20:31 Rene Ladan (rene) 

cleanup: Remove expired ports:

2022-03-31 security/revealrk: Deprecate, marked BROKEN on 12+ in 2018
2022-03-31 devel/apache-commons-modeler: Abandoned upstream, last release in
2013
2022-03-31 security/afl: Abandoned upstream, no new release since 2017. Please
consider using security/afl++ instead
2022-03-31 www/mod_line_edit: Abandoned upstream, last release in 2006, Apache
includes mod_sed
2022-03-31 www/myfaces: Unsupported by upstream, released in 2005
2022-03-31 www/mod_backtrace: Abandoned upstream in 2012 (version 2.0)
2022-03-31 security/base: Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
2022-03-31 security/find-zlib: Deprecated, no longer relevant
2022-03-31 security/razorback-clamavNugget: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 security/shimmer: Abandonware, last release in 2008
2022-03-31 security/kripp: Abandonware, upstream returns 404 and last release
was back in 2007
2022-03-31 security/ipfilter2dshield: Abandonware, no word of it on upstream web
site
2022-03-31 security/sha: Obsolete, we have tools in base
2022-03-31 security/gputty: Unfetchable, dead upstream
2022-03-31 java/apache-commons-discovery: Abandoned upstream, last release in
2006
2022-03-31 www/geronimo: Port outdated, unsupported upstream and depends on
deprecated software
2022-03-31 security/isakmpd: 15+ years old and broken on multiple versions
2022-03-31 security/razorback-swfScanner: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 devel/hadoop: Outdated, unsupported upstream
2022-03-31 java/apache-commons-primitives: Abandoned upstream, last release in
2003
2022-03-31 security/l5: Abandonware, broken on amd64 for 10+ years
2022-03-31 security/unicornscan: Very outdated and abandoned, current version in
tree was released in 2004 and last release by upstream in Aug 2013. Please
consider using security/nmap or security/rustscan
2022-03-31 security/gringotts: Abandonware, upstream dead and last release in
2009
2022-03-31 security/axTLS: Very outdated and abandoned, current version in tree
was released in 2013 and last by upstream in 2019
2022-03-31 security/shttpscanner: Abandonware, last release in 2006
2022-03-31 security/sniff: Abandonware, last release around 2000 and dead
upstream. Please consider using net/wireshark
2022-03-31 security/razorback-archiveInflate: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 security/scanssh: Abandonware, last release in 2005. Please consider
using security/nmap or security/rustscan
2022-03-31 security/symbion-sslproxy: Abandonware, last release in 2009 and
inactive upstream
2022-03-31 security/manipulate_data: Abandonware, unsupported upstream
2022-03-31 security/vinetto: Obsolete, targets deprecated Windows operating
systems such as XP and 2003 Server
2022-03-31 security/pbnj: Abandonware, last release in 2006 and reported broken
upstream in 2017 upstream
2022-03-31 databases/jasperreports: Unsupported by upstream, released in 2013
2022-03-31 security/retranslator: Deprecated upstream (EOL)
2022-03-31 security/cp2fwb: Abandonware, used with deprecated software Firewall
Builder.
2022-03-31 security/webscarab: Deprecated by upstream in 2014
2022-03-31 security/pscan: Abandonware, last release in 2000
2022-03-31 security/vnccrack: Outdated and abandoned, last release in 2008.
Upstream is at 2.1 while version in ports is 1.0.0
2022-03-31 security/doscan: Abandonware, last release in 2014. Please consider
using security/masscan or sysutils/pnscan
2022-03-31 security/radamsa: Abandonware, last release in 2017 and marked as
BROKEN in late 2020
2022-03-31 security/trinokiller: Abandonware, dead upstream
2022-03-31 security/spybye: Abandonware, last release in 2008 and no upstream
development
2022-03-31 security/razorback-officeCat: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 textproc/crimson: Deprecated by upstream 2010-08-06
2022-03-31 security/tripwire-131: Deprecated, please consider using
security/tripwire instead
2022-03-31 security/bruteforceblocker: Abandonware, please consider using
security/sshguard
2022-03-31 security/razorback-fsMonitor: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 security/tlswrap: Abandonware, last release in 2007 and dead upstream
2022-03-31 security/sslsniffer: Abandonware, last release in 2001. Please
consider using security/sslsplit or security/sslproxy
2022-03-31 security/strobe: Abandonware, last release around 2000 and dead
upstream. Please consider using security/nmap or security/rustscan
2022-03-31 security/amap: Abandoned upstream, no new release for 10+ years.
Please consider using security/nmap or security/rustscan
2022-03-31 security/ppars: Abandonware, no word of it on upstream web site
2022-03-31 security/zebedee: Abandonware, last release in 2005 and runtime
issues reported upstream
2022-03-31 security/matrixssl: Abandonware, dead upstream
2022-03-31 security/razorback-virusTotal: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 security/stud: Abandonware, marked BROKEN on 12+ in 2019
2022-03-31 security/sslwrap: Abandonware, marked BROKEN on 12+ in 2019
2022-03-31 security/dcetest: Targets deprecated protocol by Microsoft in favour
of .NET
2022-03-31 security/l0phtcrack: Obsolete, Microsoft LANMAN and NT password
hashes are deprecated
2022-03-31 security/slurpie: Abandonware, last release around 2000 and dead
upstream
2022-03-31 security/ike: Abandonware, last release in 2013 and IKEv1 is
considered to be insecure
2022-03-31 security/mussh: Abandonware, last release in 2011 please consider
using security/teleport
2022-03-31 security/razorback-fsWalk: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 security/hackbot: Abandonware, last release in 2003. Please consider
using security/nmap or security/rustscan
2022-03-31 security/phpsecinfo: Abandonware, last release in 2006
2022-03-31 security/libpreludedb: Very outdated, current version in tree was
released back in 2015 and upstream is still active
2022-03-31 security/ipfw2dshield: Abandonware, no word of it on upstream web
site
2022-03-31 security/razorback-fileInject: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 security/gwee: Abandonware, last release 15+ years ago and dead
upstream
2022-03-31 security/pktsuckers: Abandonware, last release from somewhere around
1999
2022-03-31 security/slush: Obsolete, listed as alpha quality, last release
around 2000 and dead upstream
2022-03-31 security/integrit: Abandonware, last release in 2003
2022-03-31 security/razorback-pdfFox: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 security/razorback-yaraNugget: Abandonware, last release in 2012 and
listed as alpha quality by upstream
2022-03-31 security/hlfl: Abandonware, last release in 2003
2022-03-31 security/jbrofuzz: Abandonware, no word of it on upstream web site
and last release was 10 years ago
2022-03-31 security/libpwstor: Abandonware, last release in 2008
2022-03-31 security/smtpscan: Abandonware, last release in 2003 and dead
upstream. Please consider using security/nmap
2022-03-31 security/cisco-torch: Abandonware, dead upstream
2022-03-31 security/amavis-stats: Abandoned, upstream is dead and last release
was back in 2005
2022-03-31 textproc/lucene4: Unsupported by upstream, released in 2015
2022-03-31 java/apache-commons-discovery: Abandoned upstream, last release in
2006
2022-03-31 devel/liballium: Abandonware, last release in 2014 and upstream is
dead
2022-03-31 www/sakai: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-wpvs: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-igeoportal: Depends on expired www/tomcat7
2022-03-31 www/jspwiki: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-wcs: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-csw: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-wms: Depends on expired www/tomcat7
2021-12-31 www/tomcat7: Tomcat 7 is EOL on 2021-03-31. Please upgrade to a later
version
2022-03-31 devel/gitblit: Depends on expired www/tomcat7
2022-03-31 graphics/barbecue: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-wfs: Depends on expired www/tomcat7
