From 57a134af1b2a461f3233b7eb450b8ebddfdd7a46 Mon Sep 17 00:00:00 2001 From: Sven Wegener Date: Tue, 27 Jul 2021 07:19:40 +0200 Subject: net-dns/pdns: Version bump, security bug #804585 Bug: https://bugs.gentoo.org/804585 Package-Manager: Portage-3.0.20, Repoman-3.0.2 Signed-off-by: Sven Wegener --- net-dns/pdns/Manifest | 2 +- net-dns/pdns/pdns-4.5.0.ebuild | 161 ----------------------------------------- net-dns/pdns/pdns-4.5.1.ebuild | 161 +++++++++++++++++++++++++++++++++++++++++ 3 files changed, 162 insertions(+), 162 deletions(-) delete mode 100644 net-dns/pdns/pdns-4.5.0.ebuild create mode 100644 net-dns/pdns/pdns-4.5.1.ebuild (limited to 'net-dns') diff --git a/net-dns/pdns/Manifest b/net-dns/pdns/Manifest index 79434e80e7d9..8fe79b398d9d 100644 --- a/net-dns/pdns/Manifest +++ b/net-dns/pdns/Manifest @@ -1,2 +1,2 @@ DIST pdns-4.4.1.tar.bz2 1276990 BLAKE2B 9771cf3273ab7e8ab4607a91563bfe0dc3f4532b5420861d816eacd2798d66de3a1eb824c191264f9106ec47bd6003d99108b8df678190055948779b9b3b070f SHA512 a6f31972f77ded8ecfb523e8810dd90e5b7aa628746fee2a9a0daae2a7935800f111ce8617ffd71d5ce3881947d4ffc36c9cb37996a7bcc514536bb4abe1f79e -DIST pdns-4.5.0.tar.bz2 1267077 BLAKE2B 62e0d90db3f6fd7566184a80519c95d89e3360c28450ef4fd9bdaba3f0bc38a517827ef4bacfa66a3ac7ffb2654b31a9d81406dd3ae35b0ceb34c79f2c18ac29 SHA512 7643cbd08e7cf6c2f5911784222b1e1f686153f4c8c4d5e0ee756a5c08b4fe52b617a948ef7f258ceddc45f31331c68a10034176fbd07cb2e2ba38174e54a17f +DIST pdns-4.5.1.tar.bz2 1274965 BLAKE2B 8b1f91b425f02af5a1f6b8a22fe5e689fb9854686058c7ae2dbac5fe29c9562f9a4fff829fe6b7aad595e1fe2a55af19d09d4b002ec8f88115887cb8a74d042b SHA512 428be2bea0d39613fe31def9116c0d3dbfc95eac953ca058df088f06a971a5a1a49067f83c99719af2657e7abcf2e7c471311bd26a1ebf1bae2bd70e1a823fca diff --git a/net-dns/pdns/pdns-4.5.0.ebuild b/net-dns/pdns/pdns-4.5.0.ebuild deleted file mode 100644 index c45db0959c30..000000000000 --- a/net-dns/pdns/pdns-4.5.0.ebuild +++ /dev/null @@ -1,161 +0,0 @@ -# Copyright 1999-2021 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -LUA_COMPAT=( lua5-{1..4} luajit ) - -inherit lua-single - -DESCRIPTION="The PowerDNS Daemon" -HOMEPAGE="https://www.powerdns.com/" -SRC_URI="https://downloads.powerdns.com/releases/${P/_/-}.tar.bz2" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~amd64" - -# other possible flags: -# db2: we lack the dep -# oracle: dito (need Oracle Client Libraries) -# xdb: (almost) dead, surely not supported - -IUSE="debug doc geoip ldap lua-records mydns mysql postgres remote sodium sqlite systemd tools tinydns test" -RESTRICT="!test? ( test )" - -REQUIRED_USE="${LUA_REQUIRED_USE} - mydns? ( mysql )" - -DEPEND="${LUA_DEPS} - dev-libs/openssl:= - >=dev-libs/boost-1.35:= - lua-records? ( >=net-misc/curl-7.21.3 ) - mysql? ( dev-db/mysql-connector-c:= ) - postgres? ( dev-db/postgresql:= ) - ldap? ( >=net-nds/openldap-2.0.27-r4 app-crypt/mit-krb5 ) - sqlite? ( dev-db/sqlite:3 ) - geoip? ( >=dev-cpp/yaml-cpp-0.5.1:= dev-libs/geoip ) - sodium? ( dev-libs/libsodium:= ) - tinydns? ( >=dev-db/tinycdb-0.77 )" -RDEPEND="${DEPEND} - acct-user/pdns - acct-group/pdns" - -BDEPEND="virtual/pkgconfig - doc? ( app-doc/doxygen )" - -S="${WORKDIR}"/${P/_/-} - -src_configure() { - local dynmodules="pipe bind" # the default backends, always enabled - - #use db2 && dynmodules+=" db2" - use ldap && dynmodules+=" ldap" - use mydns && dynmodules+=" mydns" - use mysql && dynmodules+=" gmysql" - #use oracle && dynmodules+=" goracle oracle" - use postgres && dynmodules+=" gpgsql" - use remote && dynmodules+=" remote" - use sqlite && dynmodules+=" gsqlite3" - use