linux/poky.git/meta/recipes-connectivity/bind, branch styhead

bind: Fix build with the `httpstats` package config enabled

2024-09-12T15:15:09+00:00

------C65ED3E1A5DE826CA595746785F6AF6F To: openembedded-core@lists.openembedded.org CC: Alban Bedel Subject: [PATCH] bind: Fix build with the `httpstats` package config enabled Date: Wed, 11 Sep 2024 08:26:47 +0200 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain MIME-Version: 1.0 When the `httpstats` package config is enabled configure fails with the error: > configure: error: Specifying libxml2 installation path is not > supported, adjust PKG_CONFIG_PATH instead Drop the explicit path from `--with-libxml2` to solve this issue. (From OE-Core rev: 9b076fa51f5e6fd685066fb817c47239960778e6) Signed-off-by: Alban Bedel Signed-off-by: Richard Purdie

bind: upgrade 9.20.0 -> 9.20.1

2024-08-28T08:14:26+00:00

Release Notes: https://downloads.isc.org/isc/bind9/9.20.1/doc/arm/html/notes.html#notes-for-bind-9-20-1 (From OE-Core rev: 6808ed32cabb00ffb076cb80cf37ad7815815d25) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

bind: upgrade 9.18.27 -> 9.20.0

2024-08-03T06:47:36+00:00

bind now depends on liburcu, so add it to DEPENDS (this was why the AUH runs were failing at do_compile). Changelog: https://gitlab.isc.org/isc-projects/bind9/-/blob/main/doc/arm/changelog.rst (From OE-Core rev: 6a450da130e78fd45931c67a9e8255d611ae8711) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

native/nativesdk: Stop overriding unprefixed *FLAGS variables

2024-07-01T12:58:08+00:00

We're currently encouraging an "arms race" with the FLAGS variables since a recipe might want to set a specific flag for all variants but to do so, += won't work due to the assignment in the native/nativesdk class files. This means recipes are using append. Since the default variables are constructed out of TARGET_XXX variables and we redefine these, there is no need to re-define the un-prefixed variables. If we drop that, the += appends and similar work and recipes don't have to resort to append. Change the classes and cleanup a number of recipes to adapt to the change. This change will result in some flags appearing to some native/nativesdk variants but that is probably what was originally expected anyway. (From OE-Core rev: a157b2f9d93428ca21265cc860a3b58b3698b3aa) Signed-off-by: Richard Purdie

bind: upgrade 9.18.26 -> 9.18.27

2024-05-28T08:38:23+00:00

Changelog: ========= * Skip to next RRSIG if signature has expired or is in the future rather than failing immediately. * Implement signature jitter for dnssec-policy. (From OE-Core rev: ccf45d3cbd06abd48ca2c82a790587457021e6e3) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

recipes: Update WORKDIR references to UNPACKDIR

2024-05-02T14:15:51+00:00

Since we want to be able to stop unpacking to WORKDIR, correct the WORKDIR references in recipe do_compile/do_install tasks to use UNPACKDIR in the appropraite places instead. (From OE-Core rev: d73595df69667fe9d12ecd407b77a0b8dae2109c) Signed-off-by: Richard Purdie

bind: upgrade 9.18.25 -> 9.18.26

2024-04-25T09:06:02+00:00

Changelog: ============ - Add RESOLVER.ARPA to the built in empty zones. - dig/mdig +ednsflags= did not re-enable EDNS if it had been disabled. - Some invalid ISO 8601 durations were accepted erroneously. - Don't return static-stub synthesised NS RRset. - Fix bug in Depends (keymgr_dep) function. - Support for the RESINFO record type has been added. - Cleaned up several minor bugs in the RBTDB dbiterator implementation. - Added missing dns_rdataset_disassociate calls in validator.c:findnsec3proofs. - Fix incorrectly reported errors when running tests with `make test` on platforms with older pytest. - Optimize slabheader placement, so the infrastructure records are put in the beginning of the slabheader linked list. - Improve ARM parental-agents definition. - Fix the DNS_GETDB_STALEFIRST flag, which was defined incorrectly in lib/ns/query.c. - Update ZSK minimum lifetime documentation in ARM, also depends on signing delay. - Add workaround to enforce dynamic linker to pull jemalloc earlier than libc to ensure all memory allocations are done via jemalloc. - Changes to "listen-on" statements were ignored on reconfiguration unless the port or interface address was changed, making it impossible to change a related listener transport type. Thanks to Thomas Amgarten. - Expose the TCP client count in statistics channel. - Fix a possible crash in 'dig +nssearch +nofail' and 'host -C' commands when one of the name servers returns SERVFAIL. - When dnssec-policy is in effect the DNSKEY's TTLs in the zone where not being updated to match the policy. This lead to failures when DNSKEYs where updated as the TTLs mismatched. (From OE-Core rev: 9dc097f240c5ab7703179f480f538be8e21defce) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

