* [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3
@ 2022-05-24 8:33 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ccache: upgrade 4.6 -> 4.6.1 Wang Mingyu
` (3 more replies)
0 siblings, 4 replies; 6+ messages in thread
From: Wang Mingyu @ 2022-05-24 8:33 UTC (permalink / raw)
To: openembedded-core; +Cc: Wang Mingyu
Changelog:
==========
[security]
Fix a crash in DNS-over-HTTPS (DoH) code caused by
premature TLS stream socket object deletion.
(CVE-2022-1183) [GL #3216]
[bug]
RPZ NSIP and NSDNAME rule processing didn't handle stub
and static-stub zones at or above the query name. This
has now been addressed. [GL #3232]
Fixed a deadlock that could occur if an rndc
connection arrived during the shutdown of network
interfaces. [GL #3272]
Refactor the fctx_done() function to set fctx to
NULL after detaching, so that reference counting
errors will be easier to avoid. [GL #2969]
udp_recv() in dispatch could trigger an INSIST when the
callback's result indicated success but the response
was canceled in the meantime. [GL #3300]
Work around a jemalloc quirk which could trigger an
out-of-memory condition in named over time. [GL #3287]
If there was a pending negative cache DS entry,
validations depending upon it could fail. [GL #3279]
dig returned a 0 exit status on UDP connection failure.
[GL #3235]
Fix an assertion failure when using dig with +nssearch
and +tcp options by starting the next query in the
send_done() callback (like in the UDP mode) instead
of doing that recursively in start_tcp(). Also
ensure that queries interrupted while connecting
are detached properly. [GL #3144]
Don't remove CDS/CDNSKEY DELETE records on zone sign
when using 'auto-dnssec maintain;'. [GL #2931]
[contrib]
Avoid name space collision in dlz modules by prefixing
functions with 'dlz_'. [GL !5778]
dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306]
[func]
Add new named command-line option -C to print built-in
defaults. [GL #1326]
Introduce the concept of broken catalog zones described
in the DNS catalog zones draft version 5 document.
[GL #3224]
Add DNS Extended Errors when stale answers are returned
from cache. [GL #2267]
Implement support for catalog zones change of ownership
(coo) mechanism described in the DNS catalog zones draft
version 5 document. [GL #3223]
Implement support for catalog zones options new syntax
based on catalog zones custom properties with "ext"
suffix described in the DNS catalog zones draft version
5 document. [GL #3222]
Implement reference counting for TLS contexts and
allow reloading of TLS certificates on reconfiguration
without destroying the underlying TCP listener sockets
for TLS-based DNS transports. [GL #3122]
Add support for remote TLS certificates
verification, both to BIND and dig, making it possible
to implement Strict and Mutual TLS authentication,
as described in RFC 9103, Section 9.3. [GL #3163]
[cleanup]
Remove use of exclusive mode in ns_interfacemgr in
favor of rwlocked access to localhost and localnets
members of dns_aclenv_t structure. [GL #3229]
Remove the task exclusive mode use in ns_clientmgr.
