SHA256
1
0
forked from pool/bind
Commit Graph

344 Commits

Author SHA256 Message Date
Navin Kukreja
41f90b8125 Accepting request 568769 from home:nkukreja:branches:network
- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)

OBS-URL: https://build.opensuse.org/request/show/568769
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=228
2018-01-23 22:28:59 +00:00
Dominique Leuenberger
4b487a5807 Accepting request 554965 from network
OBS-URL: https://build.opensuse.org/request/show/554965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=129
2018-01-13 20:36:06 +00:00
Ismail Dönmez
3dc2357a41 Accepting request 554799 from home:vitezslav_cizek:branches:network
- Use getent when adding user/group
- update changelog to mention removed options

  * Remove no longer recognized --enable-rrl

OBS-URL: https://build.opensuse.org/request/show/554799
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=226
2017-12-07 10:37:08 +00:00
e04eec6142 - license changed to MPL-2.0 according to legal.
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=225
2017-11-25 15:31:35 +00:00
b264302d00 Accepting request 545259 from home:scarabeus_iv:branches:network
- Add back init scripts, systemd units aren't ready yet

- Add python3-bind subpackage to allow python bind interactions

- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts

- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff

- drop bind-openssl11.patch (merged upstream)

- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment

- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)

OBS-URL: https://build.opensuse.org/request/show/545259
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=224
2017-11-24 16:29:49 +00:00
6c11f8d877 Accepting request 544658 from home:RBrownSUSE:branches:network
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544658
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=223
2017-11-24 10:22:50 +00:00
Dominique Leuenberger
4728a9bd1f Accepting request 544110 from network
OBS-URL: https://build.opensuse.org/request/show/544110
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=128
2017-11-23 08:34:41 +00:00
fc48f6ba17 Accepting request 543879 from home:pluskalm:branches:network
- Use python3 by default (fate#323526)

OBS-URL: https://build.opensuse.org/request/show/543879
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=221
2017-11-21 09:43:45 +00:00
Dominique Leuenberger
e672e05633 Accepting request 525963 from network
1

OBS-URL: https://build.opensuse.org/request/show/525963
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=127
2017-09-15 19:09:07 +00:00
OBS User mrdocs
efc0e572f3 Accepting request 523293 from home:msmeissn:branches:network
- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)

OBS-URL: https://build.opensuse.org/request/show/523293
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=219
2017-09-14 01:12:46 +00:00
Dominique Leuenberger
8decc9c4e9 Accepting request 521995 from network
- Enable JSON statistics

OBS-URL: https://build.opensuse.org/request/show/521995
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=126
2017-09-09 18:23:48 +00:00
dcab876062 OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=217 2017-09-07 12:06:06 +00:00
7e6301a923 Accepting request 520246 from home:j-engel:branches:network
- Enable JSON statistics

OBS-URL: https://build.opensuse.org/request/show/520246
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=216
2017-09-07 12:02:08 +00:00
Dominique Leuenberger
44f399a675 Accepting request 510389 from network
1

OBS-URL: https://build.opensuse.org/request/show/510389
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=125
2017-07-30 09:21:58 +00:00
70734c6ca6 Accepting request 510278 from home:msmeissn:branches:network
- named.root: refreshed from internic to 2017060102 (bsc#1048729)

OBS-URL: https://build.opensuse.org/request/show/510278
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=214
2017-07-14 17:29:38 +00:00
Dominique Leuenberger
29771cc25c Accepting request 507946 from network
1

OBS-URL: https://build.opensuse.org/request/show/507946
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=124
2017-07-04 07:08:41 +00:00
OBS User mrdocs
4215a9d83e Accepting request 507735 from home:dimstar:Factory
- Run systemctl daemon-reload even when this is not build with
  systemd support: if installing bind on a systemd service and not
  reloading systemd daemon, then the service 'named' is not known
  right after package installation, causing confusion.

OBS-URL: https://build.opensuse.org/request/show/507735
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=212
2017-07-03 22:11:50 +00:00
43448a770a Accepting request 507232 from home:simotek:branches:network
- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]

OBS-URL: https://build.opensuse.org/request/show/507232
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=211
2017-06-30 10:58:48 +00:00
Dominique Leuenberger
076c5e6f0a Accepting request 496968 from network
a- Fix named init script to dynamically find the location of the
   openssl engines (boo#1040027). (forwarded request 496935 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/496968
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=123
2017-05-20 15:55:49 +00:00
7b1425a23f Accepting request 496935 from home:dimstar:Factory
a- Fix named init script to dynamically find the location of the
   openssl engines (boo#1040027).

