Petr Menšík
021aeeed38
[CVE-2022-0396] Resolve #3112 TCP sockets stuck in CLOSE_WAIT
...
5818. [security] A synchronous call to closehandle_cb() caused
isc__nm_process_sock_buffer() to be called recursively,
which in turn left TCP connections hanging in the
CLOSE_WAIT state blocking indefinitely when
out-of-order processing was disabled. (CVE-2022-0396)
[GL #3112 ]
Resolves: CVE-2022-0396
2022-03-25 21:03:37 +01:00
Petr Menšík
f35b435d1d
Remove merged changes and update changed patch
...
Adjust downstream patches to changes made upstream.
Resolves: rhbz#2019573
2021-11-23 11:27:00 +01:00
Petr Menšík
befd906113
Update 9.16.23
...
Reloading a catalog zone which referenced a missing/deleted member zone
triggered a runtime check failure, causing named to exit prematurely.
This has been fixed. [GL #2308 ]
https://downloads.isc.org/isc/bind9/9.16.23/doc/arm/html/notes.html#notes-for-bind-9-16-23
Resolves: rhbz#2019573 CVE-2021-25219
2021-11-23 11:26:51 +01:00
Petr Menšík
5c9da7c5f9
Propagate system emphemeral ports to chroot
...
BIND reads default system port ranges from /proc file. Propagate just
that single file to bind chroot. Defaults should be therefore the same
as on named.service.
Resolves: rhbz#2013595
2021-10-13 12:27:59 +02:00
Petr Menšík
31b69a221c
Remove the code to adjust listening interfaces for *-source-v6
...
Previously, named would run with a configuration where *-source-v6 (notify-source-v6,
transfer-source-v6 and query-source-v6) address and port could be simultaneously used
for listening. This is no longer true for BIND 9.16+ and the code that would do
interface adjustments would unexpectedly disable listening on TCP for such interfaces.
Resolves: rhbz#1999691
2021-10-12 13:32:02 +02:00
Petr Menšík
74c48aefdf
Ensure return codes make it into generated dig manual
...
It seems patched version were not catched by build dependencies. Change
include modification to propagate it.
Resolves: rhbz#1989909
2021-10-12 12:55:14 +02:00
Petr Menšík
579299f7df
Update gating for RHEL9
2021-08-26 12:45:34 +02:00
Petr Menšík
6e60c9d8a4
Actually enable LMDB in build
...
Fixes broken commit 25906f35b3
2021-08-24 16:38:08 +02:00
Petr Menšík
d63e24c757
Fix regression in map fileformat compatibility
...
https://gitlab.isc.org/isc-projects/bind9/-/issues/2872
https://kb.isc.org/docs/map-zone-format-incompatibility-in-bind-9-16-20-and-9-17-17
(cherry picked from commit 50e206624d
2021-08-24 16:36:58 +02:00
Petr Menšík
4b70312f6d
Update to 9.16.20 ( #1995289 )
...
(cherry picked from commit 9d509c6973
2021-08-19 21:12:17 +02:00
Petr Menšík
1fdc7ae892
Do not depend on systemd package
...
(cherry picked from commit 739136846c
2021-08-19 21:10:58 +02:00
Petr Menšík
37123a3b7a
Include backward compatible html symlink in doc subpackage
...
(cherry picked from commit dc4646b7fd
2021-08-19 21:08:39 +02:00
Mohan Boddu
092da5d1c3
Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
...
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 19:29:18 +00:00
Petr Menšík
09ac3e24ac
Update to 9.16.19
...
Remove support for PREVER and PATCHVER, since upstream no longer
releases them. Simplifies a bit versioning.
Resolves: rhbz##1956777
2021-07-22 00:32:18 +02:00
Petr Menšík
91c5e974dc
Update to 9.16.16
...
https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/html/notes.html#notes-for-bind-9-16-16
Resolves: rhbz##1956777
2021-07-22 00:31:03 +02:00
Petr Menšík
25906f35b3
Enable LMDB build
...
Resolves: rhbz#1975775
2021-06-24 15:27:17 +02:00
Petr Menšík
ab74f1f161
Enable DNSTAP feature
...
Resolves: rhbz#1975268
2021-06-24 15:26:00 +02:00
Petr Menšík
e89ef51a86
Enable rebuilding HTML documentation
...
Build separate bind-doc package with possibly modified documentation.
Related: rhbz#1956777
2021-06-24 15:06:45 +02:00
Petr Menšík
56a6bb6781
Disable DLZ & PKCS11
...