2022-03-31 graphics/deegree-wps: Depends on expired www/tomcat7
2022-03-31 sysutils/rubygem-smart_proxy_chef: Depends on expired
sysutils/rubygem-chef-api
2021-12-31 sysutils/rubygem-chef-api: The chef-api gem is no longer maintained.
Please use the supported Chef::ServerAPI library from the Chef gem
2022-03-31 databases/redis5: EOLed upstream
2022-03-31 security/outguess: Abandonware, dead upstream and last release in
2001
2022-01-15 devel/maven3: Outdated, unsupported upstream
2022-01-15 devel/maven33: Outdated, unsupported upstream
2022-03-31 devel/monotone: Abandoned upstream, no release since 2014
2022-03-31 security/botan110: Deprecated upstream, users are recommended to
migrate to 2.x
2022-03-31 net/hping: Deprecated upstream, please consider using net/hping3
instead
2022-03-31 sysutils/autopsy: Very outdated, current version in tree was released
back in 2010 and upstream is still active
2022-03-31 java/cryptix-jce: Abandonware, last release in 2005 and listed as
dead upstream
2022-03-31 net-mgmt/netustad: Abandonware, dead upstream, unfetchable and is
marked BROKEN for 13+
2022-03-31 www/paros: Abandonware, last release in 2006 and dead upstream
2022-03-31 net/queso: Abandonware and obsolete, last release back in 1998.
Please consider using security/nmap instead
2022-03-31 mail/rlytest: Abandonware, last release in 2003 and dead upstream
2022-03-31 net/ssvnc: Abandonware, last release in 2011 and broken functionality
reported upstream
2022-03-31 sysutils/webjob: Abandonware, last release in 2012 and broken on
multiple architectures
2022-03-31 dns/bundy: Project is in hibernation and not recommended to use in
production
2022-03-31 lang/ruby26: Use newer version of Ruby. Ruby 2.6 will reach its EoL
on March 31, 2022
2022-03-31 textproc/kibana6: Uses expired www/node10
2021-04-30 www/node10: Node.js v10.x reaches end-of-life on 2021-04-30, see
https://github.com/nodejs/Release
2022-03-31 comms/zssh: Abandonware, last release in 2003. Please consider using
scp or net/croc instead
2022-03-31 devel/py-dataclasses: Included in Python 3.7 or later
2022-03-31 net-im/diligent: Abandoned upstream, users also confirms port to be
non working
2022-03-31 www/typo3-9: Mainstream support ended 2021-09-30
2022-03-31 databases/adodb: Unsupported upstream, cannot be used with PHP 8.0+
2022-03-31 audio/clementine-player: Last release in 2016, many issue reports
upstream and little to no development for years. Please consider using
audio/strawberry
2022-03-31 security/libprelude: Very outdated, current version in tree was
released back in 2015 and upstream is still active
2022-03-31 www/crp: Abandonware, last release in 2003 and upstream refers to PHP
4.x and is dead
2022-03-31 devel/fb-adb: Last release in 2016 and deprecated by upstream, please
consider using devel/android-tools-adb instead
2022-03-31 comms/o2sms: Abandonware, last release in 2010 and upstream is dead
2022-03-31 comms/p5-SMS-Send-TW-Qma: QMA service provider is no longer around
2022-03-31 comms/p5-SMS-Send-TW-ShareSMS: Service provider is no longer around
2022-03-31 comms/yaps: Service providers are no longer around and/or are no
longer providing this service
2022-03-31 security/arirang: Abandoned upstream and last release was back in
2011
2022-03-31 security/openvpn-mbedtls: mbedTLS only has a minimum viable TLSv1.3
implementation, and OpenVPN-mbedtls does not work on FreeBSD 14-CURRENT
2022-03-31 www/mod_proxy_xml: Abandoned upstream, last release in 2004
2022-03-31 www/mod_xmlns: Abandoned upstream, last release in 2004
2022-03-31 www/mod_authnz_crowd: Abandoned upstream in 2014, doesn't work with
Apache 2.4+
2022-03-31 security/razorback-scriptNugget: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 dns/bind911: End of life, please migrate to a newer version of BIND9
2022-03-31 www/grafana6: EOLed upstream, unfixed vulnerabilities
2022-03-31 security/govpn: Deprecated upstream, reference:
http://www.govpn.info/

