Yaya
b0c03e1684
bind: 9.18.18 -> 9.18.19
...
https://downloads.isc.org/isc/bind9/cur/9.18/CHANGES
https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-bind-9-18-19
Fixes CVE-2023-3341
Fixes CVE-2023-4236
2023-09-20 21:32:41 +00:00
Vladimír Čunát
5842d103dc
bind: disable tests on *all* 32-bit platforms
...
https://github.com/NixOS/nixpkgs/pull/250563#issuecomment-1702271179
https://gitlab.isc.org/isc-projects/bind9/-/issues/4269#note_397062
2023-09-01 09:13:10 +02:00
Vladimír Čunát
7526787a4e
bind: disable tests on i686
...
rbtdb_test started to fail reproducibly because of last update:
https://hydra.nixos.org/build/232089292/nixlog/127/tail
Of course, feel free to instead investigate deeper or disable tests
on a more fine-grained level, etc.
2023-08-21 17:20:35 +02:00
linsui
a7c6b07478
dig: add IDN support
2023-08-20 22:56:34 +08:00
Sergei Trofimovich
d932fc0163
bind: 9.18.17 -> 9.18.18
...
While at it added trivial updater.
Changes: https://bind9.readthedocs.io/en/v9.18.18/notes.html#notes-for-bind-9-18-18
2023-08-19 09:11:35 +01:00
Sergei Trofimovich
0092231e84
bind: 9.18.16 -> 9.18.17
...
Changes: https://downloads.isc.org/isc/bind9/9.18.17/doc/arm/html/notes.html#notes-for-bind-9-18-17
2023-07-28 19:26:00 +01:00
Martin Weinelt
75a902e253
bind: 9.18.14 -> 9.18.16
...
https://downloads.isc.org/isc/bind9/cur/9.18/CHANGES
https://downloads.isc.org/isc/bind9/9.18.16/doc/arm/html/notes.html
Fixes: CVE-2023-2828, CVE-2023-2911, CVE-202-3094, CVE-2022-3736,
CVE-2023-3924
2023-06-22 11:59:22 +02:00
R. Ryantm
8cac6243a3
bind: 9.18.12 -> 9.18.14
2023-05-11 19:13:50 +00:00
Vladimír Čunát
41020c3241
bind: avoid tests on aarch64-linux for now
...
They fail on some machines repeatedly and they were only enabled
around a day ago (6fa6198586
).
2023-03-06 12:14:35 +01:00
Robert Scott
ce5093b787
bind: enable unit tests
2023-03-04 17:04:45 +00:00
R. Ryantm
e23609cd21
bind: 9.18.11 -> 9.18.12
2023-03-03 09:43:35 +00:00
Thomas Gerbet
d258b4e1e8
bind: 9.8.10 -> 9.8.11
...
Fixes CVE-2022-3094, CVE-2022-3736 and CVE-2022-3924.
Security advisories:
* https://kb.isc.org/docs/cve-2022-3094
* https://kb.isc.org/docs/cve-2022-3736
* https://kb.isc.org/docs/cve-2022-3924
Changelog:
https://downloads.isc.org/isc/bind9/9.18.11/CHANGES
2023-01-28 17:28:16 +01:00
R. Ryantm
983e50113c
bind: 9.18.9 -> 9.18.10
2023-01-09 04:01:42 +00:00
ajs124
e63fa6e21e
bind: enable parallel building
...
because non-parallel is slow
2023-01-06 16:06:43 +01:00
R. Ryantm
c4d3b3a8da
bind: 9.18.8 -> 9.18.9
2022-12-25 12:10:01 +01:00
R. Ryantm
ee3bea9255
bind: 9.18.7 -> 9.18.8
2022-10-21 06:32:53 +00:00
R. Ryantm
a6fe6e968b
bind: 9.18.6 -> 9.18.7
2022-09-24 05:13:52 +00:00
Franz Pletz
54cca744d9
Merge pull request #176126 from posch/bind2
2022-09-05 15:18:23 +02:00
R. Ryantm
89d680fa2b
bind: 9.18.5 -> 9.18.6
2022-08-20 00:40:32 +00:00
R. Ryantm
79d65a8851
bind: 9.18.4 -> 9.18.5
2022-07-30 14:30:51 +00:00
Arnout Engelen
c52f737f27
Merge pull request #173904 from risicle/ris-bind-extra-passthru-tests
...