[GL #3230]
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
.../0001-avoid-start-failure-with-bind-user.patch | 0
.../0001-named-lwresd-V-and-start-log-hide-build-options.patch | 0
| 0
.../bind/{bind-9.18.2 => bind-9.18.3}/bind9 | 0
.../bind/{bind-9.18.2 => bind-9.18.3}/conf.patch | 0
.../bind/{bind-9.18.2 => bind-9.18.3}/generate-rndc-key.sh | 0
.../init.d-add-support-for-read-only-rootfs.patch | 0
.../make-etc-initd-bind-stop-work.patch | 0
.../bind/{bind-9.18.2 => bind-9.18.3}/named.service | 0
.../bind/{bind_9.18.2.bb => bind_9.18.3.bb} | 2 +-
10 files changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/0001-avoid-start-failure-with-bind-user.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/0001-named-lwresd-V-and-start-log-hide-build-options.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/bind-ensure-searching-for-json-headers-searches-sysr.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/bind9 (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/conf.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/generate-rndc-key.sh (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/init.d-add-support-for-read-only-rootfs.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/make-etc-initd-bind-stop-work.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/named.service (100%)
rename meta/recipes-connectivity/bind/{bind_9.18.2.bb => bind_9.18.3.bb} (98%)
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind-9.18.3/0001-avoid-start-failure-with-bind-user.patch
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/0001-avoid-start-failure-with-bind-user.patch
rename to meta/recipes-connectivity/bind/bind-9.18.3/0001-avoid-start-failure-with-bind-user.patch
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind-9.18.3/0001-named-lwresd-V-and-start-log-hide-build-options.patch
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/0001-named-lwresd-V-and-start-log-hide-build-options.patch
rename to meta/recipes-connectivity/bind/bind-9.18.3/0001-named-lwresd-V-and-start-log-hide-build-options.patch
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind-9.18.3/bind-ensure-searching-for-json-headers-searches-sysr.patch
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/bind-ensure-searching-for-json-headers-searches-sysr.patch
rename to meta/recipes-connectivity/bind/bind-9.18.3/bind-ensure-searching-for-json-headers-searches-sysr.patch
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/bind9 b/meta/recipes-connectivity/bind/bind-9.18.3/bind9
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/bind9
rename to meta/recipes-connectivity/bind/bind-9.18.3/bind9
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/conf.patch b/meta/recipes-connectivity/bind/bind-9.18.3/conf.patch
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/conf.patch
rename to meta/recipes-connectivity/bind/bind-9.18.3/conf.patch
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/generate-rndc-key.sh b/meta/recipes-connectivity/bind/bind-9.18.3/generate-rndc-key.sh
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/generate-rndc-key.sh
rename to meta/recipes-connectivity/bind/bind-9.18.3/generate-rndc-key.sh
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind-9.18.3/init.d-add-support-for-read-only-rootfs.patch
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/init.d-add-support-for-read-only-rootfs.patch
rename to meta/recipes-connectivity/bind/bind-9.18.3/init.d-add-support-for-read-only-rootfs.patch
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind-9.18.3/make-etc-initd-bind-stop-work.patch
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/make-etc-initd-bind-stop-work.patch
rename to meta/recipes-connectivity/bind/bind-9.18.3/make-etc-initd-bind-stop-work.patch
diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/named.service b/meta/recipes-connectivity/bind/bind-9.18.3/named.service
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.18.2/named.service
rename to meta/recipes-connectivity/bind/bind-9.18.3/named.service