    97cf09b

08:27 Matthias Fechner (mfechner) 

textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246

    247c7db

03:50 Xin LI (delphij) 

dns/bind911: Security update to 9.11.37.

Security:	CVE-2021-25220
MFH:		2022Q1
With hat:	secteam

    ddbaee7

13:25 Mathieu Arnold (mat) 

dns/bind911: fix expiration date

    687d315

15:15 Stefan Eßer (se) 

Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)

    bcaf25a

13:49 Rene Ladan (rene) 

dns/bind911: restore port

It is still in extended security mode, see
https://www.isc.org/blogs/bind-update-summer2021/

Reported by:	yasu

    fcceccb

13:40 Rene Ladan (rene) 

cleanup: Remove expired ports:

2021-10-31 devel/sdl_sge: Upstream no longer maintained
2021-12-31 net/appkonference: Outdated, depends on unsupported version of
net/asterisk
2021-12-31 dns/bind911: End of life, please migrate to a newer version of BIND9
2021-12-31 net/zebra: Abandoned upstream, last release in 2005. Consider
migrating to net/frr7 or net/bird2
2021-12-31 audio/osalp: Abandoned upstream, listed as beta and no new release
since 2008
2021-12-31 games/stransball2: Depends on expired devel/sdl_sge
2021-12-31 devel/rubygem-ruby-sdl-ffi: Depends on expired devel/sdl_sge
2021-12-31 devel/rubygem-rubygame: Depends on expired devel/sdl_sge
2021-12-31 devel/ruby-sdl: Depends on expired devel/sdl_sge
2021-12-31 games/magicmaze: Depends on expired devel/sdl_sge
2021-12-31 games/trophy: Depends on expired devel/clanlib1
2021-12-31 devel/clanlib1: Older than expired and removed devel/clanlib
2021-12-31 www/py-django31: Upgrade to Django 3.2+. Mainstream support ended
(April 6, 2021). Extended support ends December 2021. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-prometheus: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 databases/postgis24: Deprecated in favour of databases/postgis3x
2021-12-31 net-im/ekiga: Last release in 2013, not actively maintained
2021-12-31 sysutils/sample: abandoned upstream, incompatible with newer kernels
2021-12-31 www/mediawiki131: Upstream EOL
2021-12-31 www/py-dj31-django-mptt: Extended support of Django 3.1 ends December
2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 net/py-flask-xml-rpc: No longer maintained upstream
2021-12-31 audio/libaacplus: Abandoned upstream, no new release since 2011
2021-12-31 security/obfsclient: https://github.com/Yawning/obfsclient/issues/37
2021-12-31 devel/eric6: Uses EOL Python 2.7 via www/py-qt5-webengine
2021-12-31 www/grafana: No longer maintained upstream, use www/grafana8
2021-12-31 www/py-dj31-django-auth-ldap: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-filter: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-drf-yasg: Extended support of Django 3.1 ends December
2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-js-asset: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-timezone-field: Extended support of Django 3.1
ends December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-tables2: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-taggit: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 graphics/librasterlite: Deprecated in favour of
graphics/librasterlite2
2021-12-31 www/py-dj31-django-cacheops: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 net-mgmt/p0f2: newer version available in net-mgmt/p0f
2021-12-31 devel/libhash: Abandoned upstream
2021-12-31 www/py-dj31-django-debug-toolbar: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 www/py-dj31-django-cors-headers: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 audio/flake: Abandoned upstream, no new release since 2007
2021-12-31 audio/ifp-line: Abandoned upstream, no new release since 2005
2021-12-31 audio/libnjb: Abandoned upstream, no new release since 2011
2021-12-31 audio/lpac: Abandoned upstream in 2003
2021-12-31 multimedia/mmsclient: Abandoned upstream, Microsoft deprecated MMS in
2003
2021-12-31 www/plugger: Uses incompatible plugin interface NPAPI
2021-12-31 audio/mpiosh: Abandoned upstream, no new release since 2004
2021-12-31 audio/rplay: Abandoned upstream, no new releases since 1999
2021-12-31 audio/celt: Deprecated and considered obsolete by upstream in 2016 in
favour of (lib)opus
2021-12-31 security/nacl: Unmaintained by upstream, use libsodium instead
2021-12-31 net-mgmt/unifi-poller: Now called unpoller by upstream
2021-12-31 lang/nml: Abandoned upstream, last release 2004-04-19
2021-12-31 audio/mp32ogg: Abandoned upstream and unfetchable from upstream
2021-12-31 net/libstorj: Deprecated in favour of net/storj due to v3
rearchitecture
2021-12-31 devel/yasm-devel: No need to keep the -devel version due to upstream
inactivity
2021-12-31 www/py-dj31-django-redis: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 devel/py-dj31-django-rq: Extended support of Django 3.1 ends December
2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/
2021-12-31 graphics/libreatlas: Abandoned upstream, no new release since 2012
2021-12-31 www/py-dj31-djangorestframework: Extended support of Django 3.1 ends
December 2021, upgrade to the Django 3.2+ version of this port. See
https://www.djangoproject.com/download/

