[blfs] 03/03: Update to bind{,-utils}-9.20.23 (Security Update)

"Git Owner" ([email protected] via blfs-book Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.beyond.book
Message-ID <[email protected]>
This is an automated email from the git hooks/post-receive script.

git pushed a commit to branch trunk
in repository blfs.

commit aba6910d6195fb62f8e565b3fe269f9a48653d0d
Author: Pierre Labastie <[email protected]>
AuthorDate: Sun Jun 14 22:10:24 2026 +0200

    Update to bind{,-utils}-9.20.23 (Security Update)
    
    Also fix test instructions and dependencies.
---
 introduction/welcome/changelog.xml |  4 +++
 networking/netutils/bind-utils.xml | 10 +++----
 packages.ent                       |  4 +--
 server/major/bind.xml              | 55 +++++++++++++++++++++++++-------------
 4 files changed, 47 insertions(+), 26 deletions(-)

diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 79fe932e83..42d28e0a99 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -42,6 +42,10 @@
     <listitem>
       <para>June 14th, 2026</para>
       <itemizedlist>
+        <listitem>
+          <para>[pierre] - Update to bind{,-utils}-9.20.23 (Security Update).
+          Fixes <ulink url="&blfs-ticket-root;23332">#23332</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[pierre] - Update to libreoffice-26.2.4.2 (Security Update).
           Fixes <ulink url="&blfs-ticket-root;23238">#23238</ulink>.</para>
diff --git a/networking/netutils/bind-utils.xml b/networking/netutils/bind-utils.xml
index c3e4e64d7e..c605311925 100644
--- a/networking/netutils/bind-utils.xml
+++ b/networking/netutils/bind-utils.xml
@@ -7,8 +7,8 @@
   <!ENTITY bind-download-http   "https://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
   <!ENTITY bind-download-ftp    " ">
   <!ENTITY bind-md5sum          "&bind-md5;">
-  <!ENTITY bind-size            "5.5 MB">
-  <!ENTITY bind-utils-buildsize "118 MB">
+  <!ENTITY bind-size            "5.6 MB">
+  <!ENTITY bind-utils-buildsize "124 MB">
   <!ENTITY bind-utils-time      "0.3 SBU (using parallelism=4)">
 ]>
 
@@ -173,9 +173,9 @@ cp -v doc/man/rndc.8 /usr/share/man/man8</userinput></screen>
       <segtitle>Installed Directories</segtitle>
 
       <seglistitem>
-        <seg>dig, host, nslookup, nsupdate and rndc</seg>
-        <seg>None</seg>
-        <seg>None</seg>
+        <seg>dig, host, nslookup, nsupdate, and rndc</seg>
+        <seg>libdns.so, libisc.so, libisccc.so, libisccfg.so, and libns.so</seg>
+        <seg>/usr/include/{dns,dst,irs,isc,isccc,isccfg,ns}</seg>
       </seglistitem>
     </segmentedlist>
 
diff --git a/packages.ent b/packages.ent
index 58e433eae3..2a3983fbc4 100644
--- a/packages.ent
+++ b/packages.ent
@@ -769,8 +769,8 @@
 <!ENTITY avahi-version                "0.8">
 <!-- for Bind Utilities -->
 <!ENTITY bind-minor-version           "9.20">
-<!ENTITY bind-version                 "&bind-minor-version;.20">
-<!ENTITY bind-md5                     "f27aa3bf9eac4e2b805b3d1f4aecef90">
+<!ENTITY bind-version                 "&bind-minor-version;.23">
+<!ENTITY bind-md5                     "cd1b3abd06b03b2db33a9a843e8cbab1">
 <!ENTITY NetworkManager-minor         "1.56">
 <!ENTITY NetworkManager-version       "&NetworkManager-minor;.1">
 <!ENTITY network-manager-applet-minor "1.34">
diff --git a/server/major/bind.xml b/server/major/bind.xml
index f6945f6c72..a38f0b1ca2 100644
--- a/server/major/bind.xml
+++ b/server/major/bind.xml
@@ -7,9 +7,9 @@
   <!ENTITY bind-download-http "https://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
   <!ENTITY bind-download-ftp  " ">
   <!ENTITY bind-md5sum        "&bind-md5;">
-  <!ENTITY bind-size          "5.5 MB">
-  <!ENTITY bind-buildsize     "163 MB (23 MB installed)">
-  <!ENTITY bind-time          "0.4 SBU (with parallelism=4; about 40 minutes somewhat processor independent, to run the complete test suite)">
+  <!ENTITY bind-size          "5.6 MB">
+  <!ENTITY bind-buildsize     "193 MB (23 MB installed)">
+  <!ENTITY bind-time          "0.4 SBU (with parallelism=4; about 8 minutes somewhat processor independent, to run the complete test suite)">
 ]>
 
