From b8a422f1439942fe1249ae99a423d3e1ea803b63 Mon Sep 17 00:00:00 2001 From: Giulio Benetti Date: Mon, 22 Jun 2026 20:56:02 +0200 Subject: [PATCH] package/bind: security bump version to 9.20.24 Release notes: https://ftp.isc.org/isc/bind9/9.20.24/doc/arm/html/notes.html Changelog: https://ftp.isc.org/isc/bind9/9.20.24/doc/arm/html/changelog.html Fixes CVE-2026-3593. NOTE: Libraries libcap, liburcu are now mandatory. NOTE 2: the bind version 9.18.x series is marked by upstream as end-of-life. This commit switches to the current stable release series 9.20.x. See: https://kb.isc.org/docs/bind-9-end-of-life-dates https://www.isc.org/bind/ Signed-off-by: Giulio Benetti [Julien: add note 2 in commit log] Signed-off-by: Julien Olivain (cherry picked from commit 54f96add94901511862df18e527e456982005b8e) Signed-off-by: Thomas Perale --- package/bind/Config.in | 15 ++++++++++----- package/bind/bind.hash | 4 ++-- package/bind/bind.mk | 4 ++-- 3 files changed, 14 insertions(+), 9 deletions(-) diff --git a/package/bind/Config.in b/package/bind/Config.in index 512e948ca2..6f5f14a6bb 100644 --- a/package/bind/Config.in +++ b/package/bind/Config.in @@ -1,10 +1,14 @@ config BR2_PACKAGE_BIND bool "bind" - depends on BR2_USE_MMU # fork(), libuv + depends on BR2_USE_MMU # fork(), libcap, libuv depends on BR2_TOOLCHAIN_HAS_SYNC_4 # libuv - depends on BR2_TOOLCHAIN_HAS_THREADS_NPTL # libuv + depends on BR2_TOOLCHAIN_HAS_THREADS # liburcu, libuv + depends on BR2_INSTALL_LIBSTDCPP # liburcu depends on !BR2_STATIC_LIBS # libuv depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # libuv + depends on BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS # liburcu + select BR2_PACKAGE_LIBCAP + select BR2_PACKAGE_LIBURCU select BR2_PACKAGE_LIBUV select BR2_PACKAGE_OPENSSL help @@ -44,8 +48,9 @@ config BR2_PACKAGE_BIND_TOOLS endif -comment "bind needs a toolchain w/ NPTL, dynamic library, gcc >= 4.9" +comment "bind needs a toolchain w/ threads, dynamic library, C++, gcc >= 4.9" depends on BR2_USE_MMU depends on BR2_TOOLCHAIN_HAS_SYNC_4 - depends on !BR2_TOOLCHAIN_HAS_THREADS_NPTL || BR2_STATIC_LIBS \ - || !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 + depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS \ + || BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 \ + || BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS diff --git a/package/bind/bind.hash b/package/bind/bind.hash index 766540ee22..a1ff3c6101 100644 --- a/package/bind/bind.hash +++ b/package/bind/bind.hash @@ -1,4 +1,4 @@ -# Verified from https://ftp.isc.org/isc/bind9/9.18.50/bind-9.18.50.tar.xz.asc +# Verified from https://ftp.isc.org/isc/bind9/9.20.24/bind-9.20.24.tar.xz.asc # with key D99CCEAF879747014F038D63182E23579462EFAA -sha256 a24f93be94712a8c11752294410f2f8a2510ec7fdc931d207fc61cdf30e54f4d bind-9.18.50.tar.xz +sha256 989fef1fc88ea59d04cd86f854dca5a4616a20a9968bcdde3c1a3668ab36be08 bind-9.20.24.tar.xz sha256 9734825d67a3ac967b2c2f7c9a83c9e5db1c2474dbe9599157c3a4188749ebd4 COPYRIGHT diff --git a/package/bind/bind.mk b/package/bind/bind.mk index 54870bfa4e..2b8156d0d0 100644 --- a/package/bind/bind.mk +++ b/package/bind/bind.mk @@ -4,7 +4,7 @@ # ################################################################################ -BIND_VERSION = 9.18.50 +BIND_VERSION = 9.20.24 BIND_SOURCE= bind-$(BIND_VERSION).tar.xz BIND_SITE = https://ftp.isc.org/isc/bind9/$(BIND_VERSION) BIND_INSTALL_STAGING = YES @@ -32,7 +32,7 @@ BIND_CONF_OPTS = \ --disable-static \ --with-openssl=$(STAGING_DIR)/usr -BIND_DEPENDENCIES = host-pkgconf libuv openssl +BIND_DEPENDENCIES = host-pkgconf libcap liburcu libuv openssl BIND_CFLAGS = $(TARGET_CFLAGS)