rpms/bind
7
0
Fork 1
Code Issues Pull Requests Releases Activity
39 Commits 7 Branches 59 Tags 5.5 MiB
68bb3ef214
Commit Graph

39 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Petr Menšík
68bb3ef214 Tighten cache protection against record from forwarders 
5817.	[security]	The rules for acceptance of records into the cache
			have been tightened to prevent the possibility of
			poisoning if forwarders send records outside
			the configured bailiwick. (CVE-2021-25220) [GL #2950]

Resolves: CVE-2021-25220
 2022-04-11 18:00:59 +02:00
Petr Menšík
021aeeed38 [CVE-2022-0396] Resolve #3112 TCP sockets stuck in CLOSE_WAIT 
5818.	[security]	A synchronous call to closehandle_cb() caused
			isc__nm_process_sock_buffer() to be called recursively,
			which in turn left TCP connections hanging in the
			CLOSE_WAIT state blocking indefinitely when
			out-of-order processing was disabled. (CVE-2022-0396)
			[GL #3112]

Resolves: CVE-2022-0396
 2022-03-25 21:03:37 +01:00
Petr Menšík
f35b435d1d Remove merged changes and update changed patch 
Adjust downstream patches to changes made upstream.

Resolves: rhbz#2019573
 2021-11-23 11:27:00 +01:00
Petr Menšík
befd906113 Update 9.16.23 
Reloading a catalog zone which referenced a missing/deleted member zone
triggered a runtime check failure, causing named to exit prematurely.
This has been fixed. [GL #2308]

https://downloads.isc.org/isc/bind9/9.16.23/doc/arm/html/notes.html#notes-for-bind-9-16-23

Resolves: rhbz#2019573 CVE-2021-25219
 2021-11-23 11:26:51 +01:00
Petr Menšík
5c9da7c5f9 Propagate system emphemeral ports to chroot 
BIND reads default system port ranges from /proc file. Propagate just
that single file to bind chroot. Defaults should be therefore the same
as on named.service.

Resolves: rhbz#2013595
 2021-10-13 12:27:59 +02:00
Petr Menšík
31b69a221c Remove the code to adjust listening interfaces for *-source-v6 
Previously, named would run with a configuration where *-source-v6 (notify-source-v6,
transfer-source-v6 and query-source-v6) address and port could be simultaneously used
for listening. This is no longer true for BIND 9.16+ and the code that would do
interface adjustments would unexpectedly disable listening on TCP for such interfaces.

Resolves: rhbz#1999691
 2021-10-12 13:32:02 +02:00
Petr Menšík
74c48aefdf Ensure return codes make it into generated dig manual 
It seems patched version were not catched by build dependencies. Change
include modification to propagate it.

Resolves: rhbz#1989909
 2021-10-12 12:55:14 +02:00
Petr Menšík
579299f7df Update gating for RHEL9 2021-08-26 12:45:34 +02:00
Petr Menšík
6e60c9d8a4 Actually enable LMDB in build 
Fixes broken commit 25906f35b3, where only
changelog comment remained after cherry-pick.

Resolves: rhbz#1975775
 2021-08-24 16:38:08 +02:00
Petr Menšík
d63e24c757 Fix regression in map fileformat compatibility 
https://gitlab.isc.org/isc-projects/bind9/-/issues/2872
https://kb.isc.org/docs/map-zone-format-incompatibility-in-bind-9-16-20-and-9-17-17

(cherry picked from commit 50e206624d)

Related: rhbz#1956777
 2021-08-24 16:36:58 +02:00
Petr Menšík
4b70312f6d Update to 9.16.20 (#1995289) 
(cherry picked from commit 9d509c6973)

Resolves: rhbz#1956777 CVE-2021-25218
 2021-08-19 21:12:17 +02:00
Petr Menšík
1fdc7ae892 Do not depend on systemd package 
(cherry picked from commit 739136846c)

Related: rhbz#1956777
 2021-08-19 21:10:58 +02:00
Petr Menšík
37123a3b7a Include backward compatible html symlink in doc subpackage 
(cherry picked from commit dc4646b7fd)

Related: rhbz#1956777
 2021-08-19 21:08:39 +02:00
Mohan Boddu
092da5d1c3 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags 
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-08-09 19:29:18 +00:00
Petr Menšík
09ac3e24ac Update to 9.16.19 
Remove support for PREVER and PATCHVER, since upstream no longer
releases them. Simplifies a bit versioning.

Resolves: rhbz##1956777
 2021-07-22 00:32:18 +02:00
Petr Menšík
91c5e974dc Update to 9.16.16 
https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/html/notes.html#notes-for-bind-9-16-16

Resolves: rhbz##1956777
 2021-07-22 00:31:03 +02:00
Petr Menšík
25906f35b3 Enable LMDB build 
Resolves: rhbz#1975775
 2021-06-24 15:27:17 +02:00
Petr Menšík
ab74f1f161 Enable DNSTAP feature 
Resolves: rhbz#1975268
 2021-06-24 15:26:00 +02:00
Petr Menšík
e89ef51a86 Enable rebuilding HTML documentation 
Build separate bind-doc package with possibly modified documentation.

