diff options
author | Beniamin Sandu <beniaminsandu@gmail.com> | 2024-04-05 16:06:46 +0100 |
---|---|---|
committer | Khem Raj <raj.khem@gmail.com> | 2024-04-05 10:21:15 -0700 |
commit | c581a72619dde503344173ed8e807d712c674be1 (patch) | |
tree | de9531ea475dd53f41ec46d735176d395d2f3011 /meta-networking/recipes-support/unbound/unbound_1.19.3.bb | |
parent | 6c9a01f67003760ca72eedd510bac1f9f5eab8f3 (diff) | |
download | meta-openembedded-c581a72619dde503344173ed8e807d712c674be1.tar.gz |
unbound: upgrade 1.19.1 -> 1.19.3
Includes security fixes for:
CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop')
Full release notes:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-networking/recipes-support/unbound/unbound_1.19.3.bb')
-rw-r--r-- | meta-networking/recipes-support/unbound/unbound_1.19.3.bb | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/unbound/unbound_1.19.3.bb b/meta-networking/recipes-support/unbound/unbound_1.19.3.bb new file mode 100644 index 000000000..ffdc78e9d --- /dev/null +++ b/meta-networking/recipes-support/unbound/unbound_1.19.3.bb | |||
@@ -0,0 +1,46 @@ | |||
1 | SUMMARY = "Unbound is a validating, recursive, and caching DNS resolver" | ||
2 | DESCRIPTION = "Unbound's design is a set of modular components which incorporate \ | ||
3 | features including enhanced security (DNSSEC) validation, Internet Protocol \ | ||
4 | Version 6 (IPv6), and a client resolver library API as an integral part of the \ | ||
5 | architecture" | ||
6 | |||
7 | HOMEPAGE = "https://www.unbound.net/" | ||
8 | SECTION = "net" | ||
9 | LICENSE = "BSD-3-Clause" | ||
10 | LIC_FILES_CHKSUM = "file://LICENSE;md5=5308494bc0590c0cb036afd781d78f06" | ||
11 | |||
12 | SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=branch-1.19.3" | ||
13 | SRCREV = "48b6c60a24e9a5d6d369a7a37c9fe2a767f26abd" | ||
14 | |||
15 | inherit autotools pkgconfig systemd update-rc.d | ||
16 | |||
17 | DEPENDS = "openssl libtool-native bison-native expat" | ||
18 | RDEPENDS:${PN} = "bash openssl-bin daemonize" | ||
19 | |||
20 | S = "${WORKDIR}/git" | ||
21 | |||
22 | EXTRA_OECONF = "--with-libexpat=${STAGING_EXECPREFIXDIR} \ | ||
23 | --with-ssl=${STAGING_EXECPREFIXDIR} \ | ||
24 | --enable-largefile" | ||
25 | |||
26 | PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" | ||
27 | PACKAGECONFIG[dnscrypt] = "--enable-dnscrypt, --disable-dnscrypt, libsodium" | ||
28 | PACKAGECONFIG[systemd] = "--enable-systemd,--disable-systemd,systemd" | ||
29 | PACKAGECONFIG[libevent] = "--with-libevent=${STAGING_EXECPREFIXDIR},,libevent" | ||
30 | |||
31 | do_configure:append() { | ||
32 | sed -i -e 's#${RECIPE_SYSROOT}##g' ${B}/config.h | ||
33 | } | ||
34 | |||
35 | do_install:append() { | ||
36 | install -d ${D}${systemd_unitdir}/system | ||
37 | install -m 0644 ${B}/contrib/unbound.service ${D}${systemd_unitdir}/system | ||
38 | |||
39 | install -d ${D}${sysconfdir}/init.d | ||
40 | install -m 0755 ${S}/contrib/unbound.init_yocto ${D}${sysconfdir}/init.d/unbound | ||
41 | } | ||
42 | |||
43 | SYSTEMD_SERVICE:${PN} = "${BPN}.service" | ||
44 | |||
45 | INITSCRIPT_NAME = "unbound" | ||
46 | INITSCRIPT_PARAMS = "defaults" | ||