[rpms/bind] f45: Fix tsig-keygen and named-checkzone

[rpms/bind] f45: Fix tsig-keygen and named-checkzone

[@ 2026-08-26 8:34 UTC (permalink / raw)]

            A new commit has been pushed.

            Repo   : rpms/bind
            Branch : f45
            Commit : 8c2399e1628abe39f5c801b72a61af6af04dba63
            Author : Petr Menšík <pemensik@redhat.com>
            Date   : 2026-08-25T14:36:12+02:00
            Stats  : +48/-0 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/bind/c/8c2399e1628abe39f5c801b72a61af6af04dba63?branch=f45

            Log:
            Fix tsig-keygen and named-checkzone

Found out that multiple programs require fixed name and cannot contain
suffixes. This will fix those programs to run as designed and switch
versions. It affects:
- tsig-keygen
- ddns-confgen
- named-checkzone
- named-compilezone

This should make those tools to decide only based or starting part of
the program. Upstream supported suffix .exe, but we need support of
different suffixes. This change should work for both.

---
diff --git a/bind-9.20-tsig-keygen-suffix.patch b/bind-9.20-tsig-keygen-suffix.patch
new file mode 100644
index 0000000..6c1c465
--- /dev/null
+++ b/bind-9.20-tsig-keygen-suffix.patch
@@ -0,0 +1,45 @@
+From 32f203d4e3c711cde5b1546a054be42b16436822 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= <pemensik@redhat.com>
+Date: Fri, 17 Jul 2026 19:42:39 +0200
+Subject: [PATCH] Support program suffixes of tsig-confgen and ddns-confgen
+
+Suffixes different than .exe are used on Fedora. But those commands
+require exact names only. Allow switching between two variants only from
+prefix. That should work on all platforms. It should support also names
+like tsig-confgen-9.18 or tsig-confgen-9.20.
+
+The same case applies to named-checkzone and named-compilezone.
+---
+ bin/check/named-checkzone.c | 2 +-
+ bin/confgen/tsig-keygen.c   | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/bin/check/named-checkzone.c b/bin/check/named-checkzone.c
+index ae8feafc8c..5a1f712463 100644
+--- a/bin/check/named-checkzone.c
++++ b/bin/check/named-checkzone.c
+@@ -137,7 +137,7 @@ main(int argc, char **argv) {
+ 	}
+ 
+ #define PROGCMP(X) \
+-	(strcasecmp(prog_name, X) == 0 || strcasecmp(prog_name, X ".exe") == 0)
++	(strncasecmp(prog_name, X, strlen(X)) == 0)
+ 
+ 	if (PROGCMP("named-checkzone")) {
+ 		progmode = progmode_check;
+diff --git a/bin/confgen/tsig-keygen.c b/bin/confgen/tsig-keygen.c
+index f0d2f9a245..9b13312b5b 100644
+--- a/bin/confgen/tsig-keygen.c
++++ b/bin/confgen/tsig-keygen.c
+@@ -113,7 +113,7 @@ main(int argc, char **argv) {
+ 	}
+ 
+ #define PROGCMP(X) \
+-	(strcasecmp(progname, X) == 0 || strcasecmp(progname, X ".exe") == 0)
++	(strncasecmp(progname, X, strlen(X)) == 0)
+ 
+ 	if (PROGCMP("tsig-keygen")) {
+ 		progmode = progmode_keygen;
+-- 
+2.54.0
+

diff --git a/bind.spec b/bind.spec
index 4bac975..08979b6 100644
--- a/bind.spec
+++ b/bind.spec
@@ -185,6 +185,9 @@ Patch49: bind-9.18-CVE-2026-13204-test.patch
 # https://gitlab.isc.org/isc-projects/bind9/commit/36f3d50f9c8ebc8d25ee033e707ca502e20b083f
 Patch50: bind-9.18-CVE-2026-13321.patch
 Patch51: bind-9.18-CVE-2026-13321-test.patch
+# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/12420
+Patch52: bind-9.20-tsig-keygen-suffix.patch
+
 
 %{?systemd_ordering}
 # https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers