Commit Graph

900 Commits

Author SHA1 Message Date
Petr Menšík
46e0d484ee Reenable documentation building
Latest release has not correctly formatted manual pages. Correct it by
rebuilding every manual page during the build, not only those modified
by a patch.

Fixed oot build of documentation. Because docbook does not work well
with out of tree builds, copy all sources required for documentation
into build directory. Should regenerate all manual pages, also html and
PDF formatted ARM.
2020-11-30 20:29:15 +01:00
Petr Menšík
ad33c6c095 Update to BIND 9.11.25
Moved Red Hat specific changes from generated named.8 file to docbook.
It is regenerated to named.8 during the build.

Release notes: https://downloads.isc.org/isc/bind9/9.11.25/RELEASE-NOTES-bind-9.11.25.html
2020-11-26 13:21:59 +01:00
Petr Menšík
aae89bb5ed Fix crash on NTA recheck failure (#1893761)
Call nta_detach() before dns_view_weakdetach() so view is available.
2020-11-04 15:31:29 +01:00
Petr Menšík
01c5de480b Update to 9.11.24
DNS Flag Day 2020 - default ENDS buffer size changed to 1232.

https://downloads.isc.org/isc/bind9/9.11.24/RELEASE-NOTES-bind-9.11.24.html
2020-10-23 17:20:10 +02:00
Adrian Reber
293d93455e
Rebuilt for protobuf 3.13 2020-09-23 17:05:52 +02:00
Petr Menšík
fa2913151c Merge bind-lite-devel into bind-devel
Those packages were very similar in BIND 9.11. Because nothing requires
just bind-lite-devel package, make just one devel package with all
requirements.  Keep separated libraries, but only one devel package.

Include also obsolete for automatic uninstall of previous bind-lite-devel
package. bind-devel now contains everything required to link against
libraries.
2020-09-22 10:23:43 +02:00
Petr Menšík
392ac795ce Add fix of rbtdb.c from upstream
ARM and s390x cannot compile, because they lack atomic implementation in
lib/isc. Include upstream fix after 9.11.23 release.

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2020-09-18 14:49:47 +02:00
Petr Menšík
1d47d2b5c9 Update to 9.11.23
Only bugs fixed.
- LOC records parsing fixed
- nonsecurity fixes from fuzzing

upstream release notes:
https://downloads.isc.org/isc/bind9/9.11.23/RELEASE-NOTES-bind-9.11.23.html

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2020-09-17 23:02:38 +02:00
Petr Menšík
c8e4226ec1 Create bind-dnssec-doc subpackage
Move there all manual pages of bind-dnssec-utils. They can be then
shared by bind-pkcs11-utils with just one package owning them.
2020-09-17 22:39:18 +02:00
Petr Menšík
d4dab07e86 Remove ancient version triggers 2020-09-17 22:38:47 +02:00
Petr Menšík
165b833b3d Remove ancient provides
Most of they are related to RHEL 5, which is far too long unsupported.
Stop dragging them along for ages.
2020-09-17 22:37:50 +02:00
Petr Menšík
f37fbc8205 Remove DEVEL conditional define
I find no reason to turn off devel package creation. It can be ignored
if required, but is mandatory due to Fedora packaging guidelines.
Simplify it a bit.
2020-09-17 19:02:11 +02:00
Petr Menšík
dac5cf7a4c Add missing architecture to lmdb 2020-09-17 14:39:52 +02:00
Petr Menšík
e761bce6ce Require libcap-devel from devel package
isc-config.sh --libs isc requires libcap devel, even when it is not
required by any headers. Make sure it is present.
2020-09-04 12:38:57 +02:00
Petr Menšík
745f43ac05 Update to 9.11.22
https://downloads.isc.org/isc/bind9/9.11.22/RELEASE-NOTES-bind-9.11.22.html
2020-08-21 10:29:56 +02:00
Fedora Release Engineering
2dfc59bcef - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 00:08:12 +00:00
Fedora Release Engineering
bd472bc593 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 13:07:40 +00:00
Petr Menšík
146cab7989 Update to 9.11.21
Only bugfix release without significant changes.

Release notes at:
https://downloads.isc.org/isc/bind9/9.11.21/RELEASE-NOTES-bind-9.11.21.html
2020-07-15 22:15:32 +02:00
Petr Menšík
b4eefd1f96 Add missing lite library depends 2020-06-23 12:31:14 +02:00
Petr Menšík
192c76c22a Create doc subpackage
Subpackage is there just as shared documentation for main package.
I want to stay in original directory, files should not move since they
were in bind package.

Documentation is not regenerated, but used as shipped by upstream.
2020-06-23 12:24:31 +02:00
Adrian Reber
78aed13f06
Rebuilt for protobuf 3.12 2020-06-20 18:38:36 +02:00
Petr Menšík
f82859a3a0 Update to 9.11.20
Fixes CVE-2020-8619 and few more issues
2020-06-17 22:53:13 +02:00
Miro Hrončok
8aa5837978 Rebuilt for Python 3.9 2020-05-26 02:41:36 +02:00
Petr Menšík
674cbdbb3e Make usage of initscripts optional
Do not depend hard on initscript just to provide fancy colored status.
When started from systemd, it does not really matter.