    75b9550

06:19 Mathieu Arnold (mat) 

dns/bind911: update to 9.11.36

MFH:		2021Q4
Security:	CVE-2021-25219

    b9bbd21

07:32 Mathieu Arnold (mat) 

dns/bind911: update to 9.11.35

Changes:	https://downloads.isc.org/isc/bind9/9.11.35/RELEASE-NOTES-bind-9.11.35.html

    4d1d91a

09:06 Mathieu Arnold (mat) 

dns/bind911: Update to 9.11.34

Changes:	https://downloads.isc.org/isc/bind9/9.11.34/RELEASE-NOTES-bind-9.11.34.html

    c450662

08:12 Mathieu Arnold (mat) 

dns/bind911: Update to 9.11.33.

Changes:	https://downloads.isc.org/isc/bind9/9.11.33/RELEASE-NOTES-bind-9.11.33.html

    c8d7ba7

17:43 Don Lewis (truckman) 

devel/protobuf-c: Bump PORTREVISION of dependent ports

Bump the PORTREVISION of ports that use protobuf-c and bake in the value
of PROTOBUF_C_VERSION*.
Sponsored by:	Farsight Security, Inc.

    0926031

12:51 Mathieu Arnold (mat) 

dns/bind911: Update to 9.11.32

Changes:
https://downloads.isc.org/isc/bind9/9.11.32/RELEASE-NOTES-bind-9.11.32.html

    1028dc3

09:39 Mathieu Arnold (mat) 

dns/bind911: Update to 9.11.31.

MFH:		2021Q2
Security:	CVE-2021-25214
Security:	CVE-2021-25215
Security:	CVE-2021-25216
Sponsored by:	Absolight

    92ca026

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

14:32 mat 

Update to BIND9 9.11.29.

Changes:
https://downloads.isc.org/isc/bind9/9.11.29/RELEASE-NOTES-bind-9.11.29.html

 

07:04 mat 

Update to 9.11.28

Security:	CVE-2020-8625

 

11:13 mat 

Update to 9.11.27

 

21:36 mat 

Update to 9.11.26.

Changes:
https://downloads.isc.org/isc/bind9/9.11.25/RELEASE-NOTES-bind-9.11.25.html

 

13:26 mat 

Fix BIND9 9.11.25's manpages.

 

15:03 mat 

Update to 9.11.25.

Changes:
https://downloads.isc.org/isc/bind9/9.11.25/RELEASE-NOTES-bind-9.11.25.html

 

11:40 mat 

Update to 9.11.24

Changes:	https://downloads.isc.org/isc/bind9/9.11.24/RELEASE-NOTES-bind-9.11.24.html

 

14:42 mat 

Update to 9.11.23.

MFH:		2020Q3 (bugfix)
Changes:	https://downloads.isc.org/isc/bind9/9.11.23/RELEASE-NOTES-bind-9.11.23.html

 

13:32 mat 

Add an option to use the DNS accept filter if available.

PR:		241613
Submitted by:	eugen

 

13:32 mat 

Enabled DNSTAP by default.

The ISC recommends having it by default (it is in the packages they
distribute) and the footprint of the dependecies is very small.

While there, cleanup plists.

PR:		237861
Reported by:	Greg Rivers

 

09:11 mat 

Update to 9.11.22.

MFH:		2020Q3 (security fix)
Security:	CVE-2020-8620, CVE-2020-8621, CVE-2020-8622,
		CVE-2020-8623, CVE-2020-8624

 

13:50 mat 

Fix rndc with LMDB 0.9.26+.

PR:		247950
Submitted by: 	delphij
Reportedy:	david isnic is
Obtained from:	https://gitlab.isc.org/isc-projects/bind9/-/issues/1976
MFH:		2020Q3 (not sure if needed)

 

15:51 mat 

Update to 9,11,21.

Changes:	https://downloads.isc.org/isc/bind9/9.11.21/RELEASE-NOTES-bind-9.11.21.html
MFH:		2020Q3 (bug fixes)

 

03:46 philip 

Update to 9.11.20.

MFH:		2020Q2
Security:	CVE-2020-8619
Submitted by:   mat (maintainer)

 

19:20 sunpoet 

Bump PORTREVISION for devel/json-c json-c

 

09:25 mat 

Update to 9.11.19.

MFH:		2020Q2
Security:	CVE-2020-8616, CVE-2020-8617

 

20:46 mat 

Update to 9.11.18.

MFH:		2020Q2
Changes:	https://downloads.isc.org/isc/bind9/9.11.18/RELEASE-NOTES-bind-9.11.18.html

 

11:33 mat 

Update to 9.11.17.

 

09:09 mat 

Add forgotten CONFLICTS lines.

 

09:07 mat 

Update to 9.11.16.

Changes:	https://downloads.isc.org/isc/bind9/9.11.16/RELEASE-NOTES-bind-9.11.16.html

 

08:55 mat 

Update to 9.11.15.

Changes:	https://downloads.isc.org/isc/bind9/9.11.15/RELEASE-NOTES-bind-9.11.15.html

 

22:37 mat 

Update to 9.11.14.

Changes:	https://downloads.isc.org/isc/bind9/9.11.14/RELEASE-NOTES-bind-9.11.14.html

 

21:41 mat 

Update to 9.11.13.

MFH:		2019Q4
Security:	CVE-2019-6477

 

22:53 mat 

Update to 9.11.12.

Changes:	https://downloads.isc.org/isc/bind9/9.11.12/RELEASE-NOTES-bind-9.11.12.html

 

10:34 bapt 

Drop the ipv6 virtual category for d* category as it is not relevant anymore

 

22:27 mat 

Update to 9.11.11.

While there, add back GEOIP support via the "new" libmaxminddb.

Changes:	https://downloads.isc.org/isc/bind9/9.11.11/RELEASE-NOTES-bind-9.11.11.html

 

17:09 mat 

Update to 9.11.10.

 

16:10 mat 

Update to 9.11.9.

Changes:	https://downloads.isc.org/isc/bind9/9.11.9/RELEASE-NOTES-bind-9.11.9.html

 

16:21 mat 

Make a note about expiration here.

 

22:42 mat 

Update to 9.11.8.

MFH:		2019Q2 (security blanket)
Security:	CVE-2019-6471

 

07:32 mat 

Update to 9.11.7.

 

07:17 mat 

Update to BIND9 9.11.6-P1.

MFH:		2019Q2
Security:	CVE-2018-5743

 

13:04 mat 

Remove conflicts from bind-tools and the server ports.

All servers now depend on the same bind-tools, from the latest BIND9
release.

Chase dependencies to make sure they now depend on the correct port.

Differential Revision:	https://reviews.freebsd.org/D19922

 

08:38 mat 

Make WITH_DEBUG actually build and be as helpful as possible.

 

10:10 mat 

Add BIND 9.14.0 first release candidate.

 

10:02 mat 

Update to 9.11.6.

 

08:52 mat 

Update to 9.11.5-P4.

MFH:		2019Q1 (blanket)
Security:	CVE-2018-5744 CVE-2018-5745 CVE-2019-6465

 

23:25 sunpoet 

Update dns/libidn2 to 2.1.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://gitlab.com/libidn/libidn2/blob/master/NEWS

 

20:58 adamw 

Remove GeoIP-related options. Where possible, replace GeoIP 1 defaults
with GeoIP 2.

Also, as suggested by zi, add an UPDATING note about this.

 

20:39 sunpoet 

Update dns/libidn2 to 2.1.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://gitlab.com/libidn/libidn2/blob/master/NEWS

 

09:06 mat 

Update to 9.11.5-P1, 9.12.3-P1, 9.13.5.

While there:
- Don't disable symbol table generation when building WITH_DEBUG.
- Try and make sure nullfs can really be used in a more robustt and
  centralized way.
- Make sure all changes are sync'ed among all BIND9 ports.

 

10:11 mat 

Make sure gost is really disabled.

