diff options
Diffstat (limited to 'community/knot-resolver/APKBUILD')
-rw-r--r-- | community/knot-resolver/APKBUILD | 40 |
1 files changed, 16 insertions, 24 deletions
diff --git a/community/knot-resolver/APKBUILD b/community/knot-resolver/APKBUILD index e64a454f613..9598eb2d5b7 100644 --- a/community/knot-resolver/APKBUILD +++ b/community/knot-resolver/APKBUILD @@ -2,14 +2,14 @@ # Contributor: tcely <knot-resolver+aports@tcely.33mail.com> # Maintainer: Jakub Jirutka <jakub@jirutka.cz> pkgname=knot-resolver -pkgver=5.4.4 +pkgver=5.7.1 pkgrel=0 pkgdesc="Minimalistic caching DNS resolver implementation" url="https://www.knot-resolver.cz/" # x86, armhf and armv7 blocked by knot # s390x some problem with luajit -# riscv64 blocked by luajit -arch="all !x86 !armhf !armv7 !riscv64 !s390x" +# ppc64le, riscv64 blocked by luajit +arch="all !x86 !armhf !armv7 !ppc64le !riscv64 !s390x" license="GPL-3.0-or-later" pkgusers="kresd" pkggroups="kresd" @@ -28,15 +28,11 @@ depends_static="$pkgname-dev=$pkgver-r$pkgrel" makedepends=" $depends_dev bash - cmake - cmd:setcap gnutls-dev libcap-ng-dev lmdb-dev luacheck - meson>=0.46 - ninja - pkgconf + meson py3-flake8 " checkdepends="cmocka-dev" @@ -63,6 +59,11 @@ source="https://secure.nic.cz/files/knot-resolver/knot-resolver-$pkgver.tar.xz " # secfixes: +# 5.7.1-r0: +# - CVE-2023-50387 +# - CVE-2023-50868 +# 5.5.3-r0: +# - CVE-2022-40188 # 5.1.1-r0: # - CVE-2020-12667 # 4.3.0-r0: @@ -74,10 +75,6 @@ source="https://secure.nic.cz/files/knot-resolver/knot-resolver-$pkgver.tar.xz # - CVE-2018-1110 build() { - # strict-aliasing breaks stats module - variable "sa" in stats.c:495 is 0x0. - # (https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v4.2.2/modules/stats/stats.c#L495) - export CFLAGS="$CFLAGS -fno-strict-aliasing" - abuild-meson \ --default-library=both \ -Dclient=enabled \ @@ -89,11 +86,11 @@ build() { -Dkeyfile_default=/usr/share/dnssec-root/trusted-key.key \ build - meson compile ${JOBS:+-j ${JOBS}} -C build + meson compile -C build } check() { - meson test -C build + meson test --no-rebuild --print-errorlogs -C build } package() { @@ -101,11 +98,6 @@ package() { cd "$pkgdir" - # net_bind_service - required to bind to well-known ports - # setpcap - when available, resd drops any extra privileges after the - # daemon successfully start - setcap 'cap_net_bind_service,cap_setpcap=+ep' ./usr/sbin/kresd - # These are useless on non-systemd distro. rm ./usr/lib/knot-resolver/distro-preconfig.lua rm ./usr/lib/knot-resolver/upgrade-4-to-5.lua @@ -146,9 +138,9 @@ _gpgfingerprints=" " sha512sums=" -5c37b5513a05949b2e3c8555a29e7b95e2a623540038dd80178ec6dd61788749c3f2fd86bd901c52ad56bd2481021e3e712a21f3e03027cfbf11c4f131da083b knot-resolver-5.4.4.tar.xz -3df654ade6d8d0f584425090cae038e2ab67e99748f33a936f9401f2ac91b3364a3db34d9b16468a13909530b23665318ab9046e363cf0efd0a9f1e0b4678a96 kresd.confd -7c5ec1c90e90dc5b603cc6ce718ef858ee44aca38100d97d1e346cd74f3f41a0fc9dd2260938741c5c9a880031dc5eee1430d187ca47675fc41ef2c92619197d kresd.initd -a1e4af78ad8df36feb41619ac63aa8505cb68b434a3e01c8929f69759f5a6abe9667a6d5738928ff67daaccab58e5fecd49ce4ff439674f1e073982042a907fd kres-cache-gc.initd -ad017f54aaa214862a67c8242efe9fa56dc66a8ac0012cc0f4eb981d6fd631b250378602f8f5af9916fff071d9a60d1e588e07458f8d891d19787c3b5d48cdb5 kres-cache-gc.confd +89ebff7e239ea09d9d180386f4551952fb59a3f1d0ca01a172acf27d2eade16ae578142d811333e49ad3a2f629cf5b23d038043c0768469078fcfd5cbfb5020b knot-resolver-5.7.1.tar.xz +2c4002130af10f02735d1503d2543fd334721efb466c0ac288ef9218faa91c3d892f0fafd5fa8c3fd8fdb771be7d2aa367c7c1e0a12b13272e05ab2100d5d7c7 kresd.confd +a9d9fa0472e1e0f65714768755d64e18c45086396476290d4ad29e019e62b641347d866689fda125cee58b34c32e95cb532815eac8831480d16606b9d23d4230 kresd.initd +036b290a6645d9da2805f69d202ab7187e55067d490e38ec9ddaa2fd434a93b6715af9ca585f7a6dad154ed4ce362a973947343a6eb4137a7f2797f6d8adcd5a kres-cache-gc.initd +cbb69b3369f7496f7b481de1e564ad2352e20681f8e40b13003b3b834f1b00aee3f0e0f14d08c1263284052f2e3c2916323e183eac6ffcffe2fe5d353321b376 kres-cache-gc.confd " |