SHA256
1
0
forked from pool/bind
Commit Graph

202 Commits

Author SHA256 Message Date
Josef Möllers
04b4ed4df0 Accepting request 866630 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/866630
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=308
2021-01-26 08:58:48 +00:00
Josef Möllers
b585e7fb90 Accepting request 859291 from home:dirkmueller:branches:network
- update to 9.16.10:
  New Features:
  * NSEC3 support was added to KASP. A new option for dnssec-policy,
  nsec3param, can be used to set the desired NSEC3 parameters. NSEC3 salt
  collisions are automatically prevented during resalting. [GL #1620]
  * A new configuration option, stale-refresh-time, has been introduced. It allows
  a stale RRset to be served directly from cache for a period of time after a
  failed lookup, before a new attempt to refresh it is made. [GL #2066]
  Feature Changes:
  * The default value of max-recursion-queries was increased from 75 to 100.
  Since the queries sent towards root and TLD servers are now included in the
  count (as a result of the fix for CVE-2020-8616), max-recursion-queries has
  a higher chance of being exceeded by non-attack queries, which is the main
  reason for increasing its default value. [GL #2305]
  The default value of nocookie-udp-size was restored back to 4096 bytes. Since
  max-udp-size is the upper bound for nocookie-udp-size, this change relieves the
  operator from having to change nocookie-udp-size together with max-udp-size in
  order to increase the default EDNS buffer size limit. nocookie-udp-size can
  still be set to a value lower than max-udp-size, if desired. [GL #2250]
  Bug Fixes:
  Handling of missing DNS COOKIE responses over UDP was tightened by falling
  back to TCP. [GL #2275]
  The CNAME synthesized from a DNAME was incorrectly followed when the QTYPE was
  CNAME or ANY. [GL #2280]
  Building with native PKCS#11 support for AEP Keyper has been broken since BIND
  9.16.6. This has been fixed. [GL #2315]
  named could crash with an assertion failure if a TCP connection were closed
  while a request was still being processed. [GL #2227]
  named acting as a resolver could incorrectly treat signed zones with no DS
  record at the parent as bogus. Such zones should be treated as insecure. This

OBS-URL: https://build.opensuse.org/request/show/859291
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=306
2021-01-07 11:50:54 +00:00
d00771e830 Accepting request 848814 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/848814
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=304
2020-12-05 17:16:58 +00:00
Josef Möllers
303deef25b Accepting request 843167 from home:jmoellers:branches:network
Upgrade

OBS-URL: https://build.opensuse.org/request/show/843167
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=302
2020-10-21 13:48:54 +00:00
Reinhard Max
c7de7e258a - Put libns into a separate subpackage to avoid file conflicts
in the libisc subpackage due to different sonums (bsc#1176092).

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=297
2020-09-04 14:42:49 +00:00
OBS User buildservice-autocommit
1d647cd766 Updating link to change in openSUSE:Factory/bind revision 156.0
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=90c94fa850d01fd39b0d70b750cd34f4
2020-09-01 07:49:42 +00:00
Reinhard Max
c61c37b69f Accepting request 830239 from home:dimstar:Factory
- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.

OBS-URL: https://build.opensuse.org/request/show/830239
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=295
2020-08-28 10:01:48 +00:00
Josef Möllers
cc91d0126a Accepting request 828392 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/828392
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=294
2020-08-21 08:19:08 +00:00
Josef Möllers
c10343c1a5 Accepting request 824686 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/824686
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=292
2020-08-17 06:19:40 +00:00
Josef Möllers
a7358e2599 Accepting request 822197 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/822197
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=290
2020-07-22 12:17:29 +00:00
Reinhard Max
13336b5b52 Accepting request 819259 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/819259
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=289
2020-07-21 07:32:24 +00:00
Josef Möllers
b1fcf64f8b Upgrade
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=286
2020-06-19 06:28:39 +00:00
Josef Möllers
8a582d1fe4 Upgrade
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=285
2020-06-18 08:10:17 +00:00
Josef Möllers
2f2463f9fc Upgrade
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=284
2020-06-18 07:53:27 +00:00
Josef Möllers
83408c75fa Upgrade
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=283
2020-06-18 07:41:56 +00:00
Josef Möllers
34efaf997b Upgrade
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=281
2020-06-18 06:51:39 +00:00
Josef Möllers
7b2635169f Accepting request 807719 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/807719
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=279
2020-05-20 12:55:33 +00:00
Josef Möllers
c79f35c371 Accepting request 787151 from home:kukuk:container
- Use sysusers.d to create named user
- Have only one package creating the user
- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd

OBS-URL: https://build.opensuse.org/request/show/787151
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=269
2020-03-23 07:34:53 +00:00
Tomáš Chvátal
e58ea38bfe Accepting request 786770 from home:jmoellers:branches:network
Upgrade to 9.16.1

OBS-URL: https://build.opensuse.org/request/show/786770
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=267
2020-03-20 09:17:01 +00:00
Tomáš Chvátal
50814f9437 - Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=265
2020-02-22 07:43:31 +00:00
Tomáš Chvátal
0264c27ba3 Accepting request 777947 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/777947
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=264
2020-02-22 07:32:01 +00:00
Tomáš Chvátal
e8ed0a004c Accepting request 761875 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/761875
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=262
2020-01-08 16:16:32 +00:00
Tomáš Chvátal
7782315a23 Accepting request 750049 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/750049
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=260
2019-11-22 08:28:25 +00:00
b29a01b4d4 Accepting request 746635 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/746635
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=259
2019-11-10 10:52:26 +00:00
Tomáš Chvátal
431b5383b2 Accepting request 714800 from home:mgerstner:branches:network
- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

OBS-URL: https://build.opensuse.org/request/show/714800
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=257
2019-07-22 07:51:09 +00:00
Navin Kukreja
3f366a17af Accepting request 694778 from home:nkukreja:branches:network
- Add FIPS patch back into bind (bsc#1128220)
- File: bind-fix-fips.patch

OBS-URL: https://build.opensuse.org/request/show/694778
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=255
2019-04-16 10:45:29 +00:00
Ismail Dönmez
41d567bd7e Accepting request 637877 from home:cgiboudeaux:branches:network
- Update named.root. One of the root servers IP has changed.
- Install the LICENSE file.

OBS-URL: https://build.opensuse.org/request/show/637877
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=251
2018-09-25 08:40:30 +00:00
OBS User mrdocs
f183a6fcba Accepting request 621328 from home:kukuk:branches:network
- Add bind.conf and bind-chrootenv.conf to install the default
  files in /var/lib/named and create chroot environment on systems
  using transactional-updates [bsc#1100369] [FATE#325524].

OBS-URL: https://build.opensuse.org/request/show/621328
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=249
2018-07-19 05:20:17 +00:00
OBS User mrdocs
2b99721cd9 Accepting request 618489 from home:kukuk:branches:network
- Cleanup pre/post install: remove all old code which was needed to
  update to SLES8.

OBS-URL: https://build.opensuse.org/request/show/618489
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=247
2018-06-27 04:27:15 +00:00
Navin Kukreja
6e77e065be Accepting request 614182 from home:nkukreja:branches:network
- Fix the hostname in ldapdump to be valid (bsc#965748)

OBS-URL: https://build.opensuse.org/request/show/614182
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=242
2018-06-05 09:30:33 +00:00
Navin Kukreja
34d201c2e7 Accepting request 611353 from home:scabrero:branches:network
- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).

OBS-URL: https://build.opensuse.org/request/show/611353
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=240
2018-05-23 09:09:10 +00:00
Navin Kukreja
ccaf6117d3 Accepting request 610097 from home:nkukreja:branches:network
- Move chroot related files from bind to bind-chrootenv 
  (bsc#1093338)

OBS-URL: https://build.opensuse.org/request/show/610097
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=239
2018-05-17 14:45:41 +00:00
Navin Kukreja
69299c3f09 Accepting request 609105 from home:nkukreja:branches:network
- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script

OBS-URL: https://build.opensuse.org/request/show/609105
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=238
2018-05-16 10:46:10 +00:00
862ae2408a Accepting request 580513 from home:rudi_m:branches:network
- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers.

