package/bind: security bump version to 9.20.24

Release notes:
https://ftp.isc.org/isc/bind9/9.20.24/doc/arm/html/notes.html

Changelog:
https://ftp.isc.org/isc/bind9/9.20.24/doc/arm/html/changelog.html

Fixes CVE-2026-3593.

NOTE: Libraries libcap, liburcu are now mandatory.

NOTE 2: the bind version 9.18.x series is marked by upstream as
end-of-life. This commit switches to the current stable release
series 9.20.x. See:
https://kb.isc.org/docs/bind-9-end-of-life-dates
https://www.isc.org/bind/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add note 2 in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Giulio Benetti
2026-06-22 20:56:02 +02:00
committed by Julien Olivain
parent 1db28a8687
commit 54f96add94
3 changed files with 14 additions and 9 deletions

View File

@@ -1,10 +1,14 @@
config BR2_PACKAGE_BIND
bool "bind"
depends on BR2_USE_MMU # fork(), libuv
depends on BR2_USE_MMU # fork(), libcap, libuv
depends on BR2_TOOLCHAIN_HAS_SYNC_4 # libuv
depends on BR2_TOOLCHAIN_HAS_THREADS_NPTL # libuv
depends on BR2_TOOLCHAIN_HAS_THREADS # liburcu, libuv
depends on BR2_INSTALL_LIBSTDCPP # liburcu
depends on !BR2_STATIC_LIBS # libuv
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # libuv
depends on BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS # liburcu
select BR2_PACKAGE_LIBCAP
select BR2_PACKAGE_LIBURCU
select BR2_PACKAGE_LIBUV
select BR2_PACKAGE_OPENSSL
help
@@ -44,8 +48,9 @@ config BR2_PACKAGE_BIND_TOOLS
endif
comment "bind needs a toolchain w/ NPTL, dynamic library, gcc >= 4.9"
comment "bind needs a toolchain w/ threads, dynamic library, C++, gcc >= 4.9"
depends on BR2_USE_MMU
depends on BR2_TOOLCHAIN_HAS_SYNC_4
depends on !BR2_TOOLCHAIN_HAS_THREADS_NPTL || BR2_STATIC_LIBS \
|| !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9
depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS \
|| BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 \
|| BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS

View File

@@ -1,4 +1,4 @@
# Verified from https://ftp.isc.org/isc/bind9/9.18.50/bind-9.18.50.tar.xz.asc
# Verified from https://ftp.isc.org/isc/bind9/9.20.24/bind-9.20.24.tar.xz.asc
# with key D99CCEAF879747014F038D63182E23579462EFAA
sha256 a24f93be94712a8c11752294410f2f8a2510ec7fdc931d207fc61cdf30e54f4d bind-9.18.50.tar.xz
sha256 989fef1fc88ea59d04cd86f854dca5a4616a20a9968bcdde3c1a3668ab36be08 bind-9.20.24.tar.xz
sha256 9734825d67a3ac967b2c2f7c9a83c9e5db1c2474dbe9599157c3a4188749ebd4 COPYRIGHT

View File

@@ -4,7 +4,7 @@
#
################################################################################
BIND_VERSION = 9.18.50
BIND_VERSION = 9.20.24
BIND_SOURCE= bind-$(BIND_VERSION).tar.xz
BIND_SITE = https://ftp.isc.org/isc/bind9/$(BIND_VERSION)
BIND_INSTALL_STAGING = YES
@@ -32,7 +32,7 @@ BIND_CONF_OPTS = \
--disable-static \
--with-openssl=$(STAGING_DIR)/usr
BIND_DEPENDENCIES = host-pkgconf libuv openssl
BIND_DEPENDENCIES = host-pkgconf libcap liburcu libuv openssl
BIND_CFLAGS = $(TARGET_CFLAGS)