Sync changes to SLFO-1.2 branch

bind-9.20.10.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEcGtsKGIOdvkdEfffUQpkKgbFLOwFAmhJQBwACgkQUQpkKgbF
-LOwz0hAAtF3Ekgvps+DwB9rruYBsMCGDCe+GoqX98h/RCtXzSQx64Vf101RY160F
-3gdstzcYqaNkwoVf2rDu4u7XdJ9rpr0KAgnjTaY3IelUrfZFgUGjr9Wi5O5krDlh
-vmUzb0/1dmp2YtLv/5A8iiTKZiwVbkQeptii4rL/KRHzhAa20DUv2POYifv+l6MN
-lgDBJoFpI/cygyt0HyYwOqTbCZrhqxSKHdoSoqaEUXrUiPfN7w9E7dqbubLnWujt
-mRURjKtxt1hA03Zb/K0GmtTPBiVxnn7LrSwgvK1wAXpce69fGtW91hd47+hbgLHS
-udG43ng3EzNNUIR8fn+Lop01apj5JdTmBydNAOYN23O6h9xZvNpiiVRsbdmJHq0w
-ZKBi11QzSGMC2rqfA5BU40pp4ixWWamgAIdSu74bbiEQc4QYAQVHmWwI3inRATA6
-03dck1enJ3MEZp+meuMyexvv7Mg32/Ds7AmhhQFS/atfCM1YCWhItJNsvxYj0X8p
-/9yWIw7EYwjJO0IJm982KUCKgfMohHWP0xrgrNjXeQ585Wkf+YflHfDZtv3uvuop
-IY5/GW/QDAcQfriMcWUgBGLORBcV7+8MbfjfVTciH75lR84nNFe5XqMM3TQZCeJx
-/0I0LAp9uPj+ROsMDudvgJ829nqdebEcZS0omZWeuLuRQVkJhTk=
-=PSlt
------END PGP SIGNATURE-----

bind-9.20.11.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=TXeA
+-----END PGP SIGNATURE-----

bind.changes

@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Tue Jul 15 13:56:33 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
+
+- Upgrade to release 9.20.11
+  Security Fixes:
+  * Fix a possible assertion failure when
+    stale-answer-client-timeout is set to 0. In specific
+    circumstances the named resolver process could exit with an
+    assertion failure when stale answers were enabled and the
+    stale-answer-client-timeout configuration option was set to 0.
+    (CVE-2025-40777)
+    [bsc#1246548]
+
+  New Features:
+  * Add support for the CO flag to dig.
+
+  Bug Fixes:
+  * Correct the default interface-interval from 60s to 60m.
+  * Fix a purge-keys bug when using multiple views of a zone.
+  * Use IPv6 queries in delv +ns.
+
 -------------------------------------------------------------------
 Mon Jun 23 08:59:18 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
 

bind.spec

@@ -59,7 +59,7 @@
   %define _fillupdir %{_localstatedir}/adm/fillup-templates
 %endif
 Name:           bind
-Version:        9.20.10
+Version:        9.20.11
 Release:        0
 Summary:        Domain Name System (DNS) Server (named)
 License:        MPL-2.0