Disable features not shipped on RHEL9.
UNITTESTS are unfortunately unavailable, kyua is missing from buildroot.
Related: rhbz#1956777
2021-06-24 15:05:14 +02:00
Mohan Boddu
dc8a7e64a4
Rebuilt for RHEL 9 BETA for openssl 3.0
...
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-06-16 03:22:33 +00:00
Petr Menšík
a4d7a01bbb
Update to 9.16.15
...
Resolves CVE-2021-25215 and CVE-2021-25214.
Removes disable-isc-spnego flag, because custom isc spnego code were
removed with also this flag. It is default (and the only) option now.
(cherry picked from commit f8cb93d57c
2021-05-04 14:11:01 +02:00
Petr Menšík
348d01cc21
Allow use of isc/util.h without "config.h"
...
It prevents compilation of bind-dyndb-ldap. Because config.h is never
used by bind-dyndb-ldap, stop exporting it in devel package. It should
be only implementation detail.
(cherry picked from commit 2e4a03677c
2021-05-04 14:09:44 +02:00
Petr Menšík
9f34324bc0
Update to 9.16.13
...
Reworked custom redhat version. Complete version is now part of library
names. Libraries are not recommended for any third party application.
They are still required for bind-dyndb-ldap only.
Version of named changed, only suffix -RH is appended to upstream
version. Therefore dig would not contain version
9.6.11-RedHat-9.6.11-1.fc34, but only 9.6.13-RH. Version of fedora build
have to be obtained from rpm -q bind.
Version is now part of library names, bind-libs-lite was merged to
bind-libs. bind-dyndb-ldap needs whole bind, no point to offer smaller
library set just for its dependencies.
Updated also named(8) manual page to match current state of SELinux.
(cherry picked from commit 76074cd59a
2021-05-04 14:08:10 +02:00
Petr Menšík
a5885acb52
Freeipa tests were wrong and matched elsewhere
...
OpenQA tests are already started for critpath components. Freeipa
results are checked by Fedora critpath checks, it does not need to be in
gating.yaml.
Check fedora-infra/ansible repo,
roles/openshift-apps/greenwave/templates/fedora.yaml for details.
(cherry picked from commit f182202f6e
2021-05-04 14:05:31 +02:00
Mohan Boddu
2c75a8e440
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
...
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-15 22:43:51 +00:00
DistroBaker
432cf22759
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#d4a07bb1cc9a5065239e1dcf656d5de44d45b40e
2021-03-11 20:19:38 +00:00
DistroBaker
b4d56cd9f3
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#8713f270d5e970ec15fece7051a4fc50cdbd9eda
2021-02-03 11:40:41 +01:00
DistroBaker
1984850958
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#84e2317aef685da5ba32268db0d9abe7b9799362
2021-01-22 20:42:08 +00:00
DistroBaker
eda785f6da
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#af42e590708ff76011fda73f481639480c155d1d
2021-01-16 15:32:02 +00:00
DistroBaker
30a5379a7f
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#d955a1450b6ef009d85e931e669acb2e3fdd3e27
2021-01-12 20:05:29 +00:00
DistroBaker
2446ba7188
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#46e0d484eedcb4a14046baa005213b06d6375a1e
2020-12-10 01:07:33 +01:00
DistroBaker
b3bda3b52f
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#46e0d484eedcb4a14046baa005213b06d6375a1e
2020-12-04 17:00:10 +01:00
DistroBaker
87b3b731b7
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#46e0d484eedcb4a14046baa005213b06d6375a1e
2020-11-30 21:40:50 +00:00
DistroBaker
a9c482da54
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#ad33c6c09557956426b2c7053495496dc9c442cb
2020-11-26 13:20:54 +00:00
DistroBaker
6b2bb6b270
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#aae89bb5edab5bfcdd61d69bc8b082ce38587f6d
2020-11-04 15:36:29 +00:00
DistroBaker
d9c2aea4bc
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/bind.git#01c5de480b816ef4fcab8dbb15b5a71bad4d74ab
2020-10-27 19:10:10 +01:00
Petr Šabata
49cf061d17
RHEL 9.0.0 Alpha bootstrap
...
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/bind#293d93455e05945f11b4ee320db6a2fa4f31e43c
2020-10-14 22:16:50 +02:00
Release Configuration Management
b080cb76e0
New branch setup
2020-10-08 11:04:00 +00:00
