Josef Möllers
04b4ed4df0
Accepting request 866630 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/866630
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=308
2021-01-26 08:58:48 +00:00
Josef Möllers
b585e7fb90
Accepting request 859291 from home:dirkmueller:branches:network
...
- update to 9.16.10:
New Features:
* NSEC3 support was added to KASP. A new option for dnssec-policy,
nsec3param, can be used to set the desired NSEC3 parameters. NSEC3 salt
collisions are automatically prevented during resalting. [GL #1620 ]
* A new configuration option, stale-refresh-time, has been introduced. It allows
a stale RRset to be served directly from cache for a period of time after a
failed lookup, before a new attempt to refresh it is made. [GL #2066 ]
Feature Changes:
* The default value of max-recursion-queries was increased from 75 to 100.
Since the queries sent towards root and TLD servers are now included in the
count (as a result of the fix for CVE-2020-8616), max-recursion-queries has
a higher chance of being exceeded by non-attack queries, which is the main
reason for increasing its default value. [GL #2305 ]
The default value of nocookie-udp-size was restored back to 4096 bytes. Since
max-udp-size is the upper bound for nocookie-udp-size, this change relieves the
operator from having to change nocookie-udp-size together with max-udp-size in
order to increase the default EDNS buffer size limit. nocookie-udp-size can
still be set to a value lower than max-udp-size, if desired. [GL #2250 ]
Bug Fixes:
Handling of missing DNS COOKIE responses over UDP was tightened by falling
back to TCP. [GL #2275 ]
The CNAME synthesized from a DNAME was incorrectly followed when the QTYPE was
CNAME or ANY. [GL #2280 ]
Building with native PKCS#11 support for AEP Keyper has been broken since BIND
9.16.6. This has been fixed. [GL #2315 ]
named could crash with an assertion failure if a TCP connection were closed
while a request was still being processed. [GL #2227 ]
named acting as a resolver could incorrectly treat signed zones with no DS
record at the parent as bogus. Such zones should be treated as insecure. This
OBS-URL: https://build.opensuse.org/request/show/859291
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=306
2021-01-07 11:50:54 +00:00
d00771e830
Accepting request 848814 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/848814
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=304
2020-12-05 17:16:58 +00:00
Josef Möllers
303deef25b
Accepting request 843167 from home:jmoellers:branches:network
...
Upgrade
OBS-URL: https://build.opensuse.org/request/show/843167
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=302
2020-10-21 13:48:54 +00:00
Reinhard Max
c7de7e258a
- Put libns into a separate subpackage to avoid file conflicts
...
in the libisc subpackage due to different sonums (bsc#1176092).
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=297
2020-09-04 14:42:49 +00:00
OBS User buildservice-autocommit
1d647cd766
Updating link to change in openSUSE:Factory/bind revision 156.0
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=90c94fa850d01fd39b0d70b750cd34f4
2020-09-01 07:49:42 +00:00
Reinhard Max
c61c37b69f
Accepting request 830239 from home:dimstar:Factory
...
- Require /sbin/start_daemon: both init scripts, the one used in
systemd context as well as legacy sysv, make use of start_daemon.
OBS-URL: https://build.opensuse.org/request/show/830239
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=295
2020-08-28 10:01:48 +00:00
Josef Möllers
cc91d0126a
Accepting request 828392 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/828392
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=294
2020-08-21 08:19:08 +00:00
Josef Möllers
c10343c1a5
Accepting request 824686 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/824686
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=292
2020-08-17 06:19:40 +00:00
Josef Möllers
a7358e2599
Accepting request 822197 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/822197
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=290
2020-07-22 12:17:29 +00:00
Reinhard Max
13336b5b52
Accepting request 819259 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/819259
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=289
2020-07-21 07:32:24 +00:00
Josef Möllers
b1fcf64f8b
Upgrade
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=286
2020-06-19 06:28:39 +00:00
Josef Möllers
8a582d1fe4
Upgrade
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=285
2020-06-18 08:10:17 +00:00
Josef Möllers
2f2463f9fc
Upgrade
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=284
2020-06-18 07:53:27 +00:00
Josef Möllers
83408c75fa
Upgrade
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=283
2020-06-18 07:41:56 +00:00
Josef Möllers
34efaf997b
Upgrade
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=281
2020-06-18 06:51:39 +00:00
Josef Möllers
7b2635169f
Accepting request 807719 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/807719
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=279
2020-05-20 12:55:33 +00:00
Josef Möllers
c79f35c371
Accepting request 787151 from home:kukuk:container
...
- Use sysusers.d to create named user
- Have only one package creating the user
- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd
OBS-URL: https://build.opensuse.org/request/show/787151
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=269
2020-03-23 07:34:53 +00:00
Tomáš Chvátal
e58ea38bfe
Accepting request 786770 from home:jmoellers:branches:network
...