diff --git a/meta/recipes-connectivity/bind/bind_9.18.2.bb b/meta/recipes-connectivity/bind/bind_9.18.3.bb
similarity index 98%
rename from meta/recipes-connectivity/bind/bind_9.18.2.bb
rename to meta/recipes-connectivity/bind/bind_9.18.3.bb
index 1c77aceb9f..b511b77f2e 100644
--- a/meta/recipes-connectivity/bind/bind_9.18.2.bb
+++ b/meta/recipes-connectivity/bind/bind_9.18.3.bb
@@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \
file://0001-avoid-start-failure-with-bind-user.patch \
"
-SRC_URI[sha256sum] = "2e4b38779bba0a23ee634fdf7c525fd9794c41d692bfd83cda25823a2a3ed969"
+SRC_URI[sha256sum] = "0ad8da773bd93cba0ef66cc81999698ebdf9c3e51faed5e5c8c1eb75cad2ae6f"
UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/"
# follow the ESV versions divisible by 2
--
2.25.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [PATCH] [OE-core] [PATCH] ccache: upgrade 4.6 -> 4.6.1
2022-05-24 8:33 [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Wang Mingyu
@ 2022-05-24 8:33 ` Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] init-system-helpers: upgrade 1.62 -> 1.63 Wang Mingyu
` (2 subsequent siblings)
3 siblings, 0 replies; 6+ messages in thread
From: Wang Mingyu @ 2022-05-24 8:33 UTC (permalink / raw)
To: openembedded-core; +Cc: Wang Mingyu
Changelog:
https://ccache.dev/releasenotes.html#_ccache_4_6_1
License-Update:
- Copyright year updated to 2020
- updated version of expected-lite from 0.5.0 to revision
3abf06821d489d56aa9c60eccf8aab70d67d158b
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
.../ccache/{ccache_4.6.bb => ccache_4.6.1.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-devtools/ccache/{ccache_4.6.bb => ccache_4.6.1.bb} (82%)
diff --git a/meta/recipes-devtools/ccache/ccache_4.6.bb b/meta/recipes-devtools/ccache/ccache_4.6.1.bb
similarity index 82%
rename from meta/recipes-devtools/ccache/ccache_4.6.bb
rename to meta/recipes-devtools/ccache/ccache_4.6.1.bb
index f019679cf1..418d1070cd 100644
--- a/meta/recipes-devtools/ccache/ccache_4.6.bb
+++ b/meta/recipes-devtools/ccache/ccache_4.6.1.bb
@@ -7,12 +7,12 @@ HOMEPAGE = "http://ccache.samba.org"
SECTION = "devel"
LICENSE = "GPL-3.0-or-later"
-LIC_FILES_CHKSUM = "file://LICENSE.adoc;md5=ff5327dc93e2b286c931dda3d6079da9"
+LIC_FILES_CHKSUM = "file://LICENSE.adoc;md5=7a19377a02749d8a1281ed608169b0ee"
DEPENDS = "zstd"
SRC_URI = "https://github.com/ccache/ccache/releases/download/v${PV}/${BP}.tar.gz"
-SRC_URI[sha256sum] = "73a1767ac6b7c0404a1a55f761a746d338e702883c7137fbf587023062258625"
+SRC_URI[sha256sum] = "59b28a57c3a45e48d6049001999c9f94cd4d3e9b0196994bed9a6a7437ffa3bc"
UPSTREAM_CHECK_URI = "https://github.com/ccache/ccache/releases/"
--
2.25.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [PATCH] [OE-core] [PATCH] init-system-helpers: upgrade 1.62 -> 1.63
2022-05-24 8:33 [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ccache: upgrade 4.6 -> 4.6.1 Wang Mingyu
@ 2022-05-24 8:33 ` Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ninja: upgrade 1.10.2 -> 1.11.0 Wang Mingyu
2022-07-18 6:42 ` [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Yi Zhao
3 siblings, 0 replies; 6+ messages in thread
From: Wang Mingyu @ 2022-05-24 8:33 UTC (permalink / raw)
To: openembedded-core; +Cc: Wang Mingyu
Changelog:
==========
* Remove constraints unnecessary since buster
* init-system-helpers: Drop versioned constraint on perl-base in Depends.
* init: Drop versioned constraint on init-system-helpers in Depends.
* t/helpers.pm: use installed version of deb-systemd-helper if
TEST_INSTALLED is set
* add DPKG_ROOT support (Closes: #983421)
* Add additional error checking on write operations.
The 'close()' call can fail on both read and write - while the read is
usually relatively benign, for the write counter part can include "fun"
errors. Most of these would most likely be persistent issues, but it makes
sense to detect errors as early possible.
* service: use 'grep -F' instead of 'egrep'
'egrep' and 'fgrep' have been deprecated in GNU grep since 2007, and in
current post 3.7 Git they have been made to emit obsolescence warnings.
The occurrence in 'service' uses a non-regex argument, so switch to 'grep
-F' instead of '-E'.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
...{init-system-helpers_1.62.bb => init-system-helpers_1.63.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-core/initscripts/{init-system-helpers_1.62.bb => init-system-helpers_1.63.bb} (96%)
diff --git a/meta/recipes-core/initscripts/init-system-helpers_1.62.bb b/meta/recipes-core/initscripts/init-system-helpers_1.63.bb
similarity index 96%
rename from meta/recipes-core/initscripts/init-system-helpers_1.62.bb
rename to meta/recipes-core/initscripts/init-system-helpers_1.63.bb
index d5c05ff8e5..1251ddf639 100644
--- a/meta/recipes-core/initscripts/init-system-helpers_1.62.bb
+++ b/meta/recipes-core/initscripts/init-system-helpers_1.63.bb
@@ -16,7 +16,7 @@ SECTION = "base"
LICENSE = "BSD-3-Clause & GPL-2.0-only"
LIC_FILES_CHKSUM = "file://debian/copyright;md5=ee2b1830fcfead84d07bc060ec43e072"
-SRCREV = "bbe4b508f3216cdc124683ba449e2295974a6b4a"
+SRCREV = "af94bae943a80954af7fd486c1cab3f900e0975f"
SRC_URI = "git://salsa.debian.org/debian/init-system-helpers.git;protocol=https;branch=master"
S = "${WORKDIR}/git"
--
2.25.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [PATCH] [OE-core] [PATCH] ninja: upgrade 1.10.2 -> 1.11.0
2022-05-24 8:33 [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ccache: upgrade 4.6 -> 4.6.1 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] init-system-helpers: upgrade 1.62 -> 1.63 Wang Mingyu
@ 2022-05-24 8:33 ` Wang Mingyu
2022-07-18 6:42 ` [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Yi Zhao
3 siblings, 0 replies; 6+ messages in thread
From: Wang Mingyu @ 2022-05-24 8:33 UTC (permalink / raw)
To: openembedded-core; +Cc: Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
.../recipes-devtools/ninja/{ninja_1.10.2.bb => ninja_1.11.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/ninja/{ninja_1.10.2.bb => ninja_1.11.0.bb} (94%)
diff --git a/meta/recipes-devtools/ninja/ninja_1.10.2.bb b/meta/recipes-devtools/ninja/ninja_1.11.0.bb
similarity index 94%
rename from meta/recipes-devtools/ninja/ninja_1.10.2.bb
rename to meta/recipes-devtools/ninja/ninja_1.11.0.bb
index 7270321d6e..4ec361cc1a 100644
--- a/meta/recipes-devtools/ninja/ninja_1.10.2.bb
+++ b/meta/recipes-devtools/ninja/ninja_1.11.0.bb
@@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=a81586a64ad4e476c791cda7e2f2c52e"
DEPENDS = "re2c-native ninja-native"
-SRCREV = "e72d1d581c945c158ed68d9bc48911063022a2c6"
+SRCREV = "51edeeb063a82693573db43782d9e3733b2840e4"
SRC_URI = "git://github.com/ninja-build/ninja.git;branch=release;protocol=https"
UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>.*)"
--
2.25.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3
2022-05-24 8:33 [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Wang Mingyu
` (2 preceding siblings ...)
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ninja: upgrade 1.10.2 -> 1.11.0 Wang Mingyu
@ 2022-07-18 6:42 ` Yi Zhao
2022-07-18 14:45 ` Steve Sakoman
3 siblings, 1 reply; 6+ messages in thread
From: Yi Zhao @ 2022-07-18 6:42 UTC (permalink / raw)
To: Steve Sakoman; +Cc: wangmy, openembedded-core
Hi Steve,
On 5/24/22 16:33, wangmy wrote:
> Changelog:
> ==========
> [security]
> Fix a crash in DNS-over-HTTPS (DoH) code caused by
> premature TLS stream socket object deletion.
> (CVE-2022-1183) [GL #3216]
There is a CVE fix in this minor update. Is there any plan to backport
it to kirkstone ?
Thanks,
Yi
>
> [bug]
> RPZ NSIP and NSDNAME rule processing didn't handle stub
> and static-stub zones at or above the query name. This
> has now been addressed. [GL #3232]
> Fixed a deadlock that could occur if an rndc
> connection arrived during the shutdown of network
> interfaces. [GL #3272]
>
> Refactor the fctx_done() function to set fctx to
> NULL after detaching, so that reference counting
> errors will be easier to avoid. [GL #2969]
>
> udp_recv() in dispatch could trigger an INSIST when the
> callback's result indicated success but the response
> was canceled in the meantime. [GL #3300]
>
> Work around a jemalloc quirk which could trigger an
> out-of-memory condition in named over time. [GL #3287]
>
> If there was a pending negative cache DS entry,
> validations depending upon it could fail. [GL #3279]
>
> dig returned a 0 exit status on UDP connection failure.
> [GL #3235]
>
> Fix an assertion failure when using dig with +nssearch
> and +tcp options by starting the next query in the
> send_done() callback (like in the UDP mode) instead
> of doing that recursively in start_tcp(). Also
> ensure that queries interrupted while connecting
> are detached properly. [GL #3144]
>
> Don't remove CDS/CDNSKEY DELETE records on zone sign
> when using 'auto-dnssec maintain;'. [GL #2931]
>
> [contrib]
> Avoid name space collision in dlz modules by prefixing
> functions with 'dlz_'. [GL !5778]
>
> dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306]
>
> [func]
> Add new named command-line option -C to print built-in
> defaults. [GL #1326]
>
> Introduce the concept of broken catalog zones described
> in the DNS catalog zones draft version 5 document.
> [GL #3224]
>
> Add DNS Extended Errors when stale answers are returned
> from cache. [GL #2267]
>
> Implement support for catalog zones change of ownership
> (coo) mechanism described in the DNS catalog zones draft
> version 5 document. [GL #3223]
>
> Implement support for catalog zones options new syntax
> based on catalog zones custom properties with "ext"
> suffix described in the DNS catalog zones draft version
> 5 document. [GL #3222]
>
> Implement reference counting for TLS contexts and
> allow reloading of TLS certificates on reconfiguration
> without destroying the underlying TCP listener sockets
> for TLS-based DNS transports. [GL #3122]
> Add support for remote TLS certificates
> verification, both to BIND and dig, making it possible
> to implement Strict and Mutual TLS authentication,
> as described in RFC 9103, Section 9.3. [GL #3163]
>
> [cleanup]
> Remove use of exclusive mode in ns_interfacemgr in
> favor of rwlocked access to localhost and localnets
> members of dns_aclenv_t structure. [GL #3229]
>
> Remove the task exclusive mode use in ns_clientmgr.
> [GL #3230]
>
> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
> ---
> .../0001-avoid-start-failure-with-bind-user.patch | 0
> .../0001-named-lwresd-V-and-start-log-hide-build-options.patch | 0
> .../bind-ensure-searching-for-json-headers-searches-sysr.patch | 0
> .../bind/{bind-9.18.2 => bind-9.18.3}/bind9 | 0
> .../bind/{bind-9.18.2 => bind-9.18.3}/conf.patch | 0
> .../bind/{bind-9.18.2 => bind-9.18.3}/generate-rndc-key.sh | 0
> .../init.d-add-support-for-read-only-rootfs.patch | 0
> .../make-etc-initd-bind-stop-work.patch | 0
> .../bind/{bind-9.18.2 => bind-9.18.3}/named.service | 0
> .../bind/{bind_9.18.2.bb => bind_9.18.3.bb} | 2 +-
> 10 files changed, 1 insertion(+), 1 deletion(-)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/0001-avoid-start-failure-with-bind-user.patch (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/0001-named-lwresd-V-and-start-log-hide-build-options.patch (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/bind-ensure-searching-for-json-headers-searches-sysr.patch (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/bind9 (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/conf.patch (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/generate-rndc-key.sh (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/init.d-add-support-for-read-only-rootfs.patch (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/make-etc-initd-bind-stop-work.patch (100%)
> rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/named.service (100%)
> rename meta/recipes-connectivity/bind/{bind_9.18.2.bb => bind_9.18.3.bb} (98%)
>
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind-9.18.3/0001-avoid-start-failure-with-bind-user.patch
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/0001-avoid-start-failure-with-bind-user.patch
> rename to meta/recipes-connectivity/bind/bind-9.18.3/0001-avoid-start-failure-with-bind-user.patch
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind-9.18.3/0001-named-lwresd-V-and-start-log-hide-build-options.patch
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/0001-named-lwresd-V-and-start-log-hide-build-options.patch
> rename to meta/recipes-connectivity/bind/bind-9.18.3/0001-named-lwresd-V-and-start-log-hide-build-options.patch
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind-9.18.3/bind-ensure-searching-for-json-headers-searches-sysr.patch
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/bind-ensure-searching-for-json-headers-searches-sysr.patch
> rename to meta/recipes-connectivity/bind/bind-9.18.3/bind-ensure-searching-for-json-headers-searches-sysr.patch
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/bind9 b/meta/recipes-connectivity/bind/bind-9.18.3/bind9
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/bind9
> rename to meta/recipes-connectivity/bind/bind-9.18.3/bind9
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/conf.patch b/meta/recipes-connectivity/bind/bind-9.18.3/conf.patch
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/conf.patch
> rename to meta/recipes-connectivity/bind/bind-9.18.3/conf.patch
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/generate-rndc-key.sh b/meta/recipes-connectivity/bind/bind-9.18.3/generate-rndc-key.sh
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/generate-rndc-key.sh
> rename to meta/recipes-connectivity/bind/bind-9.18.3/generate-rndc-key.sh
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind-9.18.3/init.d-add-support-for-read-only-rootfs.patch
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/init.d-add-support-for-read-only-rootfs.patch
> rename to meta/recipes-connectivity/bind/bind-9.18.3/init.d-add-support-for-read-only-rootfs.patch
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind-9.18.3/make-etc-initd-bind-stop-work.patch
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/make-etc-initd-bind-stop-work.patch
> rename to meta/recipes-connectivity/bind/bind-9.18.3/make-etc-initd-bind-stop-work.patch
> diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/named.service b/meta/recipes-connectivity/bind/bind-9.18.3/named.service
> similarity index 100%
> rename from meta/recipes-connectivity/bind/bind-9.18.2/named.service
> rename to meta/recipes-connectivity/bind/bind-9.18.3/named.service
> diff --git a/meta/recipes-connectivity/bind/bind_9.18.2.bb b/meta/recipes-connectivity/bind/bind_9.18.3.bb
> similarity index 98%
> rename from meta/recipes-connectivity/bind/bind_9.18.2.bb
> rename to meta/recipes-connectivity/bind/bind_9.18.3.bb
> index 1c77aceb9f..b511b77f2e 100644
> --- a/meta/recipes-connectivity/bind/bind_9.18.2.bb
> +++ b/meta/recipes-connectivity/bind/bind_9.18.3.bb
> @@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \
> file://0001-avoid-start-failure-with-bind-user.patch \
> "
>
> -SRC_URI[sha256sum] = "2e4b38779bba0a23ee634fdf7c525fd9794c41d692bfd83cda25823a2a3ed969"
> +SRC_URI[sha256sum] = "0ad8da773bd93cba0ef66cc81999698ebdf9c3e51faed5e5c8c1eb75cad2ae6f"
>
> UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/"
> # follow the ESV versions divisible by 2
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#166051): https://lists.openembedded.org/g/openembedded-core/message/166051
> Mute This Topic: https://lists.openembedded.org/mt/91307116/3616783
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [yi.zhao@windriver.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3
2022-07-18 6:42 ` [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Yi Zhao
@ 2022-07-18 14:45 ` Steve Sakoman
0 siblings, 0 replies; 6+ messages in thread
From: Steve Sakoman @ 2022-07-18 14:45 UTC (permalink / raw)
To: Yi Zhao; +Cc: wangmy, openembedded-core
On Sun, Jul 17, 2022 at 8:42 PM Yi Zhao <yi.zhao@windriver.com> wrote:
>
> Hi Steve,
>
>
> On 5/24/22 16:33, wangmy wrote:
> > Changelog:
> > ==========
> > [security]
> > Fix a crash in DNS-over-HTTPS (DoH) code caused by
> > premature TLS stream socket object deletion.
> > (CVE-2022-1183) [GL #3216]
>
>
> There is a CVE fix in this minor update. Is there any plan to backport
> it to kirkstone ?
Since this is a stable branch update I can take it. I'll add it to my
next patch set for testing.
Steve
> >
> > [bug]
> > RPZ NSIP and NSDNAME rule processing didn't handle stub
> > and static-stub zones at or above the query name. This
> > has now been addressed. [GL #3232]
> > Fixed a deadlock that could occur if an rndc
> > connection arrived during the shutdown of network
> > interfaces. [GL #3272]
> >
> > Refactor the fctx_done() function to set fctx to
> > NULL after detaching, so that reference counting
> > errors will be easier to avoid. [GL #2969]
> >
> > udp_recv() in dispatch could trigger an INSIST when the
> > callback's result indicated success but the response
> > was canceled in the meantime. [GL #3300]
> >
> > Work around a jemalloc quirk which could trigger an
> > out-of-memory condition in named over time. [GL #3287]
> >
> > If there was a pending negative cache DS entry,
> > validations depending upon it could fail. [GL #3279]
> >
> > dig returned a 0 exit status on UDP connection failure.
> > [GL #3235]
> >
> > Fix an assertion failure when using dig with +nssearch
> > and +tcp options by starting the next query in the
> > send_done() callback (like in the UDP mode) instead
> > of doing that recursively in start_tcp(). Also
> > ensure that queries interrupted while connecting
> > are detached properly. [GL #3144]
> >
> > Don't remove CDS/CDNSKEY DELETE records on zone sign
> > when using 'auto-dnssec maintain;'. [GL #2931]
> >
> > [contrib]
> > Avoid name space collision in dlz modules by prefixing
> > functions with 'dlz_'. [GL !5778]
> >
> > dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306]
> >
> > [func]
> > Add new named command-line option -C to print built-in
> > defaults. [GL #1326]
> >
> > Introduce the concept of broken catalog zones described
> > in the DNS catalog zones draft version 5 document.
> > [GL #3224]
> >
> > Add DNS Extended Errors when stale answers are returned
> > from cache. [GL #2267]
> >
> > Implement support for catalog zones change of ownership
> > (coo) mechanism described in the DNS catalog zones draft
> > version 5 document. [GL #3223]
> >
> > Implement support for catalog zones options new syntax
> > based on catalog zones custom properties with "ext"
> > suffix described in the DNS catalog zones draft version
> > 5 document. [GL #3222]
> >
> > Implement reference counting for TLS contexts and
> > allow reloading of TLS certificates on reconfiguration
> > without destroying the underlying TCP listener sockets
> > for TLS-based DNS transports. [GL #3122]
> > Add support for remote TLS certificates
> > verification, both to BIND and dig, making it possible
> > to implement Strict and Mutual TLS authentication,
> > as described in RFC 9103, Section 9.3. [GL #3163]
> >
> > [cleanup]
> > Remove use of exclusive mode in ns_interfacemgr in
> > favor of rwlocked access to localhost and localnets
> > members of dns_aclenv_t structure. [GL #3229]
> >
> > Remove the task exclusive mode use in ns_clientmgr.
> > [GL #3230]
> >
> > Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
> > ---
> > .../0001-avoid-start-failure-with-bind-user.patch | 0
> > .../0001-named-lwresd-V-and-start-log-hide-build-options.patch | 0
> > .../bind-ensure-searching-for-json-headers-searches-sysr.patch | 0
> > .../bind/{bind-9.18.2 => bind-9.18.3}/bind9 | 0
> > .../bind/{bind-9.18.2 => bind-9.18.3}/conf.patch | 0
> > .../bind/{bind-9.18.2 => bind-9.18.3}/generate-rndc-key.sh | 0
> > .../init.d-add-support-for-read-only-rootfs.patch | 0
> > .../make-etc-initd-bind-stop-work.patch | 0
> > .../bind/{bind-9.18.2 => bind-9.18.3}/named.service | 0
> > .../bind/{bind_9.18.2.bb => bind_9.18.3.bb} | 2 +-
> > 10 files changed, 1 insertion(+), 1 deletion(-)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/0001-avoid-start-failure-with-bind-user.patch (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/0001-named-lwresd-V-and-start-log-hide-build-options.patch (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/bind-ensure-searching-for-json-headers-searches-sysr.patch (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/bind9 (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/conf.patch (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/generate-rndc-key.sh (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/init.d-add-support-for-read-only-rootfs.patch (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/make-etc-initd-bind-stop-work.patch (100%)
> > rename meta/recipes-connectivity/bind/{bind-9.18.2 => bind-9.18.3}/named.service (100%)
