From 088763fa3ff01246aa6c33e4fe3dd52710de1027 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= <pemensik@redhat.com>
Date: Sun, 2 Feb 2025 15:34:28 +0100
Subject: [PATCH] Update to 9.16.33 (rhbz#2342784)

Security Fixes:

- DNS-over-HTTPS flooding fixes. (CVE-2024-12705)
- Limit additional section processing for large RDATA sets. (CVE-2024-11187)

New Features:

- Add a new option to configure the maximum number of outgoing queries per client request.

Bug Fixes:

- Fix nsupdate hang when processing a large update.
- Fix possible assertion failure when reloading server while processing update policy rules. [GL #5006]
- Fix dnssec-signzone signing non-DNSKEY RRsets with revoked keys.
- Fix improper handling of unknown directives in resolv.conf.

https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-33

Resolves: RHEL-48798
---
 .gitignore | 2 ++
 bind.spec  | 7 +++++--
 sources    | 4 ++--
 3 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/.gitignore b/.gitignore
index 4e16a0e..147124b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -228,3 +228,5 @@ bind-9.7.2b1.tar.gz
 /bind-9.18.29.tar.xz.asc
 /bind-9.18.32.tar.xz
 /bind-9.18.32.tar.xz.asc
+/bind-9.18.33.tar.xz
+/bind-9.18.33.tar.xz.asc
diff --git a/bind.spec b/bind.spec
index 045c966..371f59c 100644
--- a/bind.spec
+++ b/bind.spec
@@ -81,8 +81,8 @@ License:  MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
 #
 # Before rebasing bind, ensure bind-dyndb-ldap is ready to be rebuild and use side-tag with it.
 # Updating just bind will cause freeipa-dns-server package to be uninstallable.
-Version:  9.18.32
-Release:  2%{?dist}
+Version:  9.18.33
+Release:  1%{?dist}
 Epoch:    32
 Url:      https://www.isc.org/downloads/bind/
 #
@@ -980,6 +980,9 @@ fi;
 %endif
 
 %changelog
+* Sun Feb 02 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
+- Update to 9.16.33 (rhbz#2342784)
+
 * Fri Jan 17 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.32-2
 - Add sysusers named user creation (rhbz#2105415)
 
diff --git a/sources b/sources
index 36b309b..b3d92ee 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-9.18.32.tar.xz) = fa01978ca44cb5d559d8675dda4272b1327aebc0dca68b2e7b948e8c1bbd82da74f6258d40896ddccf86711d554b7ed4c0df93143e78b663724466738ac1320d
-SHA512 (bind-9.18.32.tar.xz.asc) = b1b15734a90ec2df2da4a9f881fd9f9ea217a12e521b01d2cb06ff0f3305c80c933309d2bddf926e0ab647f4b925b4950c25c5d464ed276727dfbf6824387830
+SHA512 (bind-9.18.33.tar.xz) = 874465ccc7af92561dccf2bd596e13513048c4f1da730a6f38103eeb1d5b67178c1e2e2a56612946eba6edb9dad34851b9826055bcb7c0dad7ec64f7df9c10b9
+SHA512 (bind-9.18.33.tar.xz.asc) = 248490e576b00672497be77e2aeaf47b2c6c2fc745c729d76521443ed7bbd9cd64447cf949aafb820f021653efda7fe77aff32e756d76115e5a3dcf69aadc0a3