Upgrade to 9.16.1
OBS-URL: https://build.opensuse.org/request/show/786770
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=267
2020-03-20 09:17:01 +00:00
Tomáš Chvátal
50814f9437
- Update download urls
...
- Do not enable geoip on old distros, the geoip db was shut down
so we need to use geoip2 everywhere
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=265
2020-02-22 07:43:31 +00:00
Tomáš Chvátal
0264c27ba3
Accepting request 777947 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/777947
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=264
2020-02-22 07:32:01 +00:00
Tomáš Chvátal
e8ed0a004c
Accepting request 761875 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/761875
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=262
2020-01-08 16:16:32 +00:00
Tomáš Chvátal
7782315a23
Accepting request 750049 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/750049
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=260
2019-11-22 08:28:25 +00:00
b29a01b4d4
Accepting request 746635 from home:jmoellers:branches:network
...
OBS-URL: https://build.opensuse.org/request/show/746635
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=259
2019-11-10 10:52:26 +00:00
Tomáš Chvátal
431b5383b2
Accepting request 714800 from home:mgerstner:branches:network
...
- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
replaced by firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
OBS-URL: https://build.opensuse.org/request/show/714800
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=257
2019-07-22 07:51:09 +00:00
Navin Kukreja
3f366a17af
Accepting request 694778 from home:nkukreja:branches:network
...
- Add FIPS patch back into bind (bsc#1128220)
- File: bind-fix-fips.patch
OBS-URL: https://build.opensuse.org/request/show/694778
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=255
2019-04-16 10:45:29 +00:00
Ismail Dönmez
41d567bd7e
Accepting request 637877 from home:cgiboudeaux:branches:network
...
- Update named.root. One of the root servers IP has changed.
- Install the LICENSE file.
OBS-URL: https://build.opensuse.org/request/show/637877
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=251
2018-09-25 08:40:30 +00:00
OBS User mrdocs
f183a6fcba
Accepting request 621328 from home:kukuk:branches:network
...
- Add bind.conf and bind-chrootenv.conf to install the default
files in /var/lib/named and create chroot environment on systems
using transactional-updates [bsc#1100369] [FATE#325524].
OBS-URL: https://build.opensuse.org/request/show/621328
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=249
2018-07-19 05:20:17 +00:00
OBS User mrdocs
2b99721cd9
Accepting request 618489 from home:kukuk:branches:network
...
- Cleanup pre/post install: remove all old code which was needed to
update to SLES8.
OBS-URL: https://build.opensuse.org/request/show/618489
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=247
2018-06-27 04:27:15 +00:00
Navin Kukreja
6e77e065be
Accepting request 614182 from home:nkukreja:branches:network
...
- Fix the hostname in ldapdump to be valid (bsc#965748)
OBS-URL: https://build.opensuse.org/request/show/614182
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=242
2018-06-05 09:30:33 +00:00
Navin Kukreja
34d201c2e7
Accepting request 611353 from home:scabrero:branches:network
...
- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
Fixes dynamic DNS updates against samba and Microsoft DNS servers
(bsc#1094236).
OBS-URL: https://build.opensuse.org/request/show/611353
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=240
2018-05-23 09:09:10 +00:00
Navin Kukreja
ccaf6117d3
Accepting request 610097 from home:nkukreja:branches:network
...
- Move chroot related files from bind to bind-chrootenv
(bsc#1093338)
OBS-URL: https://build.opensuse.org/request/show/610097
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=239
2018-05-17 14:45:41 +00:00
Navin Kukreja
69299c3f09
Accepting request 609105 from home:nkukreja:branches:network
...
- Remove rndc.key generation from bind.spec file because bind
should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
script
OBS-URL: https://build.opensuse.org/request/show/609105
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=238
2018-05-16 10:46:10 +00:00
862ae2408a
Accepting request 580513 from home:rudi_m:branches:network
...
- build with --enable-filter-aaaa to make it possible to use
config option "filter-aaaa-on-v4 yes". Useful to workaround
broken websites like netflix which block traffic from certain
IPv6 tunnel providers.
OBS-URL: https://build.opensuse.org/request/show/580513
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=234
2018-02-27 10:12:33 +00:00
709c0c9ee2
Accepting request 577255 from home:bmwiedemann:branches:network
...
Add /dev/urandom to chroot env
note: it is not world writable to make our rpmlint security checker happy - and it is not required anyway
without this, named start shows warnings in journal:
Feb 16 13:28:35 testleap named[1514]: could not open entropy source /dev/urandom: file not found
Feb 16 13:28:35 testleap named[1514]: using pre-chroot entropy source /dev/urandom
OBS-URL: https://build.opensuse.org/request/show/577255
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=232
2018-02-16 14:01:14 +00:00
Navin Kukreja
c27658fca1
Accepting request 574119 from home:nkukreja:branches:network
...
