16 branch.
6364. [protocol] Add RESOLVER.ARPA to the built in empty zones.
[GL #4580]
6338. [func] Optimize slabheader placement, so the infrastructure
records are put in the beginning of the slabheader
linked list. [GL !8675]
---
Module Name: pkgsrc
Committed By: taca
Date: Sat Apr 20 14:01:08 UTC 2024
Modified Files:
pkgsrc/net/bind916: Makefile distinfo
pkgsrc/net/bind916/patches: patch-lib_ns_query.c
Log Message:
net/bind916: fix blocklist handling
Apply change of revision 1.21 in NetBSD base which fixed PR bin/58170.
Bump PKGREVISION.
To generate a diff of this commit:
cvs rdiff -u -r1.69 -r1.69.2.1 pkgsrc/net/bind916/Makefile
cvs rdiff -u -r1.54 -r1.54.2.1 pkgsrc/net/bind916/distinfo
cvs rdiff -u -r1.2 -r1.2.28.1 pkgsrc/net/bind916/patches/patch-lib_ns_query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
>Unformatted:
(Contact us)
$NetBSD: query-full-pr,v 1.47 2022/09/11 19:34:41 kim Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2024
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.
Home