From 9e8380b6496455e04d4c1bd2aac11e321420fef0 Mon Sep 17 00:00:00 2001
From: Leo <thinkabit.ukim@gmail.com>
Date: Fri, 2 Aug 2019 17:10:05 -0300
Subject: community/pdns: security upgrade to 4.1.11

---
 community/pdns/APKBUILD      | 15 +++++++++++----
 community/pdns/README.alpine |  6 ++++++
 2 files changed, 17 insertions(+), 4 deletions(-)
 create mode 100644 community/pdns/README.alpine

(limited to 'community/pdns')

diff --git a/community/pdns/APKBUILD b/community/pdns/APKBUILD
index 1f793ab187..addbdc525e 100644
--- a/community/pdns/APKBUILD
+++ b/community/pdns/APKBUILD
@@ -5,7 +5,7 @@
 # Contributor: Fabian Zoske <fabian@zoske.it>
 # Maintainer:  Matt Smith <mcs@darkregion.net>
 pkgname=pdns
-pkgver=4.1.10
+pkgver=4.1.11
 pkgrel=0
 pkgdesc="PowerDNS Authoritative Server"
 url="https://www.powerdns.com/"
@@ -37,10 +37,14 @@ pkgusers="pdns"
 pkggroups="pdns"
 source="https://downloads.powerdns.com/releases/$pkgname-$pkgver.tar.bz2
 	$pkgname.initd
-	$pkgname.conf"
+	$pkgname.conf
+	README.alpine
+	"
 builddir="$srcdir/$pkgname-$pkgver"
 
 # secfixes:
+#   4.1.11-r0:
+#     - CVE-2019-10203
 #   4.1.10-r0:
 #     - CVE-2019-10163
 #     - CVE-2019-10162
@@ -85,6 +89,8 @@ package() {
 	install -m600 -D "$srcdir/$pkgname.conf" \
 		"$pkgdir/etc/$pkgname/$pkgname.conf"
 	chown pdns:pdns "$pkgdir/etc/$pkgname/$pkgname.conf"
+
+	install -Dm644 "$srcdir"/README.alpine "$pkgdir"/usr/share/doc/$pkgname/README.alpine
 }
 
 tools() {
@@ -138,6 +144,7 @@ backend_remote()        { _mv_backend remote; }
 backend_sqlite3()       { _mv_backend gsqlite3 sqlite; }
 #backend_tinydns()       { _mv_backend tinydns; }
 
-sha512sums="59a7a52468f6daae8de01bb2b08d812906ef58047026369895341cfff253a5b9ba29d6a6b43a822f1632641eec34fa1afa6fbb5b0ba5e72ecce8e61787892136  pdns-4.1.10.tar.bz2
+sha512sums="18215f523a39d48c8756bc13ecae1bd78967c2d66619d93ddaafb13062690002a9bdfe1d337796820706692c449286c7b9e9b8d45933684d32acbc20e490c0c4  pdns-4.1.11.tar.bz2
 3a55547e1b6407e7d2faa6e02982ed903c2364381af1b7eeb626ae3a8b0e32558dd79bf31c982b134414e5636d4868c1f3660ac523f25d2440ed6f7b436843bf  pdns.initd
-3f809f3257680c3e496fa6a4c86c8a636db5d9d5b92aef96fe54c29b8266ee590deb792d13205cc171e27307fa73295dd3b101b09102fd66a2393a7cdbf9dd27  pdns.conf"
+3f809f3257680c3e496fa6a4c86c8a636db5d9d5b92aef96fe54c29b8266ee590deb792d13205cc171e27307fa73295dd3b101b09102fd66a2393a7cdbf9dd27  pdns.conf
+f2781a23e14bea9b4bbb84f3b596663c76359c449ef6fd39c87b5ea1163c47e01c5ba490c804709033598f0542ac558bde477729ad1ab9f17d49606fa61b2049  README.alpine"
diff --git a/community/pdns/README.alpine b/community/pdns/README.alpine
new file mode 100644
index 0000000000..625cb68d2b
--- /dev/null
+++ b/community/pdns/README.alpine
@@ -0,0 +1,6 @@
+When upgrading from 4.1.10 and previous:
+
+This release contains a fix for CVE-2019-10203
+Upgrading is not enough you need to manually apply the schema change
+
+ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END;
-- 
cgit v1.2.3