OBS-URL: https://build.opensuse.org/request/show/496935
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=209
2017-05-20 15:34:20 +00:00
Yuchen Lin
a34dbd464f Accepting request 482314 from network
1

OBS-URL: https://build.opensuse.org/request/show/482314
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=122
2017-03-31 13:04:55 +00:00
4e8c935dd7 Accepting request 481339 from home:kukuk:branches:network
- Add with_systemd define with default off, since we still use init
  scripts and no systemd units.

OBS-URL: https://build.opensuse.org/request/show/481339
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=207
2017-03-23 16:11:03 +00:00
Dominique Leuenberger
f36624c448 Accepting request 459475 from network
1

OBS-URL: https://build.opensuse.org/request/show/459475
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=121
2017-02-24 23:48:56 +00:00
44c7103fc2 Accepting request 458921 from home:kukuk:branches:network
- Don't require and call insserv if we use systemd

OBS-URL: https://build.opensuse.org/request/show/458921
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=205
2017-02-21 10:39:18 +00:00
Dominique Leuenberger
fbedf62a14 Accepting request 457428 from network
1

OBS-URL: https://build.opensuse.org/request/show/457428
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=120
2017-02-18 02:15:00 +00:00
Navin Kukreja
9e49836a48 Accepting request 457420 from home:nkukreja:branches:network
- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch

OBS-URL: https://build.opensuse.org/request/show/457420
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=203
2017-02-15 13:26:45 +00:00
Dominique Leuenberger
def83543b1 Accepting request 452040 from network
1

OBS-URL: https://build.opensuse.org/request/show/452040
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=119
2017-01-25 21:38:48 +00:00
f26d340f7b Accepting request 452036 from home:AndreasStieger:branches:network
fix factory submission

OBS-URL: https://build.opensuse.org/request/show/452036
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=201
2017-01-23 20:09:49 +00:00
c6ec97ecb6 Accepting request 449784 from home:simotek:branches:network
Fix bsc#1018699 by taking latest update in series 9.11 needs a little more work

OBS-URL: https://build.opensuse.org/request/show/449784
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=200
2017-01-12 12:21:22 +00:00
Dominique Leuenberger
439ef42e37 Accepting request 438333 from network
Apply cve-2016-8864.patch to fix CVE-2016-8864 (bsc#1007829). (forwarded request 438189 from psimons)

OBS-URL: https://build.opensuse.org/request/show/438333
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=118
2016-11-03 10:11:17 +00:00
318666062f Accepting request 438189 from home:psimons:branches:network
Apply cve-2016-8864.patch to fix CVE-2016-8864 (bsc#1007829).

OBS-URL: https://build.opensuse.org/request/show/438189
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=198
2016-11-02 13:30:34 +00:00
Dominique Leuenberger
ea77a151fd Accepting request 430623 from network
1

OBS-URL: https://build.opensuse.org/request/show/430623
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=117
2016-09-28 00:38:15 +00:00
Ismail Dönmez
7af14e49dd Accepting request 430610 from home:psimons:branches:network
Security update to fix CVE-2016-2776 (bsc#1000362).

OBS-URL: https://build.opensuse.org/request/show/430610
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=196
2016-09-27 18:38:49 +00:00
Dominique Leuenberger
b7bfd06664 Accepting request 404235 from network
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/404235
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=116
2016-07-01 07:55:03 +00:00
Reinhard Max
8b99b04f2a - Remove the start/stop dependency of named and lwresd on remote-fs
to break a service dependency cycle (bsc#947483, bsc#963971).
- Make /var/lib/named owned by the named user (bsc#908850,
  bsc#875691).
- Call systemd service macros with the full service name.
- Security update 9.10.3-P4:

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=194
2016-06-16 12:00:45 +00:00
Dominique Leuenberger
d15631016c Accepting request 390129 from network
1

OBS-URL: https://build.opensuse.org/request/show/390129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=115
2016-04-30 21:24:51 +00:00
Rusmir Duško
2e4b7daa78 Accepting request 389954 from home:lnussel:branches:network
- remove BuildRequire libcap. That is only a legacy library, not
  actually used for building. libcap-devel pulls in the right one.