bind: add some more nixosTests to `passthru.tests`
2022-07-29 16:58:09 +02:00
github-actions[bot]
86c34bf774
Merge master into staging-next
2022-06-27 12:01:26 +00:00
Robert Schütz
2847e6e691
bind: 9.18.3 -> 9.18.4
...
https://downloads.isc.org/isc/bind9/9.18.4/doc/arm/html/notes.html
2022-06-27 04:45:49 +00:00
Tobias Poschwatta
53c3bec163
bind: add default rndc.conf
2022-06-03 14:40:13 +02:00
ajs124
6a803b01ae
bind: remove broken configure flags
...
configure: WARNING: unrecognized options: --without-atf, --without-docbook-xsl, --without-idn, --without-idnlib, --with-randomdev, --with-ecdsa, --with-gost, --without-eddsa, --with-aes, --with-libcap
2022-05-30 15:32:17 +02:00
Robert Scott
2830a7976f
bind: add some more nixosTests to passthru.tests
2022-05-21 15:43:47 +01:00
Martin Weinelt
f33b07e728
bind: 9.18.1 -> 9.18.3
...
> An assertion failure can be triggered if a TLS connection to a
> configured http TLS listener with a defined endpoint is destroyed too
> early.
https://kb.isc.org/v1/docs/cve-2022-1183
Fixes: CVE-2022-1183
2022-05-20 01:20:16 +02:00
7c6f434c
8188f10752
Merge pull request #166430 from alyssais/openssl-static-retry
...
treewide: use lib.getLib for OpenSSL libraries
2022-04-02 12:59:55 +00:00
Alyssa Ross
fd78240ac8
treewide: use lib.getLib for OpenSSL libraries
...
At some point, I'd like to make another attempt at
71f1f4884b
("openssl: stop static binaries referencing libs"), which
was reverted in 195c7da07d
. One problem with my previous attempt is
that I moved OpenSSL's libraries to a lib output, but many dependent
packages were hardcoding the out output as the location of the
libraries. This patch fixes every such case I could find in the tree.
It won't have any effect immediately, but will mean these packages
will automatically use an OpenSSL lib output if it is reintroduced in
future.
This patch should cause very few rebuilds, because it shouldn't make
any change at all to most packages I'm touching. The few rebuilds
that are introduced come from when I've changed a package builder not
to use variable names like openssl.out in scripts / substitution
patterns, which would be confusing since they don't hardcode the
output any more.
I started by making the following global replacements:
${pkgs.openssl.out}/lib -> ${lib.getLib pkgs.openssl}/lib
${openssl.out}/lib -> ${lib.getLib openssl}/lib
Then I removed the ".out" suffix when part of the argument to
lib.makeLibraryPath, since that function uses lib.getLib internally.
Then I fixed up cases where openssl was part of the -L flag to the
compiler/linker, since that unambigously is referring to libraries.
Then I manually investigated and fixed the following packages:
- pycurl
- citrix-workspace
- ppp
- wraith
- unbound
- gambit
- acl2
I'm reasonably confindent in my fixes for all of them.
For acl2, since the openssl library paths are manually provided above
anyway, I don't think openssl is required separately as a build input
at all. Removing it doesn't make a difference to the output size, the
file list, or the closure.
I've tested evaluation with the OfBorg meta checks, to protect against
introducing evaluation failures.
