Bug 202738

Summary: [MAINTAINER] dns/powerdns: Update to 3.4.6
Product: Ports & Packages Reporter: Ralf van der Enden <tremere>
Component: Individual Port(s)Assignee: freebsd-ports-bugs (Nobody) <ports-bugs>
Status: Closed FIXED    
Severity: Affects Many People CC: feld, walter
Priority: --- Keywords: easy, patch, patch-ready, security
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
Update to 3.4.6
koobs: maintainer-approval+
Poudriere buildlog none

Description Ralf van der Enden 2015-08-29 09:06:08 UTC 
Created attachment 160476 [details]
Update to 3.4.6

Update PowerDNS to 3.4.6

Changelog: https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-346

- This version no longer installs dnsdist (which conflicted with the dns/dnsdist port)
- Made the patch for the luabackend FreeBSD(i386) specific so it can be included upstream in the next version
Comment 1 Ralf van der Enden 2015-08-29 09:06:57 UTC 
Created attachment 160477 [details]
Poudriere buildlog
Comment 2 Mark Felder freebsd_committer freebsd_triage 2015-09-02 16:32:02 UTC 
This is security related. Taking this.

https://doc.powerdns.com/md/security/powerdns-advisory-2015-02/
Comment 3 commit-hook freebsd_committer freebsd_triage 2015-09-02 16:38:16 UTC 
A commit references this bug:

Author: feld
Date: Wed Sep  2 16:37:21 UTC 2015
New revision: 395862
URL: https://svnweb.freebsd.org/changeset/ports/395862

Log:
  Document dns/powerdns vulnerability

  PR:		202738
  Security:	CVE-2015-5230

Changes:
  head/security/vuxml/vuln.xml
Comment 4 commit-hook freebsd_committer freebsd_triage 2015-09-02 16:43:18 UTC 
A commit references this bug:

Author: feld
Date: Wed Sep  2 16:42:49 UTC 2015
New revision: 395863
URL: https://svnweb.freebsd.org/changeset/ports/395863

Log:
  dns/powerdns: Update to 3.4.6

  - No longer install dnsdist, which conflicted with dns/dnsdist port
  - Luabackend patch is now FreeBSD/i386 specific and has been submitted upstream
  for inclusion

  This update also fixes a DoS vulnerability:

  https://doc.powerdns.com/md/security/powerdns-advisory-2015-02/

  Changelog:	https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-346

  PR:		202738
  MFH:		2015Q3
  Security:	55c43f5b-5190-11e5-9ad8-14dae9d210b8
  Security:	CVE-2015-5230

Changes:
  head/dns/powerdns/Makefile
  head/dns/powerdns/distinfo
  head/dns/powerdns/files/patch-modules__luabackend__lua_functions.cc
  head/dns/powerdns/files/patch-modules__luabackend__luabackend.hh
  head/dns/powerdns/pkg-plist
Comment 5 commit-hook freebsd_committer freebsd_triage 2015-09-02 16:46:20 UTC 
A commit references this bug:

Author: feld
Date: Wed Sep  2 16:46:10 UTC 2015
New revision: 395864
URL: https://svnweb.freebsd.org/changeset/ports/395864

Log:
  MFH: r395863

  dns/powerdns: Update to 3.4.6

  - No longer install dnsdist, which conflicted with dns/dnsdist port
  - Luabackend patch is now FreeBSD/i386 specific and has been submitted upstream
  for inclusion

  This update also fixes a DoS vulnerability:

  https://doc.powerdns.com/md/security/powerdns-advisory-2015-02/

  Changelog:	https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-346

  PR:		202738
  Security:	55c43f5b-5190-11e5-9ad8-14dae9d210b8
  Security:	CVE-2015-5230
  Approved by:	ports-secteam (with hat)

Changes:
_U  branches/2015Q3/
  branches/2015Q3/dns/powerdns/Makefile
  branches/2015Q3/dns/powerdns/distinfo
  branches/2015Q3/dns/powerdns/files/patch-modules__luabackend__lua_functions.cc
  branches/2015Q3/dns/powerdns/files/patch-modules__luabackend__luabackend.hh
  branches/2015Q3/dns/powerdns/pkg-plist
Comment 6 Mark Felder freebsd_committer freebsd_triage 2015-09-02 16:46:52 UTC 
Committed, thanks!