From patchwork Mon Sep 28 18:36:33 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Darsh Kelaiya -X (dkelaiya - E INFOCHIPS PRIVATE LIMITED at Cisco)" X-Patchwork-Id: 99514 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3F56DCA5FA2 for ; Mon, 28 Sep 2026 18:36:48 +0000 (UTC) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.65906.1790620605912467194 for ; Mon, 28 Sep 2026 11:36:46 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: message contains an insecure body length tag" header.i=@cisco.com header.s=iport01 header.b=MPki7/Ln; spf=pass (domain: cisco.com, ip: 173.37.86.76, mailfrom: dkelaiya@cisco.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=7470; q=dns/txt; s=iport01; t=1790620605; x=1791830205; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=J84x+oBICoecKFYTfQ+hPbKJVfNDCNterDkUpaOdxac=; b=MPki7/Ln6CuwlVLbveeUMwaNLPHsj7nmWPGSddnzXTNwR9nzjc9CTu9M lKZfjwllL1+kFW9s6ahkeacM5Nm8/XWL/CJ6ayaK2XwC15nAt5YkWyFj2 Feo3D3QKVzWlsSwwz5raFFD4Qp3eOf3BojFzZEvjDA2h7d58hkuGWPF2c tuJqM/oYMIl4FWxIlrMhq5HhkHsEUoNgt0AS5IDOkNpvyXxHhVqiAi9b3 CeTb6BvuQUf2BYYaQ3CHqDcv9UVyU/gkP0qnDP21GAFf2D1gi2AStabNr XqLP808T31CTwByOV4xxPv82bm7dK5/Jmm8NzujCeeySDNc9ty/vDWm76 w==; X-CSE-ConnectionGUID: 0a34D7u6QXChDTfFungFAA== X-CSE-MsgGUID: J7u238G3S4GfMYqZybB4Lw== X-IPAS-Result: A0BFAgCvsrpq/4v/Ja1aglmCV3VgQ0mWSp4dgX4PAQEBDz0UBAEBhQWOCwImNAkOAQIEAwIDAQEBAQEBAQEBAQEBCgEBBQEBAQIBBwWBDhOGTw2QEgECASoLARgBLSwDAQJaIyGDAgGCdAMRBsJtgXkzgQGDKQExAgHcUgELFAGBOIVAiCNdGAGEfCcbG4FygRWDaYJhAQMBgRQQhn4EgiKBDIFaHogciw9IgR4DWSwBVRMNCgsHBYFmAzUSKhVuMh2BIz4XgQcbBgWBHYEgghkjGTZ6gQlegSspYAEQF4EHggcCglSCAQIBSUMOB0VTCSVBChJHJiIIEgkBExowC4EhOEEJKBwYDUgRLDcVGQQ+bgeQMh6CZXQQCgEHIgKCPQsvkkYmQ5F8oQ8KKIN2jCKVOhozhASBV5JAklSZCI4KllCEaYFoPIFZcBWDIglKGQ+QFYRzgi/HJicyAjsBAQcCBw4DC4FokACBfgEB IronPort-Data: A9a23:fThuM67ANiImEIwckxKhmgxRtC7GchMFZxGqfqrLsTDasY5as4F+v mRJDTiOOP2CNzH2LtxzPdixoUoCvMKGytM1G1Flq381Zn8b8sCt6fZ1gavT04J+CuWZESqLO u1HMoGowPgcFyGa+1H1dOex9RGQ7InQLpLkEunIJyttcgFtTSYlmHpLlvUw6mJSqYDR7zil5 5Wo/KUzBHf/g2QqajNOu/rawP9SlK2aVA0w7wRWic9j5Dcyp1FNZLoDKKe4KWfPQ4U8NoaSW +bZwbilyXjS9hErB8nNuu6TnpoiG+O60aCm0xK6aoD66vRwjnVaPpUTaJLwXXxqZwChxLid/ jniWauYEm/FNoWU8AgUvoIx/ytWZcWq85efSZSzXFD6I0DuKxPRL/tS4E4eZYRDpsooHD93x dcYBAwDQA2FiMyf6efuIgVsrpxLwMjDJogTvDRkiDreF/tjGcqFSKTR7tge1zA17ixMNa+BP IxCNnw1MUmGOkYeUrsUIMpWcOOAinrydzRZuVu9rqss6G+Vxwt0uFToGIePKozTH5gJwi50o ErkoHmjWUE1b+fD5jSgw2uel+XlwQfkDdd6+LqQs6QCbEeo7m4aCQUfSF/9qvm0h1S4Utd3J lcIvDYjpqha3FaqRdn0RRH+uGOesh8Rc95RFfAq5gaQzKbd/weeAC4DVDEpQNs+uck7QDYn2 lOEk5biAiZimLmUUm6GsLCMoDW/PCIYIWMPaWkDVwRt3jX4iJs4ghSKSpNoF7S4y4WvXzrx2 DuN6iM5gt3/kPI26klyxnif6xrEm3QDZlRdCtn/No590j5EWQ== IronPort-HdrOrdr: A9a23:k58gf6kGk9HG6OHs4Kysj10/0+LpDfIa3DAbv31ZSRFFG/FwWf rAoB19726QtN9/YhAdcLy7VZVoIkmsl6Kdn7NwAV7KZmCP0wGVxepZg7cKrQeNJ8SHzJ8/6Y 5QN45jFdb3EV92yez+4AW+DpIc5ePvytHNuQ8bpE0dKz2DrMpbnmBENjo= X-Talos-CUID: 9a23:M1WSlGkU6Vkolot7m2uKKEXUox/XOSXUlyv8fFLmMFZCSJGpR3GN/qxKuuM7zg== X-Talos-MUID: 9a23:D/Qv5Q+KaF8BgNbP5lUad3eQf+U3/v71WG9Wqskptey1LB5hMR3BqCviFw== X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="6.27,128,1787011200"; d="scan'208";a="528812544" Received: from rcdn-l-core-02.cisco.com ([173.37.255.139]) by rcdn-iport-5.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 28 Sep 2026 18:36:44 +0000 Received: from sjc-ads-5675.cisco.com (sjc-ads-5675.cisco.com [10.28.88.