2022-03-30 15:10:00 +00:00
Sandro
b53ee0c6eb
bind: add meta.changelog
2022-03-27 17:48:45 +02:00
Martin Weinelt
8c2ee334e5
bind: 9.18.0 -> 9.18.1
...
https://downloads.isc.org/isc/bind9/9.18.1/RELEASE-NOTES-bind-9.18.1.html
Fixes: CVE-2021-25220, CVE-2022-0396, CVE-2022-0635, CVE-2022-0667
2022-03-17 13:16:02 +01:00
Luflosi
65b2a74267
bind: 9.16.25 -> 9.18.0 ( #161427 )
2022-03-07 12:54:11 +01:00
Thomas Gerbet
4cfcbac24a
bind: 9.16.16 -> 9.16.25
...
Fixes CVE-2021-25219.
https://downloads.isc.org/isc/bind9/9.16.25/doc/arm/html/notes.html
2022-01-28 13:28:20 +01:00
illustris
185e6a477a
sssd: 1.16.5 -> 2.6.0, fix broken build
2021-10-30 09:48:28 -07:00
Peter Simons
476635afe1
Drop myself from meta.maintainers for most packages.
...
I'd like to reduce the number of Github notifications and
review requests I receive.
2021-10-14 11:01:27 +02:00
R. RyanTM
d0335f16b5
bind: 9.16.15 -> 9.16.16
2021-05-20 10:21:52 +00:00
Martin Weinelt
84b6596098
bind: 9.16.13 -> 9.16.15
...
https://kb.isc.org/docs/cve-2021-25214
https://kb.isc.org/docs/cve-2021-25215
https://kb.isc.org/docs/cve-2021-25216
Fixes: CVE-2021-25214, CVE-2021-25215, CVE-2021-25216
2021-04-29 03:39:40 +02:00
R. RyanTM
602499378d
bind: 9.16.12 -> 9.16.13
2021-03-20 01:51:13 +00:00
R. RyanTM
9b2e8cac52
bind: 9.16.11 -> 9.16.12
2021-02-22 02:17:24 -05:00
R. RyanTM
5854a34ede
bind: 9.16.10 -> 9.16.11
2021-01-28 10:07:22 -05:00
Profpatsch
4a7f99d55d
treewide: with stdenv.lib; in meta -> with lib;
...
Part of: https://github.com/NixOS/nixpkgs/issues/108938
meta = with stdenv.lib;
is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.
This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.
The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
Tim Steinbach
87e7d8b371
bind: 9.16.8 -> 9.16.10
2020-12-23 10:15:35 -05:00
Ben Wolsieffer
82a9f2331c
bind: fix cross-compilation
...
Upstream accidently broke cross-compilation. It has been fixed but not released
yet, so we temporarily add the patch here.
2020-11-19 21:49:19 +01:00
Pierre Bourdon
02796d77f8
bind: 9.16.7 -> 9.16.8
...
https://bind9.readthedocs.io/en/v9_16_8/notes.html#notes-for-bind-9-16-8
2020-10-27 08:48:19 +01:00
Pierre Bourdon
2a4e6a93b9
bind: add nixosTests.bind to passthru.tests
2020-09-24 18:23:30 +02:00
Pierre Bourdon
c27c9bd380
bind: 9.14.12 -> 9.16.7
2020-09-24 18:10:16 +02:00
Justin Humm
6cdbb1fb1f
bind: set BUILD_CC for cross compilation
...
This is due to a hint by @Ericson2314 in
https://github.com/NixOS/nixpkgs/pull/86166#issuecomment-633153996
2020-06-15 21:03:03 +02:00
Vladimír Čunát
13c485d63d
bind: 9.14.11 -> 9.14.12 (security)
...
https://www.isc.org/blogs/bind9-vulnerabilities-2020-05/
$ nix build -f nixos/release.nix tests.bind.x86_64-linux
2020-05-19 11:21:25 +02:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs
2020-04-10 17:54:53 +01:00
Vladimír Čunát
47f61c9d7f
bind: 9.14.10 -> 9.14.11 (small bugfix)
...
I see just a single small bugfix in the news:
https://downloads.isc.org/isc/bind9/9.14.11/RELEASE-NOTES-bind-9.14.11.html
2020-03-15 09:15:41 +01:00