From 09d589ff35c9904ca678becf74e7c6b77967cc3e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Wed, 16 Sep 2026 21:42:22 +0200 Subject: [PATCH] package/bind: security bump version to 9.20.29 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-28 "The BIND 9.20.28 release was withdrawn after the discovery of a regression in it during pre-release testing." https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-29 https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/changelog.html https://seclists.org/oss-sec/2026/q3/801 Fixes CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19667, CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-76163, CVE-2026-77119, CVE-2026-77692, CVE-2026-78301, CVE-2026-80274, CVE-2026-81563 & CVE-2026-81736. Raise the minimum gcc version to 8 to fix a build error found by the Gitlab pipelines which would be introduced by this bump due to upstream commit: https://gitlab.isc.org/isc-projects/bind9/-/commit/a891e7423379e69340e5004a753dc121320ef244 opensslrsa_link.c:53:51: error: initializer element is not constant static const unsigned int rsa_max_modulus_bytes = (rsa_max_modulus_bits + 7) / make[1]: *** [package/pkg-generic.mk:273: /builds/bkuhls/buildroot/br-test-pkg/bootlin-aarch64-glibc-old/build/bind-9.20.29/.stamp_built] Error 2 According to https://stackoverflow.com/a/67000730 the code needs gcc 8. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit 6c781be5062dacab1e1e943df9f2887eef351782) Signed-off-by: Raphaël Mélotte --- package/bind/Config.in | 6 +++--- package/bind/bind.hash | 4 ++-- package/bind/bind.mk | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package/bind/Config.in b/package/bind/Config.in index 4eb024b260..7e691a35ca 100644 --- a/package/bind/Config.in +++ b/package/bind/Config.in @@ -5,7 +5,7 @@ config BR2_PACKAGE_BIND depends on BR2_TOOLCHAIN_HAS_THREADS_NPTL # libuv depends on BR2_INSTALL_LIBSTDCPP # liburcu depends on !BR2_STATIC_LIBS # libuv - depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # libuv + depends on BR2_TOOLCHAIN_GCC_AT_LEAST_8 depends on BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS # liburcu select BR2_PACKAGE_LIBCAP select BR2_PACKAGE_LIBURCU @@ -48,9 +48,9 @@ config BR2_PACKAGE_BIND_TOOLS endif -comment "bind needs a toolchain w/ NPTL, dynamic library, C++, gcc >= 4.9" +comment "bind needs a toolchain w/ NPTL, dynamic library, C++, gcc >= 8" depends on BR2_USE_MMU depends on BR2_TOOLCHAIN_HAS_SYNC_4 depends on BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS depends on !BR2_TOOLCHAIN_HAS_THREADS_NPTL || BR2_STATIC_LIBS \ - || !BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 + || !BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_GCC_AT_LEAST_8 diff --git a/package/bind/bind.hash b/package/bind/bind.hash index 2131f51978..8129fa2d2b 100644 --- a/package/bind/bind.hash +++ b/package/bind/bind.hash @@ -1,4 +1,4 @@ -# Verified from https://ftp.isc.org/isc/bind9/9.20.27/bind-9.20.27.tar.xz.asc +# Verified from https://ftp.isc.org/isc/bind9/9.20.27/bind-9.20.29.tar.xz.asc # with key 706B6C28620E76F91D11F7DF510A642A06C52CEC -sha256 145ab7a50b33a06d9d488b5e668c887e754f42acf8954e2b5dc7e238b080e4a0 bind-9.20.27.tar.xz +sha256 587029508b3b1b43229fae416c97e5543aba45809cefaca98a5004a02a5736c1 bind-9.20.29.tar.xz sha256 9734825d67a3ac967b2c2f7c9a83c9e5db1c2474dbe9599157c3a4188749ebd4 COPYRIGHT diff --git a/package/bind/bind.mk b/package/bind/bind.mk index 2b42e87d62..a05ef6c362 100644 --- a/package/bind/bind.mk +++ b/package/bind/bind.mk @@ -4,7 +4,7 @@ # ################################################################################ -BIND_VERSION = 9.20.27 +BIND_VERSION = 9.20.29 BIND_SOURCE= bind-$(BIND_VERSION).tar.xz BIND_SITE = https://ftp.isc.org/isc/bind9/$(BIND_VERSION) BIND_INSTALL_STAGING = YES