rpms/bind9.18
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update built-in root anchors from named.root.key

Browse Source 
Remove original bind.keys and replace it with sourced file. Ensure it is
converted into header by deleting original header before the build.

Resolves: RHEL-131887
This commit is contained in:
Petr Menšík 2026-09-02 15:22:59 +02:00
parent 1917c3972b
commit c059ccceef
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
bind9.18.spec
View File

@ -410,6 +410,9 @@ for i in bin/named/Makefile.am; do
done
%endif
install -m 644 -p %{SOURCE27} bind.keys
# Ensure build-in keys are regenerated
rm -f bind.keys.h
:;
@ -699,10 +702,10 @@ cp -p build/doc/arm/_build/latex/Bv9ARM.pdf ${RPM_BUILD_ROOT}%{_pkgdocdir}
touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log
# configuration files:
install -m 640 %{SOURCE16} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
install -m 640 %{SOURCE16} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.{key,conf}
install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
install -m 644 %{SOURCE27} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
install -m 644 %{SOURCE36} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named
mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/named
install -p -m 644 %{SOURCE17} ${RPM_BUILD_ROOT}%{_datadir}/named/named.ca
@ -1040,6 +1043,7 @@ fi;
%changelog
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-26
- Add new root key 38696 into package files (RHEL-131887)
- Update built-in anchors in delv and named
* Thu Aug 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-25
- Remove downstream introduced double-free (CVE-2026-5950)