bind: upgrade 9.18.24 -> 9.18.25

2024-04-16T07:07:02+00:00

Changelog: ============ -Create the pruning task in the dns_cache_flush(), so the cache pruning still works after the flush. -Improve the TTL-based cleaning by removing the expired headers from the heap, so they don't block the next cleaning round and clean more than a single item for each new addition to the RBTDB. -Revert change 6319 and decrease lock contention during RBTDB tree pruning by not cleaning up nodes recursively within a single prune_tree() call. -Address use after free in expire_lru_headers. (From OE-Core rev: 17cecd0d9d0d734d408701d861692ca5987f4ad9) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

bind: Upgrade 9.18.21 -> 9.18.24

2024-02-24T16:10:23+00:00

Changelog: ========= 9.18.24: - Fix case insensitive setting for isc_ht hashtable. [GL #4568] 9.18.23: - Specific DNS answers could cause a denial-of-service condition due to DNS validation taking a long time. (CVE-2023-50387) [GL #4424] - Change 6315 inadvertently introduced regressions that could cause named to crash. [GL #4234] - Under some circumstances, the DoT code in client mode could process more than one message at a time when that was not expected. That has been fixed. [GL #4487] 9.18.22: - Limit isc_task_send() overhead for RBTDB tree pruning. [GL #4383] - Restore DNS64 state when handling a serve-stale timeout. (CVE-2023-5679) [GL #4334] - Specific queries could trigger an assertion check with nxdomain-redirect enabled. (CVE-2023-5517) [GL #4281] - Speed up parsing of DNS messages with many different names. (CVE-2023-4408) [GL #4234] - Address race conditions in dns_tsigkey_find(). [GL #4182] - Conversion from NSEC3 signed to NSEC signed could temporarily put the zone into a state where it was treated as unsigned until the NSEC chain was built. Additionally conversion from one set of NSEC3 parameters to another could also temporarily put the zone into a state where it was treated as unsigned until the new NSEC3 chain was built. [GL #1794] [GL #4495] - Memory leak in zone.c:sign_zone. When named signed a zone it could leak dst_keys due to a misplaced 'continue'. [GL #4488] - Log more details about the cause of "not exact" errors. [GL #4500] - The wrong time was being used to determine what RRSIGs where to be generated when dnssec-policy was in use. [GL #4494] - The "trust-anchor-telemetry" statement is no longer marked as experimental. This silences a relevant log message that was emitted even when the feature was explicitly disabled. [GL #4497] - Fix statistics export to use full 64 bit signed numbers instead of truncating values to unsigned 32 bits. [GL #4467] - NetBSD has added 'hmac' to libc which collides with our use of 'hmac'. [GL #4478] (From OE-Core rev: d7f31aba343948dbaadafc8c0c66f78e6ffb46e3) Signed-off-by: Soumya Sambu Signed-off-by: Richard Purdie

bind: upgrade 9.18.20 -> 9.18.21

2024-01-19T12:21:23+00:00

bind-ensure-searching-for-json-headers-searches-sysr.patch refreshed for 9.18.21 Changelog: ========== -Improve LRU cleaning behaviour. -The "resolver-nonbackoff-tries" and "resolver-retry-interval" options are deprecated; a warning will be logged if they are used. -BIND might sometimes crash after startup or re-configuration when one 'tls' entry is used multiple times to connect to remote servers due to initialisation attempts from contexts of multiple threads. That has been fixed. -Dig +yaml will now report "no servers could be reached" also for UDP setup failure when no other servers or tries are left. -Recognize escapes when reading the public key from file. -Dig +yaml will now report "no servers could be reached" on TCP connection failure as well as for UDP timeouts. -Deprecate AES-based DNS cookies. (From OE-Core rev: b750d54622a0fa0a35d83ddc59f07661e903360b) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie