Commit Graph

226 Commits

Author SHA256 Message Date
b29a01b4d4 Accepting request 746635 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/746635
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=259
2019-11-10 10:52:26 +00:00
Tomáš Chvátal
431b5383b2 Accepting request 714800 from home:mgerstner:branches:network
- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

OBS-URL: https://build.opensuse.org/request/show/714800
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=257
2019-07-22 07:51:09 +00:00
Navin Kukreja
3f366a17af Accepting request 694778 from home:nkukreja:branches:network
- Add FIPS patch back into bind (bsc#1128220)
- File: bind-fix-fips.patch

OBS-URL: https://build.opensuse.org/request/show/694778
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=255
2019-04-16 10:45:29 +00:00
Tomáš Chvátal
54e402359e Accepting request 656764 from home:fbui:branches:network
- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)

OBS-URL: https://build.opensuse.org/request/show/656764
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=253
2018-12-10 12:05:10 +00:00
Ismail Dönmez
41d567bd7e Accepting request 637877 from home:cgiboudeaux:branches:network
- Update named.root. One of the root servers IP has changed.
- Install the LICENSE file.

OBS-URL: https://build.opensuse.org/request/show/637877
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=251
2018-09-25 08:40:30 +00:00
OBS User mrdocs
f183a6fcba Accepting request 621328 from home:kukuk:branches:network
- Add bind.conf and bind-chrootenv.conf to install the default
  files in /var/lib/named and create chroot environment on systems
  using transactional-updates [bsc#1100369] [FATE#325524].

OBS-URL: https://build.opensuse.org/request/show/621328
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=249
2018-07-19 05:20:17 +00:00
OBS User mrdocs
2b99721cd9 Accepting request 618489 from home:kukuk:branches:network
- Cleanup pre/post install: remove all old code which was needed to
  update to SLES8.

OBS-URL: https://build.opensuse.org/request/show/618489
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=247
2018-06-27 04:27:15 +00:00
530e7d8de1 Accepting request 614550 from home:nkukreja:branches:network
- Fix a patch error in dnszone-schema file (bsc#901577)

OBS-URL: https://build.opensuse.org/request/show/614550
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=245
2018-06-07 06:48:37 +00:00
Navin Kukreja
e30f1eb7cd Accepting request 614223 from home:nkukreja:branches:network
- Add SPF records in dnszone-schema file (bsc#901577)

OBS-URL: https://build.opensuse.org/request/show/614223
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=244
2018-06-05 12:32:41 +00:00
Navin Kukreja
63f4bb281a Accepting request 614210 from home:nkukreja:branches:network
- Patch file - bind-ldapdump-use-valid-host.patch

OBS-URL: https://build.opensuse.org/request/show/614210
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=243
2018-06-05 10:10:15 +00:00
Navin Kukreja
6e77e065be Accepting request 614182 from home:nkukreja:branches:network
- Fix the hostname in ldapdump to be valid (bsc#965748)

OBS-URL: https://build.opensuse.org/request/show/614182
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=242
2018-06-05 09:30:33 +00:00
Navin Kukreja
34d201c2e7 Accepting request 611353 from home:scabrero:branches:network
- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).

OBS-URL: https://build.opensuse.org/request/show/611353
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=240
2018-05-23 09:09:10 +00:00
Navin Kukreja
ccaf6117d3 Accepting request 610097 from home:nkukreja:branches:network
- Move chroot related files from bind to bind-chrootenv 
  (bsc#1093338)

OBS-URL: https://build.opensuse.org/request/show/610097
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=239
2018-05-17 14:45:41 +00:00
Navin Kukreja
69299c3f09 Accepting request 609105 from home:nkukreja:branches:network
- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script

OBS-URL: https://build.opensuse.org/request/show/609105
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=238
2018-05-16 10:46:10 +00:00
Ismail Dönmez
63b17d629c Accepting request 597553 from home:rudi_m:branches:network
add bug number (bsc#1069633)

OBS-URL: https://build.opensuse.org/request/show/597553
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=236
2018-04-19 08:15:25 +00:00
862ae2408a Accepting request 580513 from home:rudi_m:branches:network
- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers.

