Bug 238705
| Summary: | dns/powerdns: Update to 4.1.10 (Fixes security vulnerabilities) | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Ralf van der Enden <tremere> | ||||||||
| Component: | Individual Port(s) | Assignee: | Steve Wills <swills> | ||||||||
| Status: | Closed FIXED | ||||||||||
| Severity: | Affects Many People | CC: | i.dani, ports-secteam | ||||||||
| Priority: | Normal | Keywords: | security | ||||||||
| Version: | Latest | Flags: | swills:
merge-quarterly+
|
||||||||
| Hardware: | Any | ||||||||||
| OS: | Any | ||||||||||
| URL: | https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.10 | ||||||||||
| Attachments: |
|
||||||||||
The Makefile has been formatted using ports-mgt/portfmt, which accounts for the additional changes in the diff Created attachment 205258 [details]
Update to PowerDNS Authoritative Server 4.1.10
This release and 4.1.9 together fix the following security advisories:
PowerDNS Security Advisory 2019-04 (CVE-2019-10162)
PowerDNS Security Advisory 2019-05 (CVE-2019-10163)
Bug Fixes:
Do not exit on exception parsing names of name servers to notify.ΒΆ
QA:
portlint: OK (looks fine.)
testport: OK (12.0, amd64, DOCS EXAMPLES LUAJIT MYSQL OPTALGO PGSQL PROTOBUF)
Created attachment 205259 [details]
Describe vulnerabilities for VuXML
Could someone commit this please? :) A commit references this bug: Author: swills Date: Sun Jun 30 20:39:27 UTC 2019 New revision: 505486 URL: https://svnweb.freebsd.org/changeset/ports/505486 Log: dns/powerdns: update to 4.1.10 PR: 238705 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) MFH: 2019Q2 Security: 1c21f6a3-9415-11e9-95ec-6805ca2fa271 Changes: head/dns/powerdns/Makefile head/dns/powerdns/distinfo A commit references this bug: Author: swills Date: Sun Jun 30 20:45:24 UTC 2019 New revision: 505487 URL: https://svnweb.freebsd.org/changeset/ports/505487 Log: MFH: r499039 r505025 r505486 dns/powerdns: update to 4.1.8 PR: 236717 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) Similar to r502813 for dns/powerdns-recursor, fix build on GCC-based systems: Don't add -L/usr/lib unconditionally, it makes gcc8 (used on GCC-based systems) link to base libstdc++. Given that this is a build fix that does not affect clang-based systems, there should be no need to bump portrevision. PR: 238742 Reported by: pkubaj Approved by: maintainer dns/powerdns: update to 4.1.10 PR: 238705 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) Security: 1c21f6a3-9415-11e9-95ec-6805ca2fa271 Approved by: ports-secteam (implicit) Changes: _U branches/2019Q2/ branches/2019Q2/dns/powerdns/Makefile branches/2019Q2/dns/powerdns/distinfo branches/2019Q2/dns/powerdns/files/patch-configure Committed, thanks! Oops, committed the wrong patch. A commit references this bug: Author: swills Date: Mon Jul 1 15:44:48 UTC 2019 New revision: 505605 URL: https://svnweb.freebsd.org/changeset/ports/505605 Log: dns/powerdns: Actually update to 4.1.10 Previous update was old patch to 4.1.9 PR: 238705 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) MFH: 2019Q2 Security: 1c21f6a3-9415-11e9-95ec-6805ca2fa271 Changes: head/dns/powerdns/Makefile head/dns/powerdns/distinfo A commit references this bug: Author: swills Date: Mon Jul 1 15:45:59 UTC 2019 New revision: 505606 URL: https://svnweb.freebsd.org/changeset/ports/505606 Log: MFH: r505605 dns/powerdns: Actually update to 4.1.10 Previous update was old patch to 4.1.9 PR: 238705 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) Security: 1c21f6a3-9415-11e9-95ec-6805ca2fa271 Approved by: ports-secteam (implicit) Changes: _U branches/2019Q2/ branches/2019Q2/dns/powerdns/Makefile branches/2019Q2/dns/powerdns/distinfo Committed, thanks! |
Created attachment 205219 [details] Update to PowerDNS Authoritative Server 4.1.9 Changelog: This maintenance release of the PowerDNS Authoritative Server has the following changes[1]: - #7922: by popular demand, the option to disable superslave support has been backported from 4.2.0 to 4.1.9 - #7921: `pdnsutil b2b-migrate` would lose NSEC3 settings. This has been corrected now. QA: portlint: OK (looks fine.) testport: OK (12.0, amd64, DOCS EXAMPLES LUAJIT MYSQL OPTALGO PGSQL PROTOBUF)