 <sect1 id="bind" xreflabel="BIND-&bind-version;">
@@ -110,8 +110,11 @@
     <bridgehead renderas="sect4">Optional (to run the test suite)</bridgehead>
     <para role="optional">
       <xref linkend="perl-net-dns"/>,
-      <ulink url="https://www.dnspython.org/">dnspython</ulink>, and
-      <ulink url="https://hypothesis.readthedocs.io/en/latest/">hypothesis</ulink>
+      <ulink url="https://pypi.org/project/cryptography/">cryptography</ulink>,
+      <ulink url="https://www.dnspython.org/">dnspython</ulink>,
+      <ulink url="https://pypi.org/project/h2/">h2</ulink>,
+      <ulink url="https://hypothesis.readthedocs.io/en/latest/">hypothesis</ulink>, and
+      <ulink url="https://pypi.org/project/pytest-xdist/">pytest-xdist</ulink>
     </para>
 
     <para condition="html" role="usernotes">
@@ -137,6 +140,16 @@
       </para>
     </note>
 -->
+    <para>
+      If you plan to run the tests, a virtual python environment should be
+      set up, so that <command>configure</command> finds the Python binary from
+      that environment. This is needed since this binary is then hardcoded
+      into the test framework:
+    </para>
+
+<screen remap='test'><userinput>python3 -m venv --system-site-packages testenv &amp;&amp;
+source testenv/bin/activate</userinput></screen>
+
     <para>
       Install <application>BIND</application> by running the
       following commands:
@@ -170,20 +183,24 @@ make</userinput></screen>
       The test suite may indicate some skipped tests depending on
       what configuration options are used. Some tests are marked
       <quote>UNTESTED</quote> or do even fail if <xref linkend="perl-net-dns"/>
-      is not installed. One test, <filename>dnssec</filename>, is known to fail.
-      The tests require the
-      <ulink url="https://hypothesis.readthedocs.org/">hypothesis</ulink> and
-      <ulink url="https://www.dnspython.org/">dnspython</ulink> Python modules,
-      which are not in BLFS. To work around this, the instructions below create
-      a Python virtual environment and then install the modules in there prior
-      to running the tests.
+      is not installed. The tests require the
+      <ulink url="https://pypi.org/project/cryptography/">cryptography</ulink>,
+      <ulink url="https://www.dnspython.org/">dnspython</ulink>,
+      <ulink url="https://pypi.org/project/h2/">h2</ulink>,
+      <ulink url="https://hypothesis.readthedocs.org/">hypothesis</ulink>, and
+      <ulink url="https://pypi.org/project/pytest-xdist/">pytest-xdist</ulink>
+      Python modules,
+      which are not in BLFS. Those modules are installed in the virtual
+      environment created earlier prior to running the tests.
       To run the tests, as an unprivileged user, execute:
     </para>
 
-<screen remap="test"><userinput>python3 -m venv --system-site-packages testenv &amp;&amp;
-source testenv/bin/activate                    &amp;&amp;
-pip3 install dnspython hypothesis              &amp;&amp;
-make -k check                                  &amp;&amp;
+<screen remap="test"><userinput>pip3 install cryptography \
+             dnspython    \
+             h2           \
+             hypothesis   \
+             pytest-xdist &amp;&amp;
+make -k check             &amp;&amp;
 deactivate</userinput></screen>
 
     <para>
@@ -315,15 +332,15 @@ install doc/dnssec-guide/* /usr/share/doc/bind-&bind-version;/dnssec-guide</user
       </para>
 
 <screen role="root"><userinput>groupadd -g 20 named &amp;&amp;
-useradd -c "BIND Owner" -g named -s /bin/false -u 20 named &amp;&amp;
-install -d -m770 -o named -g named /srv/named</userinput></screen>
+useradd -c "BIND Owner" -g named -s /bin/false -u 20 named</userinput></screen>
+
 
       <para>
         Set up some files, directories and devices needed by
         <application>BIND</application>:
       </para>
 
-<screen role="root"><userinput>mkdir -p /srv/named &amp;&amp;
+<screen role="root"><userinput>install -d -m770 -o named -g named /srv/named &amp;&amp;
 cd       /srv/named &amp;&amp;
 mkdir -p dev etc/named/{slave,pz} usr/lib/engines var/run/named &amp;&amp;
 mknod /srv/named/dev/null c 1 3 &amp;&amp;

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.