Related: rhbz#1956777
 2021-06-24 15:06:45 +02:00
Petr Menšík
56a6bb6781 Disable DLZ & PKCS11 
Disable features not shipped on RHEL9.
UNITTESTS are unfortunately unavailable, kyua is missing from buildroot.

Related: rhbz#1956777
 2021-06-24 15:05:14 +02:00
Mohan Boddu
dc8a7e64a4 Rebuilt for RHEL 9 BETA for openssl 3.0 
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-06-16 03:22:33 +00:00
Petr Menšík
a4d7a01bbb Update to 9.16.15 
Resolves CVE-2021-25215 and CVE-2021-25214.
Removes disable-isc-spnego flag, because custom isc spnego code were
removed with also this flag. It is default (and the only) option now.

(cherry picked from commit f8cb93d57c)

Resolves: rhbz#1956777
 2021-05-04 14:11:01 +02:00
Petr Menšík
348d01cc21 Allow use of isc/util.h without "config.h" 
It prevents compilation of bind-dyndb-ldap. Because config.h is never
used by bind-dyndb-ldap, stop exporting it in devel package. It should
be only implementation detail.

(cherry picked from commit 2e4a03677c)

Resolves: rhbz#1956777
 2021-05-04 14:09:44 +02:00
Petr Menšík
9f34324bc0 Update to 9.16.13 
Reworked custom redhat version. Complete version is now part of library
names. Libraries are not recommended for any third party application.
They are still required for bind-dyndb-ldap only.

Version of named changed, only suffix -RH is appended to upstream
version. Therefore dig would not contain version
9.6.11-RedHat-9.6.11-1.fc34, but only 9.6.13-RH. Version of fedora build
have to be obtained from rpm -q bind.

Version is now part of library names, bind-libs-lite was merged to
bind-libs. bind-dyndb-ldap needs whole bind, no point to offer smaller
library set just for its dependencies.

Updated also named(8) manual page to match current state of SELinux.

(cherry picked from commit 76074cd59a)

Resolves: rhbz#1956777
 2021-05-04 14:08:10 +02:00
Petr Menšík
a5885acb52 Freeipa tests were wrong and matched elsewhere 
OpenQA tests are already started for critpath components. Freeipa
results are checked by Fedora critpath checks, it does not need to be in
gating.yaml.

Check fedora-infra/ansible repo,
roles/openshift-apps/greenwave/templates/fedora.yaml for details.

(cherry picked from commit f182202f6e)

Related: rhbz#1956777
 2021-05-04 14:05:31 +02:00
Mohan Boddu
2c75a8e440 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-04-15 22:43:51 +00:00
DistroBaker
432cf22759 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#d4a07bb1cc9a5065239e1dcf656d5de44d45b40e
 2021-03-11 20:19:38 +00:00
DistroBaker
b4d56cd9f3 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#8713f270d5e970ec15fece7051a4fc50cdbd9eda
 2021-02-03 11:40:41 +01:00
DistroBaker
1984850958 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#84e2317aef685da5ba32268db0d9abe7b9799362
 2021-01-22 20:42:08 +00:00
DistroBaker
eda785f6da Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#af42e590708ff76011fda73f481639480c155d1d
 2021-01-16 15:32:02 +00:00
DistroBaker
30a5379a7f Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#d955a1450b6ef009d85e931e669acb2e3fdd3e27
 2021-01-12 20:05:29 +00:00
DistroBaker
2446ba7188 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#46e0d484eedcb4a14046baa005213b06d6375a1e
 2020-12-10 01:07:33 +01:00
DistroBaker
b3bda3b52f Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#46e0d484eedcb4a14046baa005213b06d6375a1e
 2020-12-04 17:00:10 +01:00
DistroBaker
87b3b731b7 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#46e0d484eedcb4a14046baa005213b06d6375a1e
 2020-11-30 21:40:50 +00:00
DistroBaker
a9c482da54 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#ad33c6c09557956426b2c7053495496dc9c442cb
 2020-11-26 13:20:54 +00:00
DistroBaker
6b2bb6b270 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#aae89bb5edab5bfcdd61d69bc8b082ce38587f6d
 2020-11-04 15:36:29 +00:00
DistroBaker
d9c2aea4bc Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/bind.git#01c5de480b816ef4fcab8dbb15b5a71bad4d74ab
 2020-10-27 19:10:10 +01:00
Petr Šabata
49cf061d17 RHEL 9.0.0 Alpha bootstrap 
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/bind#293d93455e05945f11b4ee320db6a2fa4f31e43c
 2020-10-14 22:16:50 +02:00
Release Configuration Management
b080cb76e0 New branch setup 2020-10-08 11:04:00 +00:00