tinydns && dynmodules+=" tinydns" - use geoip && dynmodules+=" geoip" - #use xdb && dynmodules+=" xdb" - - econf \ - --disable-static \ - --sysconfdir=/etc/powerdns \ - --libdir=/usr/$(get_libdir)/powerdns \ - --with-service-user=pdns \ - --with-service-group=pdns \ - --with-modules= \ - --with-dynmodules="${dynmodules}" \ - --with-mysql-lib=/usr/$(get_libdir) \ - --with-lua="${ELUA}" \ - $(use_enable debug verbose-logging) \ - $(use_enable lua-records) \ - $(use_enable test unit-tests) \ - $(use_enable tools) \ - $(use_enable systemd) \ - $(use_with sodium libsodium) \ - ${myconf} -} - -src_compile() { - default - use doc && emake -C codedocs codedocs -} - -src_install() { - default - - mv "${D}"/etc/powerdns/pdns.conf{-dist,} - - fperms 0700 /etc/powerdns - fperms 0600 /etc/powerdns/pdns.conf - - # set defaults: setuid=pdns, setgid=pdns - sed -i \ - -e 's/^# set\([ug]\)id=$/set\1id=pdns/g' \ - "${D}"/etc/powerdns/pdns.conf - - newinitd "${FILESDIR}"/pdns-r1 pdns - - keepdir /var/empty - - if use doc; then - docinto html - dodoc -r codedocs/html/. - fi - - # Install development headers - insinto /usr/include/pdns - doins pdns/*.hh - insinto /usr/include/pdns/backends/gsql - doins pdns/backends/gsql/*.hh - - if use ldap ; then - insinto /etc/openldap/schema - doins "${FILESDIR}"/dnsdomain2.schema - fi - - find "${D}" -name '*.la' -delete || die -} - -pkg_postinst() { - elog "PowerDNS provides multiple instances support. You can create more instances" - elog "by symlinking the pdns init script to another name." - elog - elog "The name must be in the format pdns. and PowerDNS will use the" - elog "/etc/powerdns/pdns-.conf configuration file instead of the default." - - local old - for old in ${REPLACING_VERSIONS}; do - ver_test ${old} -lt 3.2 || continue - - echo - ewarn "To fix a security bug (bug #458018) had the following" - ewarn "files/directories the world-readable bit removed (if set):" - ewarn " ${EPREFIX}/etc/powerdns" - ewarn " ${EPREFIX}/etc/powerdns/pdns.conf" - ewarn "Check if this is correct for your setup" - ewarn "This is a one-time change and will not happen on subsequent updates." - chmod o-rwx "${EPREFIX}"/etc/powerdns/{,pdns.conf} - - break - done - - if use postgres; then - for old in ${REPLACING_VERSIONS}; do - ver_test ${old} -lt 4.1.11-r1 || continue - - echo - ewarn "PowerDNS 4.1.11 contains a security fix for the PostgreSQL backend." - ewarn "This security fix needs to be applied manually to the database schema." - ewarn "Please refer to the official security advisory for more information:" - ewarn - ewarn " https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-06.html" - - break - done - fi -} diff --git a/net-dns/pdns/pdns-4.5.1.ebuild b/net-dns/pdns/pdns-4.5.1.ebuild new file mode 100644 index 000000000000..c45db0959c30 --- /dev/null +++ b/net-dns/pdns/pdns-4.5.1.ebuild @@ -0,0 +1,161 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +LUA_COMPAT=( lua5-{1..4} luajit ) + +inherit lua-single + +DESCRIPTION="The PowerDNS Daemon" +HOMEPAGE="https://www.powerdns.com/" +SRC_URI="https://downloads.powerdns.com/releases/${P/_/-}.tar.bz2" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~amd64" + +# other possible flags: +# db2: we lack the dep +# oracle: dito (need Oracle Client Libraries) +# xdb: (almost) dead, surely not supported + +IUSE="debug doc geoip ldap lua-records mydns mysql postgres remote sodium sqlite systemd tools tinydns test" +RESTRICT="!test? ( test )" + +REQUIRED_USE="${LUA_REQUIRED_USE} + mydns? ( mysql )" + +DEPEND="${LUA_DEPS} + dev-libs/openssl:= + >=dev-libs/boost-1.35:= + lua-records? ( >=net-misc/curl-7.21.3 ) + mysql? ( dev-db/mysql-connector-c:= ) + postgres? ( dev-db/postgresql:= ) + ldap? ( >=net-nds/openldap-2.0.27-r4 app-crypt/mit-krb5 ) + sqlite? ( dev-db/sqlite:3 ) + geoip? ( >=dev-cpp/yaml-cpp-0.5.1:= dev-libs/geoip ) + sodium? ( dev-libs/libsodium:= ) + tinydns? ( >=dev-db/tinycdb-0.77 )" +RDEPEND="${DEPEND} + acct-user/pdns + acct-group/pdns" + +BDEPEND="virtual/pkgconfig + doc? ( app-doc/doxygen )" + +S="${WORKDIR}"/${P/_/-} + +src_configure() { + local dynmodules="pipe bind" # the default backends, always enabled + + #use db2 && dynmodules+=" db2" + use ldap && dynmodules+=" ldap" + use mydns && dynmodules+=" mydns" + use mysql && dynmodules+=" gmysql" + #use oracle && dynmodules+=" goracle oracle" + use postgres && dynmodules+=" gpgsql" + use remote && dynmodules+=" remote" + use sqlite && dynmodules+=" gsqlite3" + use tinydns && dynmodules+=" tinydns" + use geoip && dynmodules+=" geoip" + #use xdb && dynmodules+=" xdb" + + econf \ + --disable-static \ + --sysconfdir=/etc/powerdns \ + --libdir=/usr/$(get_libdir)/powerdns \ + --with-service-user=pdns \ + --with-service-group=pdns \ + --with-modules= \ + --with-dynmodules="${dynmodules}" \ + --with-mysql-lib=/usr/$(get_libdir) \ + --with-lua="${ELUA}" \ + $(use_enable debug verbose-logging) \ + $(use_enable lua-records) \ + $(use_enable test unit-tests) \ + $(use_enable tools) \ + $(use_enable systemd) \ + $(use_with sodium libsodium) \ + ${myconf} +} + +src_compile() { + default + use doc && emake -C codedocs codedocs +} + +src_install() { + default + + mv "${D}"/etc/powerdns/pdns.conf{-dist,} + + fperms 0700 /etc/powerdns + fperms 0600 /etc/powerdns/pdns.conf + + # set defaults: setuid=pdns, setgid=pdns + sed -i \ + -e 's/^# set\([ug]\)id=$/set\1id=pdns/g' \ + "${D}"/etc/powerdns/pdns.conf + + newinitd "${FILESDIR}"/pdns-r1 pdns + + keepdir /var/empty + + if use doc; then + docinto html + dodoc -r codedocs/html/. + fi + + # Install development headers + insinto /usr/include/pdns + doins pdns/*.hh + insinto /usr/include/pdns/backends/gsql + doins pdns/backends/gsql/*.hh + + if use ldap ; then + insinto /etc/openldap/schema + doins "${FILESDIR}"/dnsdomain2.schema + fi + + find "${D}" -name '*.la' -delete || die +} + +pkg_postinst() { + elog "PowerDNS provides multiple instances support. You can create more instances" + elog "by symlinking the pdns init script to another name." + elog + elog "The name must be in the format pdns. and PowerDNS will use the" + elog "/etc/powerdns/pdns-.conf configuration file instead of the default." + + local old + for old in ${REPLACING_VERSIONS}; do + ver_test ${old} -lt 3.2 || continue + + echo + ewarn "To fix a security bug (bug #458018) had the following" + ewarn "files/directories the world-readable bit removed (if set):" + ewarn " ${EPREFIX}/etc/powerdns" + ewarn " ${EPREFIX}/etc/powerdns/pdns.conf" + ewarn "Check if this is correct for your setup" + ewarn "This is a one-time change and will not happen on subsequent updates." + chmod o-rwx "${EPREFIX}"/etc/powerdns/{,pdns.conf} + + break + done + + if use postgres; then + for old in ${REPLACING_VERSIONS}; do + ver_test ${old} -lt 4.1.11-r1 || continue + + echo + ewarn "PowerDNS 4.1.11 contains a security fix for the PostgreSQL backend." + ewarn "This security fix needs to be applied manually to the database schema." + ewarn "Please refer to the official security advisory for more information:" + ewarn + ewarn " https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-06.html" + + break + done + fi +} -- cgit v1.2.3-65-gdbad