OBS-URL: https://build.opensuse.org/request/show/389954
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=192
2016-04-15 07:56:29 +00:00
Dominique Leuenberger
7ad85aecdc Accepting request 370068 from network
- Security update 9.10.3-P3:
  * CVE-2016-1285, bsc#970072: assert failure on input parsing can
    cause premature exit.
  * CVE-2016-1286, bsc#970073: An error when parsing signature
    records for DNAME can lead to named exiting due to an assertion
    failure.
  * CVE-2016-2088, bsc#970074: a deliberately misconstructed packet
    containing multiple cookie options to cause named to terminate
    with an assertion failure.

OBS-URL: https://build.opensuse.org/request/show/370068
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=114
2016-03-18 20:33:29 +00:00
Reinhard Max
2d8afe69b8 - Security update 9.10.3-P3:
* CVE-2016-1285, bsc#970072: assert failure on input parsing can
    cause premature exit.
  * CVE-2016-1286, bsc#970073: An error when parsing signature
    records for DNAME can lead to named exiting due to an assertion
    failure.
  * CVE-2016-2088, bsc#970074: a deliberately misconstructed packet
    containing multiple cookie options to cause named to terminate
    with an assertion failure.

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=190
2016-03-11 13:59:03 +00:00
Reinhard Max
abbe73be65 - Security update 9.10.3-P3 fixes two assertion failures that can
lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=189
2016-03-11 13:55:29 +00:00
Dominique Leuenberger
c470e3f7b2 Accepting request 361595 from network
1

OBS-URL: https://build.opensuse.org/request/show/361595
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=113
2016-03-01 08:38:53 +00:00
0f06af6f9d Accepting request 361463 from home:bmwiedemann:branches:network
- drop a changing timestamp making build reproducible

OBS-URL: https://build.opensuse.org/request/show/361463
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=187
2016-02-26 07:55:47 +00:00
Lars Müller
fd2b586269 Sligthly enhance the last commmit
- \ at the last option line allows us to keep the full history
- a tab is no a space

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=186
2016-02-12 21:48:50 +00:00
Lars Müller
9508d45935 Accepting request 359100 from home:elvigia:branches:network
- Build with --with-randomdev=/dev/urandom otherwise 
  libisc will use /dev/random to gather entropy and that might
  block, short read etc..

OBS-URL: https://build.opensuse.org/request/show/359100
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=185
2016-02-12 19:11:31 +00:00
Dominique Leuenberger
dfc6526d85 Accepting request 354931 from network
- Security update 9.10.3-P3:
  * Specific APL data could trigger an INSIST (CVE-2015-8704,
    bsc#962189).
  * Certain errors that could be encountered when printing out or
    logging an OPT record containing a CLIENT-SUBNET option could
    be mishandled, resulting in an assertion failure
    (CVE-2015-8705, bsc#962190).
  * Authoritative servers that were marked as bogus (e.g.
    blackholed in configuration or with invalid addresses) were
    being queried anyway.

OBS-URL: https://build.opensuse.org/request/show/354931
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=112
2016-01-28 16:19:51 +00:00
Reinhard Max
c7dc2ebf4f - Security update 9.10.3-P3:
* Specific APL data could trigger an INSIST (CVE-2015-8704,
    bsc#962189).
  * Certain errors that could be encountered when printing out or
    logging an OPT record containing a CLIENT-SUBNET option could
    be mishandled, resulting in an assertion failure
    (CVE-2015-8705, bsc#962190).
  * Authoritative servers that were marked as bogus (e.g.
    blackholed in configuration or with invalid addresses) were
    being queried anyway.

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=183
2016-01-20 11:04:34 +00:00
Dominique Leuenberger
eaab871f66 Accepting request 350227 from network
- Update to version 9.10.3-P2 to fix a remote denial of service by
  misparsing incoming responses (CVE-2015-8000, bsc#958861).

OBS-URL: https://build.opensuse.org/request/show/350227
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=111
2015-12-23 08:56:59 +00:00
Reinhard Max
7c65773c2b OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=181 2015-12-21 17:51:47 +00:00
Reinhard Max
5f956be5fc - Update to version 9.10.3-P2 to fix a remote denial of service by
misparsing incoming responses (CVE-2015-8000, bsc#958861).

OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=180
2015-12-21 17:12:31 +00:00
Dominique Leuenberger
2fae4c21e5 Accepting request 336452 from network
- Avoid double %setup, it confuses some versions of quilt.
- Summary/description update (forwarded request 336332 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/336452
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=110
2015-10-22 10:56:27 +00:00