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-02.cisco.com (Postfix) with ESMTPS id BFB8A180000F5; Mon, 28 Sep 2026 18:36:44 +0000 (GMT) Received: by sjc-ads-5675.cisco.com (Postfix, from userid 1887444) id 6AE31CC1611; Mon, 28 Sep 2026 11:36:44 -0700 (PDT) From: "Darsh Kelaiya -X (dkelaiya - E INFOCHIPS PRIVATE LIMITED at Cisco)" To: openembedded-core@lists.openembedded.org Cc: Jaipaul Cheernam , Richard Purdie , Darsh Kelaiya Subject: [OE-core][wrynose][PATCH 1/2] bind: upgrade 9.20.26 -> 9.20.27 Date: Mon, 28 Sep 2026 11:36:33 -0700 Message-Id: <20260928183634.1877978-1-dkelaiya@cisco.com> X-Mailer: git-send-email 2.35.6 MIME-Version: 1.0 X-Outbound-Client-TLS: ANONYMOUS;sjc-ads-5675.cisco.com [10.28.88.189];TLSv1.3;TLS_AES_256_GCM_SHA384;256 X-Outbound-SMTP-Client: 10.28.88.189, sjc-ads-5675.cisco.com X-Outbound-Node: rcdn-l-core-02.cisco.com List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 28 Sep 2026 18:36:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246784 From: Jaipaul Cheernam ChangeLog: https://bind9.readthedocs.io/en/stable/changelog.html#bind-9-20-27 Signed-off-by: Jaipaul Cheernam Signed-off-by: Richard Purdie (cherry picked from commit 6de1243270216428d7eefdbc0ea5657e0aeb3a48) Signed-off-by: Darsh Kelaiya --- .../bind/bind/0001-avoid-start-failure-with-bind-user.patch | 2 +- .../0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch | 2 +- ...0001-named-lwresd-V-and-start-log-hide-build-options.patch | 4 ++-- ...bind-ensure-searching-for-json-headers-searches-sysr.patch | 4 ++-- meta/recipes-connectivity/bind/bind/conf.patch | 2 +- .../bind/bind/init.d-add-support-for-read-only-rootfs.patch | 2 +- .../bind/bind/make-etc-initd-bind-stop-work.patch | 2 +- .../bind/{bind_9.20.26.bb => bind_9.20.27.bb} | 2 +- 8 files changed, 10 insertions(+), 10 deletions(-) rename meta/recipes-connectivity/bind/{bind_9.20.26.bb => bind_9.20.27.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch index 7ed4c5fd2f9..30da1e9fd3e 100644 --- a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch +++ b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch @@ -1,4 +1,4 @@ -From a67ac281cd86d8d9ca27e64a5944deb5578e5087 Mon Sep 17 00:00:00 2001 +From 7682cbc2fa624fbeeb088736e154090d92c8b524 Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Mon, 15 Oct 2018 16:55:09 +0800 Subject: [PATCH] avoid start failure with bind user diff --git a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch index da4cdef696e..f1d8a8e5691 100644 --- a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch +++ b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch @@ -1,4 +1,4 @@ -From 16608520c9d946223404165732eacd79b59de471 Mon Sep 17 00:00:00 2001 +From a633e336c248ceab41d3182848b65c95e90ef88c Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Fri, 10 Apr 2026 23:33:49 +0000 Subject: [PATCH] m4: Backport ax_prog_cc_for_build.m4 macros diff --git a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch index 07acce9cba0..da4057064e1 100644 --- a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch +++ b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch @@ -1,4 +1,4 @@ -From d925183807ae182cf332124ff5a617d257e184f9 Mon Sep 17 00:00:00 2001 +From 4b870f60338fe45e036b8a76d47f053338920048 Mon Sep 17 00:00:00 2001 From: Hongxu Jia Date: Mon, 27 Aug 2018 21:24:20 +0800 Subject: [PATCH] `named/lwresd -V' and start log hide build options @@ -20,7 +20,7 @@ Signed-off-by: Armin Kuster 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index af020f0..f461229 100644 +index 56bca5b..4fd62ed 100644 --- a/configure.ac +++ b/configure.ac @@ -35,7 +35,7 @@ AC_DEFINE([PACKAGE_VERSION_EXTRA], ["][bind_VERSION_EXTRA]["], [BIND 9 Extra par diff --git a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch index 4e90e972715..9adc101247e 100644 --- a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch +++ b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch @@ -1,4 +1,4 @@ -From af229781e60d6779c76d5a61d26a4597b2a42f6c Mon Sep 17 00:00:00 2001 +From f3736e5535236cf978fd368b6905098ff6e4fd84 Mon Sep 17 00:00:00 2001 From: Paul Gortmaker Date: Tue, 9 Jun 2015 11:22:00 -0400 Subject: [PATCH] bind: ensure searching for json headers searches sysroot @@ -32,7 +32,7 @@ Signed-off-by: Paul Gortmaker 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index f47ce7b..af020f0 100644 +index c06a0d7..56bca5b 100644 --- a/configure.ac +++ b/configure.ac @@ -872,7 +872,7 @@ AS_CASE([$with_lmdb], diff --git a/meta/recipes-connectivity/bind/bind/conf.patch b/meta/recipes-connectivity/bind/bind/conf.patch index 3425742d1ba..803456c0b33 100644 --- a/meta/recipes-connectivity/bind/bind/conf.patch +++ b/meta/recipes-connectivity/bind/bind/conf.patch @@ -1,4 +1,4 @@ -From bde3a4cb010f459a9ef92817c7e6e6e2d871794a Mon Sep 17 00:00:00 2001 +From 450187e8feac041de02afd4c0c9039cc41e04cb9 Mon Sep 17 00:00:00 2001 From: Qing He Date: Tue, 30 Nov 2010 13:35:42 +0800 Subject: [PATCH] bind: add new recipe diff --git a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch index 9b55afb5d3b..a2c1fbb8f70 100644 --- a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch +++ b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch @@ -1,4 +1,4 @@ -From 8876e722beda701a0de021360ff381347120c6ff Mon Sep 17 00:00:00 2001 +From 582334d31432969be7e10906de7540f1dc64b17e Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Thu, 27 Mar 2014 02:34:41 +0000 Subject: [PATCH] init.d: add support for read-only rootfs diff --git a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch index 33d5d34f158..dc1f8f5a9a6 100644 --- a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch +++ b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch @@ -1,4 +1,4 @@ -From 26c988eee9d2eae7c7dec8c529176352017b2ce1 Mon Sep 17 00:00:00 2001 +From 50601a7ee8fd19ddbe9a592c57ae6197782d4c2f Mon Sep 17 00:00:00 2001 From: Roy Li Date: Thu, 15 Nov 2012 02:27:54 +0000 Subject: [PATCH] bind: make "/etc/init.d/bind stop" work diff --git a/meta/recipes-connectivity/bind/bind_9.20.26.bb b/meta/recipes-connectivity/bind/bind_9.20.27.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.20.26.bb rename to meta/recipes-connectivity/bind/bind_9.20.27.bb index fe2ae3f002f..6d2b88e0123 100644 --- a/meta/recipes-connectivity/bind/bind_9.20.26.bb +++ b/meta/recipes-connectivity/bind/bind_9.20.27.bb @@ -21,7 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch \ " -SRC_URI[sha256sum] = "55248def0f870c4c46b3de72978ea972615131516663188a4564dca1d20bf350" +SRC_URI[sha256sum] = "145ab7a50b33a06d9d488b5e668c887e754f42acf8954e2b5dc7e238b080e4a0" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2 From patchwork Mon Sep 28 18:36:34 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Darsh