From e7906d146735a70e3ed0ad31eb531b850dab8ee3 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Fri, 28 Nov 2025 10:03:53 +0000 Subject: [PATCH] import OL bind9.18-9.18.29-5.el9_7.2 --- SOURCES/named.logrotate | 4 +--- SPECS/bind9.18.spec | 10 +++++++--- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/SOURCES/named.logrotate b/SOURCES/named.logrotate index 5df448f..5934e52 100644 --- a/SOURCES/named.logrotate +++ b/SOURCES/named.logrotate @@ -2,11 +2,9 @@ missingok su named named create 0644 named named + notifempty postrotate /usr/bin/systemctl reload named.service > /dev/null 2>&1 || true /usr/bin/systemctl reload named-chroot.service > /dev/null 2>&1 || true - /usr/bin/systemctl reload named-sdb.service > /dev/null 2>&1 || true - /usr/bin/systemctl reload named-sdb-chroot.service > /dev/null 2>&1 || true - /usr/bin/systemctl reload named-pkcs11.service > /dev/null 2>&1 || true endscript } diff --git a/SPECS/bind9.18.spec b/SPECS/bind9.18.spec index 1581dd0..356c4e9 100644 --- a/SPECS/bind9.18.spec +++ b/SPECS/bind9.18.spec @@ -77,7 +77,7 @@ License: MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause # ./lib/isc/tm.c BSD-2-clause and/or MPL-2.0 # ./lib/isccfg/parser.c BSD-2-clause and/or MPL-2.0 Version: 9.18.29 -Release: 4%{?dist}.2 +Release: 5%{?dist}.2 Epoch: 32 Url: https://www.isc.org/downloads/bind/ # @@ -505,6 +505,7 @@ export TSAN_OPTIONS="log_exe_name=true log_path=ThreadSanitizer exitcode=0" THREADS=16 ulimit -n 8092 || : # Requires on some machines with many cores fi + export ISC_TASK_WORKERS="$THREADS" e=0 make unit -j${THREADS} || e=$? # Display details of failure @@ -990,15 +991,18 @@ fi; %endif %changelog -* Fri Oct 31 2025 Petr Menšík - 32:9.18.29-4.2 +* Fri Oct 31 2025 Petr Menšík - 32:9.18.29-5.2 - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression -* Thu Oct 23 2025 Petr Menšík - 32:9.18.29-4.1 +* Thu Oct 23 2025 Petr Menšík - 32:9.18.29-5.1 - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) +* Fri Sep 12 2025 Petr Menšík - 32:9.18.29-5 +- logrotate: skip if empty and remove old variants (RHEL-113942) + * Tue Jun 10 2025 Petr Mensik - 32:9.18.29-4 - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names