OBS-URL: https://build.opensuse.org/request/show/580513
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=234
2018-02-27 10:12:33 +00:00
709c0c9ee2 Accepting request 577255 from home:bmwiedemann:branches:network
Add /dev/urandom to chroot env 
note: it is not world writable to make our rpmlint security checker happy - and it is not required anyway

without this, named start shows warnings in journal:
Feb 16 13:28:35 testleap named[1514]: could not open entropy source /dev/urandom: file not found
Feb 16 13:28:35 testleap named[1514]: using pre-chroot entropy source /dev/urandom

OBS-URL: https://build.opensuse.org/request/show/577255
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=232
2018-02-16 14:01:14 +00:00
Navin Kukreja
c27658fca1 Accepting request 574119 from home:nkukreja:branches:network
- Implement systemd init scripts for bind and lwresd (fate#323155)

OBS-URL: https://build.opensuse.org/request/show/574119
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=230
2018-02-08 13:15:18 +00:00
Navin Kukreja
41f90b8125 Accepting request 568769 from home:nkukreja:branches:network
- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)

OBS-URL: https://build.opensuse.org/request/show/568769
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=228
2018-01-23 22:28:59 +00:00
Ismail Dönmez
3dc2357a41 Accepting request 554799 from home:vitezslav_cizek:branches:network
- Use getent when adding user/group
- update changelog to mention removed options

  * Remove no longer recognized --enable-rrl

OBS-URL: https://build.opensuse.org/request/show/554799
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=226
2017-12-07 10:37:08 +00:00
e04eec6142 - license changed to MPL-2.0 according to legal.
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=225
2017-11-25 15:31:35 +00:00
b264302d00 Accepting request 545259 from home:scarabeus_iv:branches:network
- Add back init scripts, systemd units aren't ready yet

- Add python3-bind subpackage to allow python bind interactions

- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts

- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff

- drop bind-openssl11.patch (merged upstream)

- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment

- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)

OBS-URL: https://build.opensuse.org/request/show/545259
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=224
2017-11-24 16:29:49 +00:00
6c11f8d877 Accepting request 544658 from home:RBrownSUSE:branches:network
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544658
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=223
2017-11-24 10:22:50 +00:00
fc48f6ba17 Accepting request 543879 from home:pluskalm:branches:network
- Use python3 by default (fate#323526)

OBS-URL: https://build.opensuse.org/request/show/543879
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=221
2017-11-21 09:43:45 +00:00
OBS User mrdocs
efc0e572f3 Accepting request 523293 from home:msmeissn:branches:network
- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)

OBS-URL: https://build.opensuse.org/request/show/523293
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=219
2017-09-14 01:12:46 +00:00
dcab876062 OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=217 2017-09-07 12:06:06 +00:00
7e6301a923 Accepting request 520246 from home:j-engel:branches:network
- Enable JSON statistics

OBS-URL: https://build.opensuse.org/request/show/520246
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=216
2017-09-07 12:02:08 +00:00
70734c6ca6 Accepting request 510278 from home:msmeissn:branches:network
- named.root: refreshed from internic to 2017060102 (bsc#1048729)

OBS-URL: https://build.opensuse.org/request/show/510278
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=214
2017-07-14 17:29:38 +00:00
OBS User mrdocs
4215a9d83e Accepting request 507735 from home:dimstar:Factory
- Run systemctl daemon-reload even when this is not build with
  systemd support: if installing bind on a systemd service and not
  reloading systemd daemon, then the service 'named' is not known
  right after package installation, causing confusion.

OBS-URL: https://build.opensuse.org/request/show/507735
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=212
2017-07-03 22:11:50 +00:00
43448a770a Accepting request 507232 from home:simotek:branches:network
- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]

OBS-URL: https://build.opensuse.org/request/show/507232
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=211
2017-06-30 10:58:48 +00:00
7b1425a23f Accepting request 496935 from home:dimstar:Factory
a- Fix named init script to dynamically find the location of the
   openssl engines (boo#1040027).

OBS-URL: https://build.opensuse.org/request/show/496935
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=209
2017-05-20 15:34:20 +00:00
4e8c935dd7 Accepting request 481339 from home:kukuk:branches:network
- Add with_systemd define with default off, since we still use init
  scripts and no systemd units.

OBS-URL: https://build.opensuse.org/request/show/481339
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=207
2017-03-23 16:11:03 +00:00
44c7103fc2 Accepting request 458921 from home:kukuk:branches:network
- Don't require and call insserv if we use systemd

OBS-URL: https://build.opensuse.org/request/show/458921
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=205
2017-02-21 10:39:18 +00:00
Navin Kukreja
9e49836a48 Accepting request 457420 from home:nkukreja:branches:network
- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch

OBS-URL: https://build.opensuse.org/request/show/457420
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=203
2017-02-15 13:26:45 +00:00
f26d340f7b Accepting request 452036 from home:AndreasStieger:branches:network
fix factory submission

OBS-URL: https://build.opensuse.org/request/show/452036
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=201
2017-01-23 20:09:49 +00:00
c6ec97ecb6 Accepting request 449784 from home:simotek:branches:network
Fix bsc#1018699 by taking latest update in series 9.11 needs a little more work

OBS-URL: https://build.opensuse.org/request/show/449784
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=200
2017-01-12 12:21:22 +00:00
318666062f Accepting request 438189 from home:psimons:branches:network
Apply cve-2016-8864.patch to fix CVE-2016-8864 (bsc#1007829).

OBS-URL: https://build.opensuse.org/request/show/438189
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=198
2016-11-02 13:30:34 +00:00
Ismail Dönmez
7af14e49dd Accepting request 430610 from home:psimons:branches:network
Security update to fix CVE-2016-2776 (bsc#1000362).

OBS-URL: https://build.opensuse.org/request/show/430610
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=196
2016-09-27 18:38:49 +00:00
Reinhard Max
8b99b04f2a - Remove the start/stop dependency of named and lwresd on remote-fs
to break a service dependency cycle (bsc#947483, bsc#963971).
- Make /var/lib/named owned by the named user (bsc#908850,
  bsc#875691).
- Call systemd service macros with the full service name.
- Security update 9.10.3-P4:

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=194
2016-06-16 12:00:45 +00:00
Rusmir Duško
2e4b7daa78 Accepting request 389954 from home:lnussel:branches:network
- remove BuildRequire libcap. That is only a legacy library, not
  actually used for building. libcap-devel pulls in the right one.

OBS-URL: https://build.opensuse.org/request/show/389954
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=192
2016-04-15 07:56:29 +00:00
Reinhard Max
2d8afe69b8 - Security update 9.10.3-P3:
* CVE-2016-1285, bsc#970072: assert failure on input parsing can
    cause premature exit.
  * CVE-2016-1286, bsc#970073: An error when parsing signature
    records for DNAME can lead to named exiting due to an assertion
    failure.
  * CVE-2016-2088, bsc#970074: a deliberately misconstructed packet
    containing multiple cookie options to cause named to terminate
    with an assertion failure.

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=190
2016-03-11 13:59:03 +00:00
Reinhard Max
abbe73be65 - Security update 9.10.3-P3 fixes two assertion failures that can
lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=189
2016-03-11 13:55:29 +00:00
0f06af6f9d Accepting request 361463 from home:bmwiedemann:branches:network
- drop a changing timestamp making build reproducible

OBS-URL: https://build.opensuse.org/request/show/361463
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=187
2016-02-26 07:55:47 +00:00
Lars Müller
fd2b586269 Sligthly enhance the last commmit
- \ at the last option line allows us to keep the full history
- a tab is no a space

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=186
2016-02-12 21:48:50 +00:00
Lars Müller
9508d45935 Accepting request 359100 from home:elvigia:branches:network
- Build with --with-randomdev=/dev/urandom otherwise 
  libisc will use /dev/random to gather entropy and that might
  block, short read etc..

OBS-URL: https://build.opensuse.org/request/show/359100
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=185
2016-02-12 19:11:31 +00:00
Reinhard Max
c7dc2ebf4f - Security update 9.10.3-P3:
* Specific APL data could trigger an INSIST (CVE-2015-8704,
    bsc#962189).
  * Certain errors that could be encountered when printing out or
    logging an OPT record containing a CLIENT-SUBNET option could
    be mishandled, resulting in an assertion failure
    (CVE-2015-8705, bsc#962190).
  * Authoritative servers that were marked as bogus (e.g.
    blackholed in configuration or with invalid addresses) were
    being queried anyway.

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=183
2016-01-20 11:04:34 +00:00
Reinhard Max
7c65773c2b OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=181 2015-12-21 17:51:47 +00:00
Reinhard Max
5f956be5fc - Update to version 9.10.3-P2 to fix a remote denial of service by
misparsing incoming responses (CVE-2015-8000, bsc#958861).

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=180
2015-12-21 17:12:31 +00:00
Reinhard Max
ee28860376 Accepting request 336332 from home:jengelh:branches:network
- Avoid double %setup, it confuses some versions of quilt.
- Summary/description update

OBS-URL: https://build.opensuse.org/request/show/336332
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=178
2015-10-05 07:46:26 +00:00
Lars Müller
f17cebd7c5 Accepting request 332971 from home:msmeissn:branches:network
- Update to version 9.10.2-P4
  * An incorrect boundary boundary check in the OPENPGPKEY
    rdatatype could trigger an assertion failure.
    (CVE-2015-5986) [RT #40286] (bsc#944107)
  * A buffer accounting error could trigger an
    assertion failure when parsing certain malformed 
    DNSSEC keys. (CVE-2015-5722) [RT #40212] (bsc#944066)

OBS-URL: https://build.opensuse.org/request/show/332971
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=176
2015-09-22 20:15:47 +00:00