Hello community,
here is the log from the commit of package bind for openSUSE:Factory checked in
at 2013-08-10 18:28:25
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/bind (Old)
and /work/SRC/openSUSE:Factory/.bind.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bind"
Changes:
--------
--- /work/SRC/openSUSE:Factory/bind/bind.changes 2013-07-24
23:30:40.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.bind.new/bind.changes 2013-08-10
18:28:30.000000000 +0200
@@ -1,0 +2,19 @@
+Wed Aug 7 15:19:10 UTC 2013 - m...@suse.com
+
+- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).
+
+-------------------------------------------------------------------
+Tue Aug 6 10:09:22 UTC 2013 - m...@suse.com
+
+- Improve pie_compile.diff (bnc#828874).
+- dnssec-checkds and dnssec-coverage need python-base.
+- disable rpath in libtool.
+
+-------------------------------------------------------------------
+Mon Aug 5 14:50:20 UTC 2013 - m...@suse.com
+
+- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
+ * Incorrect bounds checking on private type 'keydata' can lead
+ to a remotely triggerable REQUIRE failure.
+
+-------------------------------------------------------------------
Old:
----
bind-9.9.3-P1.tar.gz
bind-9.9.3-P1.tar.gz.asc
New:
----
bind-9.9.3-P2.tar.gz
bind-9.9.3-P2.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ bind.spec ++++++
--- /var/tmp/diff_new_pack.AtXEZD/_old 2013-08-10 18:28:32.000000000 +0200
+++ /var/tmp/diff_new_pack.AtXEZD/_new 2013-08-10 18:28:32.000000000 +0200
@@ -18,7 +18,7 @@
Name: bind
%define pkg_name bind
-%define pkg_vers 9.9.3-P1
+%define pkg_vers 9.9.3-P2
BuildRequires: krb5-devel
BuildRequires: libcap
BuildRequires: libcap-devel
@@ -28,11 +28,12 @@
BuildRequires: openldap2-devel
BuildRequires: openssl
BuildRequires: openssl-devel
+BuildRequires: python-base
BuildRequires: update-desktop-files
Summary: Domain Name System (DNS) Server (named)
License: ISC
Group: Productivity/Networking/DNS/Servers
-Version: 9.9.3P1
+Version: 9.9.3P2
Release: 0
Provides: bind8
Provides: bind9
@@ -263,6 +264,7 @@
--includedir=%{_includedir}/bind \
--mandir=%{_mandir} \
--infodir=%{_infodir} \
+ --disable-static \
--with-openssl \
--enable-threads \
--with-libtool \
@@ -272,9 +274,19 @@
"
cp -f -p config.guess config.sub contrib/idn/idnkit-1.0-src/
./configure ${CONFIGURE_OPTIONS}
+# disable rpath
+sed -i '
+ s|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g
+ s|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g
+' libtool
%{__make} %{?_smp_mflags}
pushd contrib/idn/idnkit-1.0-src
./configure ${CONFIGURE_OPTIONS}
+# disable rpath
+sed -i '
+ s|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g
+ s|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g
+' libtool
%{__make} %{?_smp_mflags}
popd
# running BIND system tests
@@ -667,6 +679,8 @@
%{_bindir}/runidn
%{_sbindir}/arpaname
%{_sbindir}/ddns-confgen
+%{_sbindir}/dnssec-checkds
+%{_sbindir}/dnssec-coverage
%{_sbindir}/dnssec-dsfromkey
%{_sbindir}/dnssec-keyfromlabel
%{_sbindir}/dnssec-keygen
@@ -692,6 +706,8 @@
%doc %{_mandir}/man1/nsupdate.1.gz
%doc %{_mandir}/man5/rndc.conf.5.gz
%doc %{_mandir}/man8/ddns-confgen.8.gz
+%doc %{_mandir}/man8/dnssec-checkds.8.gz
+%doc %{_mandir}/man8/dnssec-coverage.8.gz
%doc %{_mandir}/man8/dnssec-dsfromkey.8.gz
%doc %{_mandir}/man8/dnssec-keyfromlabel.8.gz
%doc %{_mandir}/man8/dnssec-keygen.8.gz
++++++ bind-9.9.3-P1.tar.gz -> bind-9.9.3-P2.tar.gz ++++++
/work/SRC/openSUSE:Factory/bind/bind-9.9.3-P1.tar.gz
/work/SRC/openSUSE:Factory/.bind.new/bind-9.9.3-P2.tar.gz differ: char 5, line 1
++++++ pid-path.diff ++++++
--- /var/tmp/diff_new_pack.AtXEZD/_old 2013-08-10 18:28:32.000000000 +0200
+++ /var/tmp/diff_new_pack.AtXEZD/_new 2013-08-10 18:28:32.000000000 +0200
@@ -1,8 +1,8 @@
Index: bin/named/include/named/globals.h
===================================================================
---- bin/named/include/named/globals.h.orig
-+++ bin/named/include/named/globals.h
-@@ -134,9 +134,9 @@ EXTERN const char * lwresd_g_defaultpid
+--- bin/named/include/named/globals.h.orig 2013-07-17 00:13:06.000000000
+0200
++++ bin/named/include/named/globals.h 2013-08-05 14:14:28.152275375 +0200
+@@ -139,9 +139,9 @@
"lwresd.pid");
#else
EXTERN const char * ns_g_defaultpidfile INIT(NS_LOCALSTATEDIR
@@ -16,8 +16,8 @@
EXTERN const char * ns_g_username INIT(NULL);
Index: contrib/nanny/nanny.pl
===================================================================
---- contrib/nanny/nanny.pl.orig
-+++ contrib/nanny/nanny.pl
+--- contrib/nanny/nanny.pl.orig 2013-07-17 00:13:06.000000000 +0200
++++ contrib/nanny/nanny.pl 2013-08-05 14:14:28.153275387 +0200
@@ -19,7 +19,7 @@
# A simple nanny to make sure named stays running.
++++++ pie_compile.diff ++++++
--- /var/tmp/diff_new_pack.AtXEZD/_old 2013-08-10 18:28:32.000000000 +0200
+++ /var/tmp/diff_new_pack.AtXEZD/_new 2013-08-10 18:28:32.000000000 +0200
@@ -1,25 +1,59 @@
-Index: bin/Makefile.in
+Index: bin/check/Makefile.in
===================================================================
---- bin/Makefile.in.orig
-+++ bin/Makefile.in
-@@ -23,4 +23,8 @@ SUBDIRS = named rndc dig dnssec tests to
- check confgen @PYTHON_TOOLS@ @PKCS11_TOOLS@
- TARGETS =
+--- bin/check/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/check/Makefile.in 2013-08-06 12:08:19.492457714 +0200
+@@ -57,8 +57,12 @@
+
+ MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
++
+ @BIND9_MAKE_RULES@
+
++LDFLAGS += -pie
++
+ named-checkconf.@O@: named-checkconf.c
+ ${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
+ -DVERSION=\"${VERSION}\" \
+Index: bin/confgen/Makefile.in
+===================================================================
+--- bin/confgen/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/confgen/Makefile.in 2013-08-06 12:08:19.492457714 +0200
+@@ -64,8 +64,12 @@
+
+ UOBJS = unix/os.@O@
+
++EXT_CFLAGS = -fPIE -static
++
+ @BIND9_MAKE_RULES@
+
++LDFLAGS += -pie
++
+ rndc-confgen.@O@: rndc-confgen.c
+ ${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
+ -DRNDC_KEYFILE=\"${sysconfdir}/rndc.key\" \
+Index: bin/confgen/unix/Makefile.in
+===================================================================
+--- bin/confgen/unix/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/confgen/unix/Makefile.in 2013-08-06 12:08:19.492457714 +0200
+@@ -32,4 +32,8 @@
+
+ TARGETS = ${OBJS}
+
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
+
+LDFLAGS += -pie
Index: bin/dig/Makefile.in
===================================================================
---- bin/dig/Makefile.in.orig
-+++ bin/dig/Makefile.in
-@@ -67,8 +67,12 @@ HTMLPAGES = dig.html host.html nslookup.
+--- bin/dig/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/dig/Makefile.in 2013-08-06 12:08:19.492457714 +0200
+@@ -69,8 +69,12 @@
MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
@@ -30,13 +64,13 @@
${FINALBUILDCMD}
Index: bin/dnssec/Makefile.in
===================================================================
---- bin/dnssec/Makefile.in.orig
-+++ bin/dnssec/Makefile.in
-@@ -64,8 +64,12 @@ HTMLPAGES = dnssec-dsfromkey.html dnssec
+--- bin/dnssec/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/dnssec/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -64,8 +64,12 @@
MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
@@ -45,99 +79,128 @@
dnssec-dsfromkey@EXEEXT@: dnssec-dsfromkey.@O@ ${OBJS} ${DEPLIBS}
export BASEOBJS="dnssec-dsfromkey.@O@ ${OBJS}"; \
${FINALBUILDCMD}
-Index: bin/nsupdate/Makefile.in
+Index: bin/Makefile.in
===================================================================
---- bin/nsupdate/Makefile.in.orig
-+++ bin/nsupdate/Makefile.in
-@@ -64,8 +64,12 @@ HTMLPAGES = nsupdate.html
-
- MANOBJS = ${MANPAGES} ${HTMLPAGES}
+--- bin/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -23,4 +23,8 @@
+ check confgen @PYTHON_TOOLS@ @PKCS11_TOOLS@
+ TARGETS =
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
-
-+LDFLAGS += -pie
+
- nsupdate.@O@: nsupdate.c
- ${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
- -DSESSION_KEYFILE=\"${localstatedir}/run/named/session.key\" \
-Index: bin/rndc/Makefile.in
++LDFLAGS += -pie
+Index: bin/named/Makefile.in
===================================================================
---- bin/rndc/Makefile.in.orig
-+++ bin/rndc/Makefile.in
-@@ -59,8 +59,12 @@ HTMLPAGES = rndc.html rndc.conf.html
+--- bin/named/Makefile.in.orig 2013-08-06 12:08:17.653432490 +0200
++++ bin/named/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -115,8 +115,12 @@
MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
+LDFLAGS += -pie
+
- rndc.@O@: rndc.c
+ main.@O@: main.c
${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
-DVERSION=\"${VERSION}\" \
-Index: bin/check/Makefile.in
+Index: bin/named/unix/Makefile.in
===================================================================
---- bin/check/Makefile.in.orig
-+++ bin/check/Makefile.in
-@@ -57,8 +57,12 @@ HTMLPAGES = named-checkconf.html named-c
+--- bin/named/unix/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/named/unix/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -34,4 +34,6 @@
+
+ TARGETS = ${OBJS}
+
++EXT_CFLAGS = -fPIE -static
++
+ @BIND9_MAKE_RULES@
+Index: bin/nsupdate/Makefile.in
+===================================================================
+--- bin/nsupdate/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/nsupdate/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -66,8 +66,12 @@
MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
+LDFLAGS += -pie
+
- named-checkconf.@O@: named-checkconf.c
+ nsupdate.@O@: nsupdate.c
${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
- -DVERSION=\"${VERSION}\" \
-Index: bin/named/Makefile.in
+ -DSESSION_KEYFILE=\"${localstatedir}/run/named/session.key\" \
+Index: bin/rndc/Makefile.in
===================================================================
---- bin/named/Makefile.in.orig
-+++ bin/named/Makefile.in
-@@ -109,8 +109,12 @@ HTMLPAGES = named.html lwresd.html named
+--- bin/rndc/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/rndc/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -59,8 +59,12 @@
MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
+LDFLAGS += -pie
+
- main.@O@: main.c
+ rndc.@O@: rndc.c
${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
-DVERSION=\"${VERSION}\" \
-Index: bin/named/unix/Makefile.in
+Index: bin/tools/Makefile.in
===================================================================
---- bin/named/unix/Makefile.in.orig
-+++ bin/named/unix/Makefile.in
-@@ -34,4 +34,6 @@ SRCS = os.c dlz_dlopen_driver.c
-
- TARGETS = ${OBJS}
+--- bin/tools/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ bin/tools/Makefile.in 2013-08-06 12:08:19.493457729 +0200
+@@ -53,8 +53,12 @@
+ genrandom.html isc-hmac-fixup.html
+ MANOBJS = ${MANPAGES} ${HTMLPAGES}
-+EXT_CFLAGS = -fPIE
++EXT_CFLAGS = -fPIE -static
+
@BIND9_MAKE_RULES@
-Index: bin/confgen/Makefile.in
+
++LDFLAGS += -pie
++
+ arpaname@EXEEXT@: arpaname.@O@ ${ISCDEPLIBS} ${DNSDEPLIBS}
+ ${LIBTOOL_MODE_LINK} ${PURIFY} ${CC} ${CFLAGS} ${LDFLAGS} -o $@
arpaname.@O@ \
+ ${ISCLIBS} ${LIBS}
+Index: contrib/idn/idnkit-1.0-src/tools/idnconv/Makefile.in
===================================================================
---- bin/confgen/Makefile.in.orig
-+++ bin/confgen/Makefile.in
-@@ -64,8 +64,12 @@ MANOBJS = ${MANPAGES} ${HTMLPAGES}
+--- contrib/idn/idnkit-1.0-src/tools/idnconv/Makefile.in.orig 2013-07-17
00:13:06.000000000 +0200
++++ contrib/idn/idnkit-1.0-src/tools/idnconv/Makefile.in 2013-08-06
12:08:19.493457729 +0200
+@@ -68,8 +68,8 @@
+ INCS = -I$(srcdir) -I$(srcdir)/../../include -I../../include $(ICONVINC)
+ DEFS =
- UOBJS = unix/os.@O@
+-CFLAGS = $(INCS) $(DEFS) @CPPFLAGS@ @CFLAGS@
+-LDFLAGS = @LDFLAGS@
++CFLAGS = $(INCS) $(DEFS) @CPPFLAGS@ @CFLAGS@ -fPIE
++LDFLAGS = @LDFLAGS@ -pie
-+EXT_CFLAGS = -fPIE
-+
- @BIND9_MAKE_RULES@
+ SRCS = idnconv.c util.c selectiveencode.c
+ OBJS = idnconv.o util.o selectiveencode.o
+Index: contrib/zkt/Makefile.in
+===================================================================
+--- contrib/zkt/Makefile.in.orig 2013-07-17 00:13:06.000000000 +0200
++++ contrib/zkt/Makefile.in 2013-08-06 12:08:19.494457743 +0200
+@@ -13,11 +13,11 @@
+ OPTIM = # -O3 -DNDEBUG
-+LDFLAGS += -pie
-+
- rndc-confgen.@O@: rndc-confgen.c
- ${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} \
- -DRNDC_KEYFILE=\"${sysconfdir}/rndc.key\" \
+ #CFLAGS ?= @CFLAGS@ @DEFS@ -I@top_srcdir@
+-CFLAGS += -g @DEFS@ -I@top_srcdir@
++CFLAGS += -g @DEFS@ -I@top_srcdir@ -fPIE
+ CFLAGS += -Wall #-DDBG
+ CFLAGS += -Wmissing-prototypes
+ CFLAGS += $(PROFILE) $(OPTIM)
+-LDFLAGS += $(PROFILE)
++LDFLAGS += $(PROFILE) -fPIE -pie
+ LIBS = @LIBS@
+
+ PROJECT = @PACKAGE_TARNAME@
++++++ rpz2+rl-9.9.3-P1.patch ++++++
++++ 1147 lines (skipped)
++++ between /work/SRC/openSUSE:Factory/bind/rpz2+rl-9.9.3-P1.patch
++++ and /work/SRC/openSUSE:Factory/.bind.new/rpz2+rl-9.9.3-P1.patch
++++++ vendor-files.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/vendor-files/init/named new/vendor-files/init/named
--- old/vendor-files/init/named 2012-01-02 18:05:02.000000000 +0100
+++ new/vendor-files/init/named 2013-08-07 17:19:06.000000000 +0200
@@ -122,9 +122,7 @@
function warnMessage()
{
- tput bold
echo -en "\nWarning: "
- tput sgr0
echo -e "$1 "
}
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