Kelaiya -X (dkelaiya - E INFOCHIPS PRIVATE LIMITED at Cisco)" X-Patchwork-Id: 99515 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4CEAECA5FA3 for ; Mon, 28 Sep 2026 18:36:48 +0000 (UTC) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.65907.1790620605939992746 for ; Mon, 28 Sep 2026 11:36:46 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: message contains an insecure body length tag" header.i=@cisco.com header.s=iport01 header.b=A8prex5N; spf=pass (domain: cisco.com, ip: 173.37.86.73, mailfrom: dkelaiya@cisco.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=11706; q=dns/txt; s=iport01; t=1790620605; x=1791830205; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=EOXNOQmTWHPtXTTnKmRXryCoEM9VedKJKRecVWwx3Zc=; b=A8prex5NsbJNdmHz6yCxGWYHVAcKDK6YLPdbjySPb8UWGMHM6Q3uz2EI 3lrCFbp3sXEvJnf7l0HEptXuVobsdXnrFGcbUjigxUAULkOzZXhgXPUBF TntTvAXa7zRmHstEalQqXhZwdb39lGuqKgKpb7whegD1Fmk8V3hMS4X5t QUVIV+ipCd9xAZoC+TMpPyiNH1LlrGi8+Id2eidBOu4xaWgrGUI3KtQ0c 781ypUBH8m48UB+ACZT/0S1gLAlUH6LFL6qD6K/YDBhxWvkserG4qL1hH PrRarBKsvEDeh5g2iXTL1MaQx+RDVe15d/vZfX+IAJPofMELDAJLjlYur Q==; X-CSE-ConnectionGUID: dEKS/l40SMuWG2TATh5lNw== X-CSE-MsgGUID: BF3Qm5G8SEGFxEc7yFj5WQ== X-IPAS-Result: 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 IronPort-Data: A9a23:IkjCB6iuOrS9WP9I6MBwC6atX161HREKZh0ujC45NGQN5FlHY01je htvXzvVbq2NYGL8fosjbN7k9EkPupSGnNFnSlFrrS5kQypjpJueD7x1DKtf0wB+jyHnZBg6h ynLQoCYdKjYdleF+FHwdOCn8ikkvU2xbuKUIPbePSxsThNTRi4kiBZy88Y0mYcAbeKRW2thg vus5ZeAULOZ82QsaDxMuvjT8EkHUMna4Vv0gHRvPZing3eG/5UlJMp3Db28KXL+Xr5VEoaSL 87fzKu093/u5BwkDNWoiN7TKiXmlZaLYGBiIlIPM0STqkAqSh4ai87XB9JAAatjsAhlqvgqo Dl7WTNcfi9yVkHEsLx1vxC1iEiSN4UekFPMCSDXXcB+UyQqflO0q8iCAn3aMqUU18VMRmUSr cc9NQ8iNCyqu+LrxJSkH7wEasQLdKEHPasFsX1miDWcBvE8TNWbEuPB5MRT23E7gcUm8fT2P pVCL2EwKk6dPlsWZgl/5JEWxI9EglHzcDBcoVOErII84nPYy0p6172F3N/9J4XWHpkMwB3Jz o7A107XWSgfafPP8heq3GKBjbDesyGmZ7tHQdVU8dYv2jV/3Fc7EhwdVVKhrb+hl1SyWt93L 00S5zogqrU0+EW3T977GRqirxasuQYRXddVGeA25AyBj6HT+QuxAmkfUiUHb8QrssIzTzEm2 lKF2dTzClRSXKa9U3mR8PKQ6Di1IyVQdT5Ebi4fRgxD6N7myG0usi/yoh9YOPbdprXI9fvYm lhmcABWa20vsPM2 IronPort-HdrOrdr: A9a23:cCh3Ta9T03wdDyKRF/Ruk+D6I+orL9Y04lQ7vn2ZhyY7TiX+rb HIoB11737JYVoqNU3I3OrwWpVoIkmskaKdn7NwAV7KZmCP0wGVxcNZnO7fKlbbdREWmNQw6U 4ZSdkcNPTASX5nkM39/A60V/wkwNWB7eSUoN229QYKcemvAJsQlzuQzW2gYzRLeDU= X-Talos-CUID: 9a23:XGLlY24kaXA8T/ffHNss+GM3IYchLiXm6WrvDBWEIFppFbmzVgrF X-Talos-MUID: 9a23:qI/ldwuoa6MlXhsyq82nrh85DcI1zPSVJW8jgbgN5NiqN3FPAmLI X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="6.27,129,1787011200"; d="scan'208";a="514341639" Received: from rcdn-l-core-09.cisco.com ([173.37.255.146]) by rcdn-iport-2.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 28 Sep 2026 18:36:44 +0000 Received: from sjc-ads-5675.cisco.com (sjc-ads-5675.cisco.com [10.28.88.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-09.cisco.com (Postfix) with ESMTPS id C4B991800023D; Mon, 28 Sep 2026 18:36:44 +0000 (GMT) Received: by sjc-ads-5675.cisco.com (Postfix, from userid 1887444) id 6D063CBF201; Mon, 28 Sep 2026 11:36:44 -0700 (PDT) From: "Darsh Kelaiya -X (dkelaiya - E INFOCHIPS PRIVATE LIMITED at Cisco)" To: openembedded-core@lists.openembedded.org Cc: Richard Purdie , Darsh Kelaiya Subject: [OE-core][wrynose][PATCH 2/2] bind: upgrade 9.20.27 -> 9.20.29 Date: Mon, 28 Sep 2026 11:36:34 -0700 Message-Id: <20260928183634.1877978-2-dkelaiya@cisco.com> X-Mailer: git-send-email 2.35.6 In-Reply-To: <20260928183634.1877978-1-dkelaiya@cisco.com> References: <20260928183634.1877978-1-dkelaiya@cisco.com> MIME-Version: 1.0 X-Outbound-Client-TLS: ANONYMOUS;sjc-ads-5675.cisco.com [10.28.88.189];TLSv1.3;TLS_AES_256_GCM_SHA384;256 X-Outbound-SMTP-Client: 10.28.88.189, sjc-ads-5675.cisco.com X-Outbound-Node: rcdn-l-core-09.cisco.com List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 28 Sep 2026 18:36:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246785 From: Richard Purdie BIND 9.20.28 ------------ The BIND 9.20.28 release was withdrawn after the discovery of a regression in it during pre-release testing. BIND 9.20.29 ------------ Security Fixes ~~~~~~~~~~~~~~ - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses. ``a0a61dba9e`` - [CVE-2026-19033] Require a TSIG on every message of incoming zone transfers. ``9404cd2b8c`` - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via unrelated NSEC3. ``3bed9c8e9e`` - [CVE-2026-19941] Prevent forged DNSSEC-validated NXDOMAIN responses. ``a36bf58daf`` - [CVE-2026-19666] DNS64 with break-dnssec could cause an assertion failure. ``4cec4965c4`` - [CVE-2026-19667] Reject negative cache records that do not fit in a dns_rdata_t. ``dbf08c8581`` - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs. ``c884cc1ba0`` - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages. ``0d630758c2`` - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0) ``5a24401c5c`` - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver CPU. ``20bbb1639a`` - [CVE-2026-76163] Prevent TKEY queries from terminating named without global options. ``7645138538`` - [CVE-2026-78301] Out-of-zone records in a zone database could be served as authoritative. ``72a10c3a0b`` - [CVE-2026-80274] Crash on wildcard answers carrying both NSEC and NSEC3 proofs. ``0e44451b1a`` - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver cache memory. ``3162df369e`` New Features ~~~~~~~~~~~~ - Add an agent skill for the isc_job/isc_async/isc_work APIs. ``fe32990b06`` Removed Features ~~~~~~~~~~~~~~~~ - Remove unused closest encloser proof caching. ``abd8b5bfd8`` Feature Changes ~~~~~~~~~~~~~~~ - Reject oversized and malformed DNSKEY records up front. ``6c22109924`` Bug Fixes ~~~~~~~~~ - Prevent a crash when using both dns64 and filter-a. ``bce5d10d18`` - Fix update-policy grant external address passing. ``b1e955c326`` - Missing required NSEC3 for delegation not detected. ``e84ed2e9d7`` - Tighten EUI48 and EUI48 text parsing. ``ff50f2cdf1`` - GeoIP ACL state can be stale or wrong after reload. ``63baf425b3`` - Honor DNSSEC policy key tag ranges. ``b82e5834b7`` - Fix double free in mdig when EDNS options are specified. ``af5bd0b0ff`` - Fix a crash when an IXFR falls back to AXFR with updates still pending. ``e34062bc7e`` - Fix DS requests to parental agents over TLS. ``55830d30f6`` - Fix a crash when resolving names below a cached DNAME. ``b94e940f52`` - Rndc-confgen `-q` (quiet) option is documented but doesn't work. ``7e4a7ca1a7`` - Enforce query ACLs for redirect zones and searched DLZs. ``bc69876b2e`` - Check "asnum" validity in GeoIP ACLs. ``28c2bfdc7b`` - Prevent crashes while reporting DNSSEC signing statistics. ``c190514f0a`` - Fix various nits in the netmgr code. ``c28cdad51b`` The MR consists of couple of small fixes and