aboutsummaryrefslogtreecommitdiffstats
path: root/main/unbound/APKBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'main/unbound/APKBUILD')
-rw-r--r--main/unbound/APKBUILD78
1 files changed, 49 insertions, 29 deletions
diff --git a/main/unbound/APKBUILD b/main/unbound/APKBUILD
index 272936d93b3..56fce719924 100644
--- a/main/unbound/APKBUILD
+++ b/main/unbound/APKBUILD
@@ -3,22 +3,43 @@
# Contributor: Natanael Copa <ncopa@alpinelinux.org>
# Maintainer: Jakub Jirutka <jakub@jirutka.cz>
pkgname=unbound
-pkgver=1.13.1
+pkgver=1.19.3
pkgrel=2
pkgdesc="Unbound is a validating, recursive, and caching DNS resolver"
-url="http://unbound.net/"
+url="https://nlnetlabs.nl/projects/unbound/about/"
arch="all"
license="BSD-3-Clause"
depends="dnssec-root"
depends_dev="expat-dev"
-_depends_migrate="/bin/sh apk-tools openrc"
-makedepends="$depends_dev libevent-dev openssl-dev python3-dev swig linux-headers"
-checkdepends="bind-tools ldns-tools"
+_depends_migrate="
+ /bin/sh
+ apk-tools
+ openrc
+ "
+makedepends="$depends_dev
+ libevent-dev
+ linux-headers
+ openssl-dev>3
+ protobuf-c-dev
+ python3-dev
+ swig
+ "
+checkdepends="
+ bind-tools
+ ldns-tools
+ "
install="$pkgname.pre-install"
pkgusers="unbound"
pkggroups="unbound"
-subpackages="$pkgname-dev $pkgname-doc $pkgname-libs $pkgname-dbg
- $pkgname-openrc py-unbound:py $pkgname-migrate::noarch"
+subpackages="
+ $pkgname-dbg
+ $pkgname-dev
+ $pkgname-doc
+ $pkgname-libs
+ $pkgname-openrc
+ py-unbound:py
+ $pkgname-migrate::noarch
+ "
source="https://unbound.net/downloads/unbound-$pkgver.tar.gz
conf.patch
migrate-dnscache-to-unbound
@@ -27,6 +48,16 @@ source="https://unbound.net/downloads/unbound-$pkgver.tar.gz
"
# secfixes:
+# 1.19.2-r0:
+# - CVE-2024-1931
+# 1.19.1-r0:
+# - CVE-2023-50387
+# - CVE-2023-50868
+# 1.16.3-r0:
+# - CVE-2022-3204
+# 1.16.2-r0:
+# - CVE-2022-30698
+# - CVE-2022-30699
# 1.10.1-r0:
# - CVE-2020-12662
# - CVE-2020-12663
@@ -36,6 +67,8 @@ source="https://unbound.net/downloads/unbound-$pkgver.tar.gz
# - CVE-2019-16866
build() {
+ export CFLAGS="$CFLAGS -flto=auto"
+
PYTHON_VERSION=3 ./configure \
--build="$CBUILD" \
--host="$CHOST" \
@@ -51,6 +84,7 @@ build() {
--with-pthreads \
--disable-static \
--disable-rpath \
+ --enable-dnstap \
--with-ssl \
--without-pythonmodule \
--with-pyunbound
@@ -72,9 +106,8 @@ package() {
install -Dm755 contrib/update-anchor.sh \
"$pkgdir"/usr/share/$pkgname/update-anchor.sh
- mkdir -p "$pkgdir"/usr/share/doc/$pkgname/
- install -m644 doc/CREDITS doc/Changelog doc/FEATURES \
- doc/README doc/TODO "$pkgdir"/usr/share/doc/$pkgname/
+ install -D -m644 doc/CREDITS doc/Changelog doc/FEATURES \
+ doc/README doc/TODO -t "$pkgdir"/usr/share/doc/$pkgname/
cd "$pkgdir"
@@ -82,26 +115,11 @@ package() {
install -Dm644 "$srcdir"/unbound.confd ./etc/conf.d/unbound
}
-libs() {
- pkgdesc="unbound shared libraries"
- depends="$depends_libs"
-
- mkdir -p "$subpkgdir"/usr/lib
- mv "$pkgdir"/usr/lib/lib*.so.* "$subpkgdir"/usr/lib/
-}
-
-openrc() {
- depends="$depends_openrc"
-
- default_openrc
-}
-
py() {
pkgdesc="Python bindings to libunbound"
depends="$depends_py"
- mkdir -p "$subpkgdir"/usr/lib/
- mv "$pkgdir"/usr/lib/python* "$subpkgdir"/usr/lib/
+ amove usr/lib/python*
}
migrate() {
@@ -112,8 +130,10 @@ migrate() {
"$subpkgdir"/usr/bin/migrate-dnscache-to-unbound
}
-sha512sums="f4d26dca28dbcc33a5e65a55147fa01077c331292e88b6a87798cb6c3d4edb0515015d131fd893c92b74d22d9998a640f0adce404e6192d61ebe69a6a599287c unbound-1.13.1.tar.gz
+sha512sums="
+f860614f090a5a081cceff8ca7f4b3d416c00a251ae14ceb6b4159dc8cd022f025592074d3d78aee2f86c3eeae9d1a314713e4740aa91062579143199accd159 unbound-1.19.3.tar.gz
05fec1829dfb5279f35a76eeab768d88b6dffee4477b1db693360021969bdcc89e309f71ea6cc63e0f921b1fc223a073b97892be2095ed93d7da917a59e09d00 conf.patch
7ab3f57ade3fe8add60bfce208efccc968728fac5c94c759c34aaa09aa71e0da06dd7c24ae0fecf9e2ccc869594226d68b24fe2b0a0b161b833e22c0de1b03b6 migrate-dnscache-to-unbound
-c8e29190a7ab2803bb528fcc008d9788c1d46ca96abd7273023778068156aa65330a99af76a755929d24dfa936a3900bd400368ddf7b89fb3bcef29dbaa32683 unbound.initd
-0ceae15d69deb24baa16990226de31fe743d84779a2595f31b4910b46ef925fc132cec1683d0a06141f707d9cbe517d731015702c60d9df4958ccfb9abd5a23f unbound.confd"
+7ca4c42c00a86f737fd8f5024efce218c9d0dee8fb8708df60f7b292c25b4d3a35ed46a8a0a32847451bca988b5de2dbdddb7fed352170c03263281fc579582b unbound.initd
+0ceae15d69deb24baa16990226de31fe743d84779a2595f31b4910b46ef925fc132cec1683d0a06141f707d9cbe517d731015702c60d9df4958ccfb9abd5a23f unbound.confd
+"