bind: bump to 9.20.15
authorNoah Meyerhans <[email protected]>
Wed, 22 Oct 2025 20:29:11 +0000 (16:29 -0400)
committerNoah Meyerhans <[email protected]>
Wed, 22 Oct 2025 23:12:41 +0000 (19:12 -0400)
commit59465b95b847c2925993b2472d08af6f7571d770
treee424546afbbeda1f93fa2ba22c562c053eb962ec
parentcf40213423d3fe043bf873f745fd3e99c6ed5ee0
bind: bump to 9.20.15

Fixes the following security issues:

- CVE-2025-8677: DNSSEC validation fails if matching but invalid
  DNSKEY is found.
- CVE-2025-40778 Address various spoofing attacks.
- CVE-2025-40780 Cache-poisoning due to weak pseudo-random number
  generator.

The complete list of changes from version 9.20.11 is available in the
upstream changelog at
https://ftp.isc.org/isc/bind9/9.20.15/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <[email protected]>
net/bind/Makefile