diff options
| author | Leo <thinkabit.ukim@gmail.com> | 2019-08-02 17:10:05 -0300 |
|---|---|---|
| committer | Leo <thinkabit.ukim@gmail.com> | 2019-08-03 13:22:38 -0300 |
| commit | 1fc4c6a100506ca9ff9267f89aece8d93f4771f7 (patch) | |
| tree | 52bc4414f88ca38734eae565bf2c3574e416921b | |
| parent | 591b1611bea0124839b7a6627050f76ecfffc4a5 (diff) | |
community/pdns: security upgrade to 4.1.11
| -rw-r--r-- | community/pdns/APKBUILD | 15 | ||||
| -rw-r--r-- | community/pdns/README.alpine | 6 |
2 files changed, 17 insertions, 4 deletions
diff --git a/community/pdns/APKBUILD b/community/pdns/APKBUILD index c0ff086b238..93ccc3f53e2 100644 --- a/community/pdns/APKBUILD +++ b/community/pdns/APKBUILD @@ -5,7 +5,7 @@ # Contributor: Fabian Zoske <fabian@zoske.it> # Maintainer: Matt Smith <mcs@darkregion.net> pkgname=pdns -pkgver=4.1.10 +pkgver=4.1.11 pkgrel=0 pkgdesc="PowerDNS Authoritative Server" url="https://www.powerdns.com/" @@ -38,10 +38,14 @@ pkggroups="pdns" source="https://downloads.powerdns.com/releases/$pkgname-$pkgver.tar.bz2 libressl-2.7.patch $pkgname.initd - $pkgname.conf" + $pkgname.conf + README.alpine + " builddir="$srcdir/$pkgname-$pkgver" # secfixes: +# 4.1.11-r0: +# - CVE-2019-10203 # 4.1.10-r0: # - CVE-2019-10163 # - CVE-2019-10162 @@ -86,6 +90,8 @@ package() { install -m600 -D "$srcdir/$pkgname.conf" \ "$pkgdir/etc/$pkgname/$pkgname.conf" chown pdns:pdns "$pkgdir/etc/$pkgname/$pkgname.conf" + + install -Dm644 "$srcdir"/README.alpine "$pkgdir"/usr/share/doc/$pkgname/README.alpine } tools() { @@ -139,7 +145,8 @@ backend_remote() { _mv_backend remote; } backend_sqlite3() { _mv_backend gsqlite3 sqlite; } #backend_tinydns() { _mv_backend tinydns; } -sha512sums="59a7a52468f6daae8de01bb2b08d812906ef58047026369895341cfff253a5b9ba29d6a6b43a822f1632641eec34fa1afa6fbb5b0ba5e72ecce8e61787892136 pdns-4.1.10.tar.bz2 +sha512sums="18215f523a39d48c8756bc13ecae1bd78967c2d66619d93ddaafb13062690002a9bdfe1d337796820706692c449286c7b9e9b8d45933684d32acbc20e490c0c4 pdns-4.1.11.tar.bz2 705fad6a9e7bd342d7f9665c5b3c21d3b919c4a43c5d03fa0d2bf3e25126f1f036edcb0ec66aa0168f6b2e5225c7ac684538cd29bc998245fbb25a57a3c84946 libressl-2.7.patch 3f5b202c56408168ddbf81b47f5c48ca65de91ada88751213a06a1096334b89176c5a6a58f3c6a893a2d15b51ece9f2a64d7d2ea836220a3e45fe362969c6cfa pdns.initd -3f809f3257680c3e496fa6a4c86c8a636db5d9d5b92aef96fe54c29b8266ee590deb792d13205cc171e27307fa73295dd3b101b09102fd66a2393a7cdbf9dd27 pdns.conf" +3f809f3257680c3e496fa6a4c86c8a636db5d9d5b92aef96fe54c29b8266ee590deb792d13205cc171e27307fa73295dd3b101b09102fd66a2393a7cdbf9dd27 pdns.conf +f2781a23e14bea9b4bbb84f3b596663c76359c449ef6fd39c87b5ea1163c47e01c5ba490c804709033598f0542ac558bde477729ad1ab9f17d49606fa61b2049 README.alpine" diff --git a/community/pdns/README.alpine b/community/pdns/README.alpine new file mode 100644 index 00000000000..625cb68d2b9 --- /dev/null +++ b/community/pdns/README.alpine @@ -0,0 +1,6 @@ +When upgrading from 4.1.10 and previous: + +This release contains a fix for CVE-2019-10203 +Upgrading is not enough you need to manually apply the schema change + +ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END; |