diff options
| author | J0WI <J0WI@users.noreply.github.com> | 2018-11-19 00:52:31 +0100 |
|---|---|---|
| committer | Natanael Copa <ncopa@alpinelinux.org> | 2018-11-27 14:21:36 +0000 |
| commit | 0756f3f95a7b96bfe212a78d42d64da35b03a78a (patch) | |
| tree | 51ded39abccf7511cea71c26fc5e31f79c3ca5bc | |
| parent | e824aacb70028f15a55988db22f8da5051b67d4a (diff) | |
| download | aports-0756f3f95a7b96bfe212a78d42d64da35b03a78a.tar.bz2 aports-0756f3f95a7b96bfe212a78d42d64da35b03a78a.tar.xz | |
community/pdns-recursor: security upgrade to 4.1.7 - CVE-2018-10851 - CVE-2018-14644 - CVE-2018-14626
| -rw-r--r-- | community/pdns-recursor/APKBUILD | 12 | ||||
| -rw-r--r-- | community/pdns-recursor/libressl-2.7.patch | 31 |
2 files changed, 7 insertions, 36 deletions
diff --git a/community/pdns-recursor/APKBUILD b/community/pdns-recursor/APKBUILD index 5482d2a923..6093b580b1 100644 --- a/community/pdns-recursor/APKBUILD +++ b/community/pdns-recursor/APKBUILD @@ -1,7 +1,7 @@ # Contributor: Olivier Mauras <olivier@mauras.ch> pkgname=pdns-recursor -pkgver=4.1.4 -pkgrel=1 +pkgver=4.1.7 +pkgrel=0 pkgdesc="PowerDNS Recursive Server" url="https://www.powerdns.com/" # s390x: missing boost-context @@ -15,7 +15,6 @@ subpackages="$pkgname-doc $pkgname-openrc" pkgusers="recursor" pkggroups="recursor" source="https://downloads.powerdns.com/releases/$pkgname-$pkgver.tar.bz2 - libressl-2.7.patch pdns-recursor.initd recursor.conf " @@ -24,6 +23,10 @@ options="!check" builddir="$srcdir/$pkgname-$pkgver" # secfixes: +# 4.1.7-r0: +# - CVE-2018-10851 +# - CVE-2018-14644 +# - CVE-2018-14626 # 4.1.1-r0: # - CVE-2018-1000003 # 4.0.7-r0: @@ -62,7 +65,6 @@ package() { "$pkgdir"/etc/pdns/recursor.conf } -sha512sums="1904685dfdcd69d4b85c4c70559d51cc8ef288551ffd8f93a96108c3aca4e46ec3950f93840e4bd39da00c63129033b5a541beb68d1e924d477b5b0abbf1d00c pdns-recursor-4.1.4.tar.bz2 -d45111007decca36f9380e7c7b6b7fe3699b59eead3b42263378a7202158b7fd4e50846ef3f59cc309859a08699abcaa8629c06f3a78fecd2ee71a6e05c49531 libressl-2.7.patch +sha512sums="eb119b0da034624a95aadd4800e376b80f69b7151e773437c0f644bdc5a38a377c5547bcd57606367e148eaddf0b7de8f5f5ff3ab582b50ceb190f2fada5980a pdns-recursor-4.1.7.tar.bz2 f23cb30d943e0b0aea09371dc57aa43e55b8f91062a3caa3fac17e3565a8e36dfd304f45eba588f625ca2337cd2ade450ea5ae1776872c006204cdaf912f6651 pdns-recursor.initd 954df537693a202fc195e751011bbfaa605b3f3df42ac386fa82eb809b73c2b987f5e418b5c96bb3b0669497426ce0daa39a719844701e06990b82843a4cf0d4 recursor.conf" diff --git a/community/pdns-recursor/libressl-2.7.patch b/community/pdns-recursor/libressl-2.7.patch deleted file mode 100644 index 7456cdce62..0000000000 --- a/community/pdns-recursor/libressl-2.7.patch +++ /dev/null @@ -1,31 +0,0 @@ -From 1648b8ff39c705fdee526cd73bf2652982b80087 Mon Sep 17 00:00:00 2001 -From: Remi Gacogne <remi.gacogne@powerdns.com> -Date: Sat, 8 Sep 2018 17:15:14 +0200 -Subject: [PATCH] Fix compilation with LibreSSL 2.7.0+ - ---- - pdns/opensslsigners.cc | 4 ++++ - 1 file changed, 4 insertions(+) - -diff --git a/pdns/opensslsigners.cc b/pdns/opensslsigners.cc -index 6a2e856940..d0a65e6489 100644 ---- a/opensslsigners.cc -+++ b/opensslsigners.cc -@@ -77,6 +77,8 @@ void openssl_thread_cleanup() - OPENSSL_free(openssllocks); - } - -+#if !defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER < 0x2070000fL -+/* those symbols are defined in LibreSSL 2.7.0+ */ - /* compat helpers. These DO NOT do any of the checking that the libssl 1.1 functions do. */ - static inline void RSA_get0_key(const RSA* rsakey, const BIGNUM** n, const BIGNUM** e, const BIGNUM** d) { - *n = rsakey->n; -@@ -144,6 +146,8 @@ static inline int ECDSA_SIG_set0(ECDSA_SIG* signature, BIGNUM* pr, BIGNUM* ps) { - } - #endif /* HAVE_LIBCRYPTO_ECDSA */ - -+#endif /* !defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER < 0x2070000fL */ -+ - #else - void openssl_thread_setup() {} - void openssl_thread_cleanup() {} |