OBS-URL: https://build.opensuse.org/request/show/580513
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=234
2018-02-27 10:12:33 +00:00
709c0c9ee2 Accepting request 577255 from home:bmwiedemann:branches:network
Add /dev/urandom to chroot env 
note: it is not world writable to make our rpmlint security checker happy - and it is not required anyway

without this, named start shows warnings in journal:
Feb 16 13:28:35 testleap named[1514]: could not open entropy source /dev/urandom: file not found
Feb 16 13:28:35 testleap named[1514]: using pre-chroot entropy source /dev/urandom

OBS-URL: https://build.opensuse.org/request/show/577255
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=232
2018-02-16 14:01:14 +00:00
Navin Kukreja
c27658fca1 Accepting request 574119 from home:nkukreja:branches:network
- Implement systemd init scripts for bind and lwresd (fate#323155)

OBS-URL: https://build.opensuse.org/request/show/574119
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=230
2018-02-08 13:15:18 +00:00
Navin Kukreja
41f90b8125 Accepting request 568769 from home:nkukreja:branches:network
- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)

OBS-URL: https://build.opensuse.org/request/show/568769
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=228
2018-01-23 22:28:59 +00:00
Ismail Dönmez
3dc2357a41 Accepting request 554799 from home:vitezslav_cizek:branches:network
- Use getent when adding user/group
- update changelog to mention removed options

  * Remove no longer recognized --enable-rrl

OBS-URL: https://build.opensuse.org/request/show/554799
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=226
2017-12-07 10:37:08 +00:00
e04eec6142 - license changed to MPL-2.0 according to legal.
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=225
2017-11-25 15:31:35 +00:00
b264302d00 Accepting request 545259 from home:scarabeus_iv:branches:network
- Add back init scripts, systemd units aren't ready yet

- Add python3-bind subpackage to allow python bind interactions

- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts

- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff

- drop bind-openssl11.patch (merged upstream)

- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment

- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)

OBS-URL: https://build.opensuse.org/request/show/545259
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=224
2017-11-24 16:29:49 +00:00
6c11f8d877 Accepting request 544658 from home:RBrownSUSE:branches:network
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544658
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=223
2017-11-24 10:22:50 +00:00
fc48f6ba17 Accepting request 543879 from home:pluskalm:branches:network
- Use python3 by default (fate#323526)

OBS-URL: https://build.opensuse.org/request/show/543879
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=221
2017-11-21 09:43:45 +00:00
OBS User mrdocs
efc0e572f3 Accepting request 523293 from home:msmeissn:branches:network
- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)

OBS-URL: https://build.opensuse.org/request/show/523293
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=219
2017-09-14 01:12:46 +00:00
dcab876062 OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=217 2017-09-07 12:06:06 +00:00
7e6301a923 Accepting request 520246 from home:j-engel:branches:network
- Enable JSON statistics

OBS-URL: https://build.opensuse.org/request/show/520246
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=216
2017-09-07 12:02:08 +00:00
OBS User mrdocs
4215a9d83e Accepting request 507735 from home:dimstar:Factory
- Run systemctl daemon-reload even when this is not build with
  systemd support: if installing bind on a systemd service and not
  reloading systemd daemon, then the service 'named' is not known
  right after package installation, causing confusion.

OBS-URL: https://build.opensuse.org/request/show/507735
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=212
2017-07-03 22:11:50 +00:00
43448a770a Accepting request 507232 from home:simotek:branches:network
- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]

OBS-URL: https://build.opensuse.org/request/show/507232
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=211
2017-06-30 10:58:48 +00:00
7b1425a23f Accepting request 496935 from home:dimstar:Factory
a- Fix named init script to dynamically find the location of the
   openssl engines (boo#1040027).

OBS-URL: https://build.opensuse.org/request/show/496935
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=209
2017-05-20 15:34:20 +00:00
4e8c935dd7 Accepting request 481339 from home:kukuk:branches:network
- Add with_systemd define with default off, since we still use init
  scripts and no systemd units.

OBS-URL: https://build.opensuse.org/request/show/481339
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=207
2017-03-23 16:11:03 +00:00
44c7103fc2 Accepting request 458921 from home:kukuk:branches:network
- Don't require and call insserv if we use systemd

OBS-URL: https://build.opensuse.org/request/show/458921
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=205
2017-02-21 10:39:18 +00:00