uncaught errors in the Network Manager. :gl:`#6257` :gl:`!12576` - Fix a crash on remote-servers lists that reference themselves. ``aaae614f9d`` - A record from outside a response policy zone could stop named. ``d135513b37`` - "rndc flushtree ." failed to flush the cache. ``96e8b585ed`` - Invalid key-store configuration could abort the DNSSEC tools. ``1d796ab072`` - NSEC signature set could bypass the secure-delegation check. ``c966177f6c`` - Fix a possible nsupdate issue when using GSS-TSIG. ``4ddcab2d3c`` - Fix isccc_alist_define error paths. ``af1349552a`` - Check for empty 'endpoints' list. ``23f58af443`` - Named could crash with a single-element geoip sortlist. ``0e996a4d3b`` - Prevent out-of-bailiwick CNAMEs from evicting cached records. ``cdedd4acd5`` - Restore periodic cleanup of stale resolver address data. ``356f4013f8`` - Fix named-checkconf/named crash with malformed key name. ``9f218f6aaf`` - Fix -Wformat-truncation warning in totext_in_wks() ``f97c2bea40`` - Fix off-by-one errors caused by magic hardcoded values. ``726c6cb795`` - Hmac_verify() now accepts truncated HMACs only when requested. ``c81b111496`` - Prevent resolver crashes while processing DNS over TCP. ``81b3b6d89f`` Signed-off-by: Richard Purdie (cherry picked from commit c366449b3b6cb47dc418cf65340a35ea3a047621) Signed-off-by: Darsh Kelaiya --- .../bind/bind/0001-avoid-start-failure-with-bind-user.patch | 2 +- .../0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch | 2 +- ...0001-named-lwresd-V-and-start-log-hide-build-options.patch | 4 ++-- ...bind-ensure-searching-for-json-headers-searches-sysr.patch | 4 ++-- meta/recipes-connectivity/bind/bind/conf.patch | 2 +- .../bind/bind/init.d-add-support-for-read-only-rootfs.patch | 2 +- .../bind/bind/make-etc-initd-bind-stop-work.patch | 2 +- .../bind/{bind_9.20.27.bb => bind_9.20.29.bb} | 2 +- 8 files changed, 10 insertions(+), 10 deletions(-) rename meta/recipes-connectivity/bind/{bind_9.20.27.bb => bind_9.20.29.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch index 30da1e9fd3e..15796a15fba 100644 --- a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch +++ b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch @@ -1,4 +1,4 @@ -From 7682cbc2fa624fbeeb088736e154090d92c8b524 Mon Sep 17 00:00:00 2001 +From 95141cf9494292fc5645165ef3d5e9e2ed2208c6 Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Mon, 15 Oct 2018 16:55:09 +0800 Subject: [PATCH] avoid start failure with bind user diff --git a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch index f1d8a8e5691..99e781799da 100644 --- a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch +++ b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch @@ -1,4 +1,4 @@ -From a633e336c248ceab41d3182848b65c95e90ef88c Mon Sep 17 00:00:00 2001 +From 06e9624eb7e474a08ed7e1a456bfe9759ba211da Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Fri, 10 Apr 2026 23:33:49 +0000 Subject: [PATCH] m4: Backport ax_prog_cc_for_build.m4 macros diff --git a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch index da4057064e1..80a4f2abded 100644 --- a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch +++ b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch @@ -1,4 +1,4 @@ -From 4b870f60338fe45e036b8a76d47f053338920048 Mon Sep 17 00:00:00 2001 +From f28920a59b658fcda24efde1c45322f785a0b0fe Mon Sep 17 00:00:00 2001 