- Implement systemd init scripts for bind and lwresd (fate#323155)
OBS-URL: https://build.opensuse.org/request/show/574119
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=230
2018-02-08 13:15:18 +00:00
Navin Kukreja
41f90b8125
Accepting request 568769 from home:nkukreja:branches:network
...
- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)
OBS-URL: https://build.opensuse.org/request/show/568769
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=228
2018-01-23 22:28:59 +00:00
Ismail Dönmez
3dc2357a41
Accepting request 554799 from home:vitezslav_cizek:branches:network
...
- Use getent when adding user/group
- update changelog to mention removed options
* Remove no longer recognized --enable-rrl
OBS-URL: https://build.opensuse.org/request/show/554799
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=226
2017-12-07 10:37:08 +00:00
e04eec6142
- license changed to MPL-2.0 according to legal.
...
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=225
2017-11-25 15:31:35 +00:00
b264302d00
Accepting request 545259 from home:scarabeus_iv:branches:network
...
- Add back init scripts, systemd units aren't ready yet
- Add python3-bind subpackage to allow python bind interactions
- Sync configure options with RH package and remove unused ones
* Enable python3
* Enable gssapi
* Enable dnssec scripts
- Drop idnkit from the build, the bind uses libidn since 2007 to run
all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
* bind-99-libidn.patch
- Refresh patch:
* pie_compile.diff
- Remove patches that are unused due to above:
* idnkit-powerpc-ltconfig.patch
* runidn.diff
- drop bind-openssl11.patch (merged upstream)
- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment
- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
* dns_dynamic_db.patch (upstream)
OBS-URL: https://build.opensuse.org/request/show/545259
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=224
2017-11-24 16:29:49 +00:00
6c11f8d877
Accepting request 544658 from home:RBrownSUSE:branches:network
...
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
OBS-URL: https://build.opensuse.org/request/show/544658
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=223
2017-11-24 10:22:50 +00:00
fc48f6ba17
Accepting request 543879 from home:pluskalm:branches:network
...
- Use python3 by default (fate#323526)
OBS-URL: https://build.opensuse.org/request/show/543879
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=221
2017-11-21 09:43:45 +00:00
OBS User mrdocs
efc0e572f3
Accepting request 523293 from home:msmeissn:branches:network
...
- bind-openssl11.patch: add a patch for enabling
openssl 1.1 support (builds for 1.0 and 1.1 openssl).
(bsc#1042635)
OBS-URL: https://build.opensuse.org/request/show/523293
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=219
2017-09-14 01:12:46 +00:00
dcab876062
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=217
2017-09-07 12:06:06 +00:00
7e6301a923
Accepting request 520246 from home:j-engel:branches:network
...
- Enable JSON statistics
OBS-URL: https://build.opensuse.org/request/show/520246
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=216
2017-09-07 12:02:08 +00:00
OBS User mrdocs
4215a9d83e
Accepting request 507735 from home:dimstar:Factory
...
- Run systemctl daemon-reload even when this is not build with
systemd support: if installing bind on a systemd service and not
reloading systemd daemon, then the service 'named' is not known
right after package installation, causing confusion.
OBS-URL: https://build.opensuse.org/request/show/507735
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=212
2017-07-03 22:11:50 +00:00
43448a770a
Accepting request 507232 from home:simotek:branches:network
...
- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
where an attacker with the ability to send and receive messages
to an authoritative DNS server was able to circumvent TSIG
authentication of AXFR requests. A server that relies solely on
TSIG keys for protection with no other ACL protection could be
manipulated into (1) providing an AXFR of a zone to an
unauthorized recipient and (2) accepting bogus Notify packets.
[bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]
OBS-URL: https://build.opensuse.org/request/show/507232
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=211
2017-06-30 10:58:48 +00:00
7b1425a23f
Accepting request 496935 from home:dimstar:Factory
...
a- Fix named init script to dynamically find the location of the
openssl engines (boo#1040027).
OBS-URL: https://build.opensuse.org/request/show/496935
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=209
2017-05-20 15:34:20 +00:00
4e8c935dd7
Accepting request 481339 from home:kukuk:branches:network
...
- Add with_systemd define with default off, since we still use init
scripts and no systemd units.
OBS-URL: https://build.opensuse.org/request/show/481339
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=207
2017-03-23 16:11:03 +00:00
44c7103fc2
Accepting request 458921 from home:kukuk:branches:network
...
- Don't require and call insserv if we use systemd
OBS-URL: https://build.opensuse.org/request/show/458921
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=205
2017-02-21 10:39:18 +00:00