aboutsummaryrefslogtreecommitdiffstats
path: root/community/knot-resolver/APKBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'community/knot-resolver/APKBUILD')
-rw-r--r--community/knot-resolver/APKBUILD40
1 files changed, 16 insertions, 24 deletions
diff --git a/community/knot-resolver/APKBUILD b/community/knot-resolver/APKBUILD
index e64a454f613..9598eb2d5b7 100644
--- a/community/knot-resolver/APKBUILD
+++ b/community/knot-resolver/APKBUILD
@@ -2,14 +2,14 @@
# Contributor: tcely <knot-resolver+aports@tcely.33mail.com>
# Maintainer: Jakub Jirutka <jakub@jirutka.cz>
pkgname=knot-resolver
-pkgver=5.4.4
+pkgver=5.7.1
pkgrel=0
pkgdesc="Minimalistic caching DNS resolver implementation"
url="https://www.knot-resolver.cz/"
# x86, armhf and armv7 blocked by knot
# s390x some problem with luajit
-# riscv64 blocked by luajit
-arch="all !x86 !armhf !armv7 !riscv64 !s390x"
+# ppc64le, riscv64 blocked by luajit
+arch="all !x86 !armhf !armv7 !ppc64le !riscv64 !s390x"
license="GPL-3.0-or-later"
pkgusers="kresd"
pkggroups="kresd"
@@ -28,15 +28,11 @@ depends_static="$pkgname-dev=$pkgver-r$pkgrel"
makedepends="
$depends_dev
bash
- cmake
- cmd:setcap
gnutls-dev
libcap-ng-dev
lmdb-dev
luacheck
- meson>=0.46
- ninja
- pkgconf
+ meson
py3-flake8
"
checkdepends="cmocka-dev"
@@ -63,6 +59,11 @@ source="https://secure.nic.cz/files/knot-resolver/knot-resolver-$pkgver.tar.xz
"
# secfixes:
+# 5.7.1-r0:
+# - CVE-2023-50387
+# - CVE-2023-50868
+# 5.5.3-r0:
+# - CVE-2022-40188
# 5.1.1-r0:
# - CVE-2020-12667
# 4.3.0-r0:
@@ -74,10 +75,6 @@ source="https://secure.nic.cz/files/knot-resolver/knot-resolver-$pkgver.tar.xz
# - CVE-2018-1110
build() {
- # strict-aliasing breaks stats module - variable "sa" in stats.c:495 is 0x0.
- # (https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v4.2.2/modules/stats/stats.c#L495)
- export CFLAGS="$CFLAGS -fno-strict-aliasing"
-
abuild-meson \
--default-library=both \
-Dclient=enabled \
@@ -89,11 +86,11 @@ build() {
-Dkeyfile_default=/usr/share/dnssec-root/trusted-key.key \
build
- meson compile ${JOBS:+-j ${JOBS}} -C build
+ meson compile -C build
}
check() {
- meson test -C build
+ meson test --no-rebuild --print-errorlogs -C build
}
package() {
@@ -101,11 +98,6 @@ package() {
cd "$pkgdir"
- # net_bind_service - required to bind to well-known ports
- # setpcap - when available, resd drops any extra privileges after the
- # daemon successfully start
- setcap 'cap_net_bind_service,cap_setpcap=+ep' ./usr/sbin/kresd
-
# These are useless on non-systemd distro.
rm ./usr/lib/knot-resolver/distro-preconfig.lua
rm ./usr/lib/knot-resolver/upgrade-4-to-5.lua
@@ -146,9 +138,9 @@ _gpgfingerprints="
"
sha512sums="
-5c37b5513a05949b2e3c8555a29e7b95e2a623540038dd80178ec6dd61788749c3f2fd86bd901c52ad56bd2481021e3e712a21f3e03027cfbf11c4f131da083b knot-resolver-5.4.4.tar.xz
-3df654ade6d8d0f584425090cae038e2ab67e99748f33a936f9401f2ac91b3364a3db34d9b16468a13909530b23665318ab9046e363cf0efd0a9f1e0b4678a96 kresd.confd
-7c5ec1c90e90dc5b603cc6ce718ef858ee44aca38100d97d1e346cd74f3f41a0fc9dd2260938741c5c9a880031dc5eee1430d187ca47675fc41ef2c92619197d kresd.initd
-a1e4af78ad8df36feb41619ac63aa8505cb68b434a3e01c8929f69759f5a6abe9667a6d5738928ff67daaccab58e5fecd49ce4ff439674f1e073982042a907fd kres-cache-gc.initd
-ad017f54aaa214862a67c8242efe9fa56dc66a8ac0012cc0f4eb981d6fd631b250378602f8f5af9916fff071d9a60d1e588e07458f8d891d19787c3b5d48cdb5 kres-cache-gc.confd
+89ebff7e239ea09d9d180386f4551952fb59a3f1d0ca01a172acf27d2eade16ae578142d811333e49ad3a2f629cf5b23d038043c0768469078fcfd5cbfb5020b knot-resolver-5.7.1.tar.xz
+2c4002130af10f02735d1503d2543fd334721efb466c0ac288ef9218faa91c3d892f0fafd5fa8c3fd8fdb771be7d2aa367c7c1e0a12b13272e05ab2100d5d7c7 kresd.confd
+a9d9fa0472e1e0f65714768755d64e18c45086396476290d4ad29e019e62b641347d866689fda125cee58b34c32e95cb532815eac8831480d16606b9d23d4230 kresd.initd
+036b290a6645d9da2805f69d202ab7187e55067d490e38ec9ddaa2fd434a93b6715af9ca585f7a6dad154ed4ce362a973947343a6eb4137a7f2797f6d8adcd5a kres-cache-gc.initd
+cbb69b3369f7496f7b481de1e564ad2352e20681f8e40b13003b3b834f1b00aee3f0e0f14d08c1263284052f2e3c2916323e183eac6ffcffe2fe5d353321b376 kres-cache-gc.confd
"