From: Hongxu Jia Date: Mon, 27 Aug 2018 21:24:20 +0800 Subject: [PATCH] `named/lwresd -V' and start log hide build options @@ -20,7 +20,7 @@ Signed-off-by: Armin Kuster 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index 56bca5b..4fd62ed 100644 +index 0bc3965..e1c2b12 100644 --- a/configure.ac +++ b/configure.ac @@ -35,7 +35,7 @@ AC_DEFINE([PACKAGE_VERSION_EXTRA], ["][bind_VERSION_EXTRA]["], [BIND 9 Extra par diff --git a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch index 9adc101247e..323985a4025 100644 --- a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch +++ b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch @@ -1,4 +1,4 @@ -From f3736e5535236cf978fd368b6905098ff6e4fd84 Mon Sep 17 00:00:00 2001 +From f003f396067e6cc1e2ec609b296bb642b8ddf47b Mon Sep 17 00:00:00 2001 From: Paul Gortmaker Date: Tue, 9 Jun 2015 11:22:00 -0400 Subject: [PATCH] bind: ensure searching for json headers searches sysroot @@ -32,7 +32,7 @@ Signed-off-by: Paul Gortmaker 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index c06a0d7..56bca5b 100644 +index 26c442a..0bc3965 100644 --- a/configure.ac +++ b/configure.ac @@ -872,7 +872,7 @@ AS_CASE([$with_lmdb], diff --git a/meta/recipes-connectivity/bind/bind/conf.patch b/meta/recipes-connectivity/bind/bind/conf.patch index 803456c0b33..28ee4ae74d3 100644 --- a/meta/recipes-connectivity/bind/bind/conf.patch +++ b/meta/recipes-connectivity/bind/bind/conf.patch @@ -1,4 +1,4 @@ -From 450187e8feac041de02afd4c0c9039cc41e04cb9 Mon Sep 17 00:00:00 2001 +From 5fc3dfd3f994b5fd97e97837eee2ad808cd8af93 Mon Sep 17 00:00:00 2001 From: Qing He Date: Tue, 30 Nov 2010 13:35:42 +0800 Subject: [PATCH] bind: add new recipe diff --git a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch index a2c1fbb8f70..b373251c47e 100644 --- a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch +++ b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch @@ -1,4 +1,4 @@ -From 582334d31432969be7e10906de7540f1dc64b17e Mon Sep 17 00:00:00 2001 +From 42c109317070d19fda70635b7043cbc6f9ec36ef Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Thu, 27 Mar 2014 02:34:41 +0000 Subject: [PATCH] init.d: add support for read-only rootfs diff --git a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch index dc1f8f5a9a6..74cf947787a 100644 --- a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch +++ b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch @@ -1,4 +1,4 @@ -From 50601a7ee8fd19ddbe9a592c57ae6197782d4c2f Mon Sep 17 00:00:00 2001 +From 2e1314f2e71be15704ba18756250185b36a5c0da Mon Sep 17 00:00:00 2001 From: Roy Li Date: Thu, 15 Nov 2012 02:27:54 +0000 Subject: [PATCH] bind: make "/etc/init.d/bind stop" work diff --git a/meta/recipes-connectivity/bind/bind_9.20.27.bb b/meta/recipes-connectivity/bind/bind_9.20.29.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.20.27.bb rename to meta/recipes-connectivity/bind/bind_9.20.29.bb index 6d2b88e0123..5ce94d597b4 100644 --- a/meta/recipes-connectivity/bind/bind_9.20.27.bb +++ b/meta/recipes-connectivity/bind/bind_9.20.29.bb @@ -21,7 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch \ " -SRC_URI[sha256sum] = "145ab7a50b33a06d9d488b5e668c887e754f42acf8954e2b5dc7e238b080e4a0" +SRC_URI[sha256sum] = "587029508b3b1b43229fae416c97e5543aba45809cefaca98a5004a02a5736c1" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2