It may get picked up from the base OpenSSL and break startup.
While there, make sure the correct engines are used.

Reported by:	Kevin P. Neal (on ports@)

 

10:13 mat 

Remove GOST support from BIND9 9.11 and 9.12.

It was never (widely|really) used, and support for it has been dropped
in OpenSSL starting at 1.1, and BIND9 starting at 9.13.

PR:		231980
Reported by:	mfechner

 

08:05 mat 

Update to 9.11.5.

 

14:12 mat 

Update to 9.11.4-P2.

Switch to libidn2 for idn.

 

22:01 sunpoet 

Update devel/json-c to 0.13.1

- Add my LOCAL to MASTER_SITES
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/json-c/json-c/blob/master/ChangeLog
PR:		231007
Exp-run by:	antoine

 

11:49 mat 

Permit using allow-new-zones, LMDB, and a chrooted environment.

Fixes this obscure and not at all helpful message:
mdb_env_open of '_default.nzd' failed: No such file or directory

PR:		229125
Reported by:	Tomas Ciernik
MFH:		2018Q3

 

21:25 mat 

Update to 9.11.4-P1 and 9.12.2-P1.

Security:	CVE-2018-5740
Sponsored by:	Absolight

 

09:36 mat 

Update BIND9 ports to 9.11.4, 9.12.2 and 9.13.2.

Sponsored by:	Absolight

 

15:42 mat 

Include a patch to fix CVE-2018-5738 in all the BIND9 ports.

MFH:		2018Q2 (blanket)
Security:	CVE-2018-5738
Sponsored by:	Absolight

 

10:31 mat 

Move things around a bit to be more handbook compliant.

Sponsored by:	Absolight

 

12:43 mat 

Add BIND9 9.13.0.

The ISC changed their release model, they are now doing
odd-unstable/even-stable release numbering.  This is a development
version, consider it alpha/beta quality.  The next stable release will
be 9.14.0.

Changes:	https://kb.isc.org/article/AA-01612
Sponsored by:	Absolight

 

13:15 mat 

Add PY_FLAVOR to Python module dependencies.

Sponsored by:	Absolight

 

08:26 mat 

Fix build when LOCALBASE!=/usr/local.

PR:		227554
Submitted by:	John Hein
Sponsored by:	Absolight

 

14:13 mat 

Enable the FILTER_AAAA option by default, the feature was made non
optional in recent versions, so might as well do it in older ones.

PR:		226383
Sponsored by:	Absolight

 

11:21 mat 

Update BIND9 ports to 9.9.12, 9.10.7, 9.11.3 and 9.12.1.

Sponsored by:	Absolight

 

14:29 mat 

Teach named where its pid file should be by default, to be consistent
with the default configuration, rc script, man pages...

PR:		225687
Reported by:	John W. O'Brien
Sponsored by:	Absolight

 

13:44 mat 

Add a TCP_FASTOPEN option (default on) to allow not building it in. [1]

It is annoying because it outputs one line saying it cannot enable
TCP_FASTOPEN when the deamon starts.

While there, discover that FILTER_AAAA is always enabled in 9.12+ and no
longer an option, so remove it.

PR:		217288 [1] (based on)
Reported by:	doktornotor mailinator com
Sponsored by:	Absolight

 

10:43 mat 

Catch up with the conflicts lines in the BIND9 ports.

Sponsored by:	Absolight

 

10:43 mat 

Remove support for bind-tools from the BIND9 9.11 port.

Sponsored by:	Absolight

 

12:32 mat 

Update named.root.

Sponsored by:	People afraid of a nuclear holocaust.

 

07:59 mat 

Update BIND9* to 9.9.11-P1, 9.10.6-P1, 9.11.2-P1 and 9.12.0rc3

MFH:		2018Q1
Security:	CVE-2017-3145
Sponsored by:	Absolight

 

12:58 mat 

Add a TUNING_LARGE option.

https://kb.isc.org/article/AA-01314/0

Tunes certain compiled-in constants and default settings to
values better suited to large servers with 12/16GB+ of memory.
This can improve performance on such servers, but will consume
more memory and may degrade performance on smaller systems.

PR:		224859
Sponsored by:	Absolight

 

13:38 mat 

Fix altlog_proglist warning when it contains more than the named service.