> > rename meta/recipes-connectivity/bind/{bind_9.18.2.bb => bind_9.18.3.bb} (98%)
> >
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind-9.18.3/0001-avoid-start-failure-with-bind-user.patch
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/0001-avoid-start-failure-with-bind-user.patch
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/0001-avoid-start-failure-with-bind-user.patch
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind-9.18.3/0001-named-lwresd-V-and-start-log-hide-build-options.patch
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/0001-named-lwresd-V-and-start-log-hide-build-options.patch
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/0001-named-lwresd-V-and-start-log-hide-build-options.patch
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind-9.18.3/bind-ensure-searching-for-json-headers-searches-sysr.patch
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/bind-ensure-searching-for-json-headers-searches-sysr.patch
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/bind-ensure-searching-for-json-headers-searches-sysr.patch
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/bind9 b/meta/recipes-connectivity/bind/bind-9.18.3/bind9
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/bind9
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/bind9
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/conf.patch b/meta/recipes-connectivity/bind/bind-9.18.3/conf.patch
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/conf.patch
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/conf.patch
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/generate-rndc-key.sh b/meta/recipes-connectivity/bind/bind-9.18.3/generate-rndc-key.sh
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/generate-rndc-key.sh
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/generate-rndc-key.sh
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind-9.18.3/init.d-add-support-for-read-only-rootfs.patch
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/init.d-add-support-for-read-only-rootfs.patch
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/init.d-add-support-for-read-only-rootfs.patch
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind-9.18.3/make-etc-initd-bind-stop-work.patch
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/make-etc-initd-bind-stop-work.patch
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/make-etc-initd-bind-stop-work.patch
> > diff --git a/meta/recipes-connectivity/bind/bind-9.18.2/named.service b/meta/recipes-connectivity/bind/bind-9.18.3/named.service
> > similarity index 100%
> > rename from meta/recipes-connectivity/bind/bind-9.18.2/named.service
> > rename to meta/recipes-connectivity/bind/bind-9.18.3/named.service
> > diff --git a/meta/recipes-connectivity/bind/bind_9.18.2.bb b/meta/recipes-connectivity/bind/bind_9.18.3.bb
> > similarity index 98%
> > rename from meta/recipes-connectivity/bind/bind_9.18.2.bb
> > rename to meta/recipes-connectivity/bind/bind_9.18.3.bb
> > index 1c77aceb9f..b511b77f2e 100644
> > --- a/meta/recipes-connectivity/bind/bind_9.18.2.bb
> > +++ b/meta/recipes-connectivity/bind/bind_9.18.3.bb
> > @@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \
> > file://0001-avoid-start-failure-with-bind-user.patch \
> > "
> >
> > -SRC_URI[sha256sum] = "2e4b38779bba0a23ee634fdf7c525fd9794c41d692bfd83cda25823a2a3ed969"
> > +SRC_URI[sha256sum] = "0ad8da773bd93cba0ef66cc81999698ebdf9c3e51faed5e5c8c1eb75cad2ae6f"
> >
> > UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/"
> > # follow the ESV versions divisible by 2
> >
> >
> >
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#168192): https://lists.openembedded.org/g/openembedded-core/message/168192
> Mute This Topic: https://lists.openembedded.org/mt/91307116/3617601
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [sakoman@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2022-07-18 14:45 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-05-24 8:33 [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ccache: upgrade 4.6 -> 4.6.1 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] init-system-helpers: upgrade 1.62 -> 1.63 Wang Mingyu
2022-05-24 8:33 ` [PATCH] [OE-core] [PATCH] ninja: upgrade 1.10.2 -> 1.11.0 Wang Mingyu
2022-07-18 6:42 ` [PATCH] [OE-core] [PATCH] bind: upgrade 9.18.2 -> 9.18.3 Yi Zhao
2022-07-18 14:45 ` Steve Sakoman
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.