Return exactly the same return code as returned by the original tool.
2020-05-25 22:52:44 +02:00
Petr Menšík
f9201b844d Update to 9.11.19
Includes new CVE fixes
2020-05-25 12:15:44 +02:00
Björn Esser
b72488cc24 Rebuild (json-c) 2020-04-22 00:01:59 +02:00
Petr Menšík
076f5f80bc fixup! Make spec work also on CentOS 8 2020-04-16 12:46:45 +02:00
Petr Menšík
96e1d963a4 Make spec work also on CentOS 8
Move some conditional requirements to be enabled just on Fedora.
2020-04-16 11:10:15 +02:00
Petr Menšík
6e3b160e37 Update to BIND 9.11.18
From Upstream Release notes:

Security Fixes

    DNS rebinding protection was ineffective when BIND 9 is configured as a forwarding DNS server. Found and responsibly reported by Tobias Klein. [GL #1574]

Known Issues

    We have received reports that in some circumstances, receipt of an IXFR can cause the processing of queries to slow significantly. Some of these were related to RPZ processing, which has been fixed in this release (see below). Others appear to occur where there are NSEC3-related changes (such as an operator changing the NSEC3 salt used in the hash calculation). These are being investigated. [GL #1685]
2020-04-16 10:53:28 +02:00
Petr Menšík
485d16a77e Cleanup test definition
Leave installation of dependencies on tests itself. Use beakerlib to
install packages.
2020-04-14 11:37:49 +02:00
Petr Menšík
449ff581ad Move filter to correct location 2020-04-14 11:37:49 +02:00
Petr Menšík
ce9edd09af Run master branch instead 2020-04-14 11:37:49 +02:00
Petr Menšík
2e8a3a9146 Use fmf filter for test case selection 2020-04-14 11:37:49 +02:00
Petr Menšík
93e0db889f Not sure how to specify tests to run
check https://fmf.readthedocs.io/en/latest/ for help
2020-04-14 11:37:49 +02:00
Petr Menšík
f3b42f85fe Try to pass with modified branch 2020-04-14 11:37:49 +02:00
Petr Menšík
5c15ad824e Remove unused patches 2020-03-31 20:50:35 +02:00
Petr Menšík
c223e3e275 Update to 9.11.17
Updated a bit SDB related patches.
2020-03-31 20:37:08 +02:00
Fedora Release Engineering
a1d448dbef - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-28 12:57:50 +00:00
Petr Menšík
c23c15d73b Remove libmaxminddb-devel from devel dependencies
Unlike other build dependencies, no public headers include from
libmaxminddb any symbols. That means no build would ever fail
if libmaxminddb-devel package is not installed. Do not require it when
installing bind-lite-devel but keep the requirement when building from
sources.
2020-01-08 16:36:11 +01:00
Petr Menšík
4fa84d9ccc Preserve symlinks to named.conf on iscdlv modification (#1786626) 2020-01-03 20:26:39 +01:00
Petr Menšík
b4802c2e65 Fix oot build
gen would not compile under oot build
2020-01-02 11:44:53 +01:00
Petr Menšík
43f4de9bf3 Include more Thread Sanitizer changes
Fix as much race conditions as possible.
2019-12-19 19:38:56 +01:00
Petr Menšík
23657868e6 Update to 9.11.14
Includes ThreadSanitizer fixes already included as downstream patches.
Adjusts serve-stale patch, one new statistics.
2019-12-19 18:43:23 +01:00
Petr Menšík
9406a85e89 Fix dnf builddep when python3-devel is not installed
Build requirements fetch fail on clean system with just basic utils.
2019-12-19 18:42:50 +01:00
Petr Menšík
d5106d287e Add one more candidate for issue fixing
Imported from upstream commit 6eed12605154b8ce10e9be0f51253e6ec318550e
2019-12-19 18:42:47 +01:00
Petr Menšík
9cfd91a473 Add ThreadSanitizer support
Has to be enabled in build by --with TSAN.
Would make build fail unit tests and print many warnings about possible
race conditions. Not useful for production build, but useful for
debugging thread related problems in system tests.
2019-12-04 17:57:12 +01:00
Petr Menšík
ccf1b03734 Disable Berkeley DB support (#1779190)
Allow enabling it by build --with BDB, but keep it disabled by default.
2019-12-03 19:05:53 +01:00
Petr Menšík
c44ebdeade Bump spec for bug #1736762 2019-12-02 20:35:43 +01:00
Petr Menšík
1a4de8b956 Backport a few upstream thread safety fixes
It might not fix all issues, but was detected by upstream using
automated tool. Should not break anything new, but might fix issue
triggered usually on ppc64le platform.
2019-12-02 20:34:08 +01:00
Petr Menšík
6f27f8e4a7 Complete explicit disabling of RSAMD5 in FIPS mode (#1709553)
Previous fix included just part inside named. However, checking part
would check algorithm support also in check library. The code is almost
the same. Permit already disabled algoritms also in libbind9.

Use the same change as RHEL.
2019-11-26 19:37:29 +01:00