Bug 246655
| Summary: | dns/powerdns-recursor: update to 4.3.1 | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Ralf van der Enden <tremere> | ||||||||||||
| Component: | Individual Port(s) | Assignee: | Hiroki Tagato <tagattie> | ||||||||||||
| Status: | Closed FIXED | ||||||||||||||
| Severity: | Affects Some People | CC: | fernape, i.dani, tagattie, yds | ||||||||||||
| Priority: | --- | Keywords: | patch | ||||||||||||
| Version: | Latest | Flags: | tagattie:
merge-quarterly+
|
||||||||||||
| Hardware: | Any | ||||||||||||||
| OS: | Any | ||||||||||||||
| Attachments: |
|
||||||||||||||
|
Description
Ralf van der Enden
2020-05-22 09:09:04 UTC
Created attachment 214752 [details]
Security advisories for VuXML (3 CVE's)
builds and runs on 12.1-STABLE :) I noticed the build uses -DNODCACHEDIR="/var/lib/pdns-recursor" shouldn't that be -DNODCACHEDIR="/var/db/pdns-recursor" on FreeBSD?? that dir does not seem to be used at runtime. the port runs fine with this patch as is. just an observation from testing the build. Created attachment 214821 [details]
Update to PowerDNS Recursor 4.3.1 (new version)
Regenerated one more patch to pet portlint.
Forgot to delete a patch, which is no longer required on 12.1.
Also changed the BROKEN_i386 to BROKEN_FreeBSD_12_i386, since it works fine on 11.3
(In reply to yds from comment #2) It's not used by the port at the moment, so I wouldn't worry about that ;) Created attachment 214843 [details]
Update to PowerDNS Recursor 4.3.1
I must have been on crack while creating my 11.3 jail, since I forgot to specify arch. Retested everything on 11.3, 12.0 and 12.1 i386, but all SIGSEGV on startup. Changed the BROKEN line to reflect that.
Also updated the hostnamemax patch with a slightly updated patch from upstream.
A commit references this bug: Author: tagattie Date: Wed May 27 12:08:47 UTC 2020 New revision: 536689 URL: https://svnweb.freebsd.org/changeset/ports/536689 Log: Document powerdns-recursor vulnerabilities PR: 246655 Submitted by: Ralf van der Enden <tremere@cainites.net> Approved by: ehaupt (mentor) Changes: head/security/vuxml/vuln.xml A commit references this bug: Author: tagattie Date: Wed May 27 12:11:03 UTC 2020 New revision: 536690 URL: https://svnweb.freebsd.org/changeset/ports/536690 Log: - Update to 4.3.1 - Mark broken on i386 - Updated hostnamemax patch PR: 246655 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) Approved by: ehaupt (mentor) MFH: 2020Q2 (blanket, security fixes) Security: f9c5a410-9b4e-11ea-ac3f-6805ca2fa271 Changelog: https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1 Changes: head/dns/powerdns-recursor/Makefile head/dns/powerdns-recursor/distinfo head/dns/powerdns-recursor/files/patch-configure head/dns/powerdns-recursor/files/patch-dns_random.cc head/dns/powerdns-recursor/files/patch-dnsname.hh head/dns/powerdns-recursor/files/patch-hostnamemax head/dns/powerdns-recursor/files/patch-pdns_recursor.cc A commit references this bug: Author: tagattie Date: Wed May 27 12:48:57 UTC 2020 New revision: 536692 URL: https://svnweb.freebsd.org/changeset/ports/536692 Log: MFH: r536690 - Update to 4.3.1 - Mark broken on i386 - Updated hostnamemax patch PR: 246655 Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer) Approved by: ehaupt (mentor) Security: f9c5a410-9b4e-11ea-ac3f-6805ca2fa271 Changelog: https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1 Approved by: ports-secteam (joneum) Changes: branches/2020Q2/dns/powerdns-recursor/Makefile branches/2020Q2/dns/powerdns-recursor/distinfo branches/2020Q2/dns/powerdns-recursor/files/extrapatch-setuid branches/2020Q2/dns/powerdns-recursor/files/patch-configure branches/2020Q2/dns/powerdns-recursor/files/patch-dnsname.hh branches/2020Q2/dns/powerdns-recursor/files/patch-hostnamemax branches/2020Q2/dns/powerdns-recursor/files/patch-pdns_dns__random.cc branches/2020Q2/dns/powerdns-recursor/files/patch-pdns_recursor.cc branches/2020Q2/dns/powerdns-recursor/files/pdns-recursor.in branches/2020Q2/dns/powerdns-recursor/files/pkg-message.in branches/2020Q2/dns/powerdns-recursor/pkg-descr branches/2020Q2/dns/powerdns-recursor/pkg-plist Committed, thanks! (In reply to Hiroki Tagato from comment #9) Hey Guys, thanks for the security update. We build our own ports and use powerdns-recursor 4.2.x for stability reasons. The 4.2.x-Branch also received an update for this security fix and isn't vulnerable. Could you therefore mark powerdns-recursor 4.2.2 as fix version too? Thanks! See: https://blog.powerdns.com/2020/05/19/powerdns-recursor-4-3-1-4-2-2-and-4-1-16-released/ (In reply to Dani from comment #10) Hi, thanks for letting us know this. Can you post a patch to vuln.xml for update? Created attachment 214959 [details]
Add legacy versions to VuXML for powerdns-recursor
A commit references this bug: Author: tagattie Date: Fri May 29 06:51:38 UTC 2020 New revision: 536950 URL: https://svnweb.freebsd.org/changeset/ports/536950 Log: Correct vulnerable version range of powerdns-recursor PR: 246655 Submitted by: Ralf van der Enden <tremere@cainites.net> Approved by: ehaupt (mentor) Changes: head/security/vuxml/vuln.xml (In reply to Ralf van der Enden from comment #12) Committed, thanks for the update! |