PR:		224951
Submitted by:	Trix Farrar
Sponsored by:	Absolight

 

13:36 sunpoet 

Update devel/json-c to 0.13

- Add TEST_TARGET
- While I'm here, fix shebang for net/opensips
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/json-c/json-c/blob/master/ChangeLog
PR:		224675
Exp-run by:	antoine

 

13:55 mat 

Add an extra check to make sure syslogd is correctly configured when
using chroot.

Sponsored by:	Absolight

 

15:48 mat 

Add a symlink to named's session-keyfile.

Using nsupdate -l, and chroot was broken because nsupdate could not find
the keyfile by itself.

PR:		223403
Submitted by:	Harald Schmalzbauer
Sponsored by:	Absolight

 

11:43 dbaio 

Update license of ports using MPL (without version)

All ports now should use MPL[10|11|20] license.

Approved by:	portmgr (blanket)

 

13:20 mat 

Enable the PYTHON option by default, it brings a few interesting DNSSEC
tools.

Sponsored by:	Absolight

 

13:24 mat 

Install the mtree file as .sample to allow users to change them.

Sponsored by:	Absolight

 

22:57 mat 

Update BIND9 ports to 9.{9.11,10.6,11.2}.

Sponsored by:	Absolight

 

18:48 mat 

Update to 9.{9.10,10.5,11.1}-P3.

Sponsored by:	Absolight

 

20:51 mat 

Update to 9.{9.10,10.5,11.1}-P2.

Security:	CVE-2017-3142
Security:	CVE-2017-3143
Sponsored by:	Absolight

 

22:54 mat 

Update to 9.9.10-P1, 9.10.5-P1, 9.11.1-P1.

MFH:		2017Q2
Security:	CVE-2017-3140
Security:	CVE-2017-3141
Sponsored by:	Absolight

 

13:12 mat 

Update to 9.9.10, 9.10.5, 9.11.1 and 9.12 to latest snapshot.

While there:

Make it more maintainable by sorting stuff in the Makefile and removing
vestigial pre 10.3 things.

Refresh the root zone hints.

"Fix" the configuration section telling you to get some top level
zones from f.root-servers.net, which does not allow axfr any more. [1]

PR:		218656 [1]
Reported by:	Thomas Steen Rasmussen / Tykling [1]
MFH:		2017Q2
Sponsored by:	Absolight

 

10:15 mat 

Unbreak rndc calls when using non default rndc.key location.

PR:		218335
Sponsored by:	Absolight

 

04:12 delphij 

Security update to 9.11.0P5.

Security:	c6861494-1ffb-11e7-934d-d05099c0ae8c
Approved by:	so
MFH:		2017Q2

 

13:59 mat 

Remove private URLs that should never have been committed.

Pointy hat:	mat
Sponsored by:	Absolight

 

22:39 mat 

Update to 9.9.9-P6, 9.10.4-P6 and 9.11.0-P3.

While there, remove the RPZ_PATCH for BIND9 9.9, it has not been updated
for years, and, it does not build any more.

MFH:		2017Q1
Security:	CVE-2017-3135
Sponsored by:	Absolight

 

08:15 mat 

Commit the cleanups that should have gone in with the pervious update.

Sponsored by:	Absolight

 

07:30 delphij 

Security update to 9.11.0-P2.

Approved by:	so
Security:	d4c7e9a9-d893-11e6-9b4d-d050996490d0
MFH:		2017Q1

 

15:40 mat 

Switch bind-tools to BIND9 9.11.

Sponsored by:	Absolight

 

15:40 mat 

Cleanup CONFLICTS.

Sponsored by:	Absolight

 

15:02 mat 

Fixup libedit for all BIND9 ports, and fix spurious json dependency by
adding an option.

PR:		215170
Reported by:	sunpoet
Sponsored by:	Absolight

 

06:38 delphij 

Security update:

dns/bind99:  9.9.9-P3  -> 9.9.9-P4
dns/bind910: 9.10.4-P3 -> 9.10.4-P4
dns/bind911: 9.11.0    -> 9.11.0-P1

Security:	CVE-2016-8864
Submitted by:	mat
MFH:		2016Q4