CVS commit: pkgsrc/net/powerdns-recursor

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Nov 30 12:57:42 UTC 2018

Modified Files:
        pkgsrc/net/powerdns-recursor: Makefile distinfo

Log Message:
powerdns-recursor: updated to 4.1.8

Recursor 4.1.8
Crafted query can cause a denial of service (CVE-2018-16855)

Recursor 4.1.7
Revert ‘Keep the EDNS status of a server on FormErr with EDNS’
Refuse queries for all meta-types

Recursor 4.1.6
Revert “rec: Authority records in AA=1 CNAME answer are authoritative”.

Recursor 4.1.5

PowerDNS Security Advisory 2018-04 (CVE-2018-10851)
PowerDNS Security Advisory 2018-06 (CVE-2018-14626)
PowerDNS Security Advisory 2018-07 (CVE-2018-14644)

Improvements
Add pdnslog to lua configuration scripts (Chris Hofstaedtler)
Fix compilation with libressl 2.7.0+
Export outgoing ECS value and server ID in protobuf (if any)
Switch to devtoolset 7 for el6
Allow the signature inception to be off by a number of seconds (Kees Monshouwer)

Bug Fixes
Crafted answer can cause a denial of service (CVE-2018-10851)
Packet cache pollution via crafted query (CVE-2018-14626)
Crafted query for meta-types can cause a denial of service (CVE-2018-14644)
Delay the creation of rpz threads until we have dropped privileges
Cleanup the netmask trees used for the ecs index on removals
Make sure that the ecs scope from the auth is < to the source
Authority records in aa=1 cname answer are authoritative
Avoid a memory leak in catch-all exception handler
Don’t require authoritative answers for forward-recurse zones
Release memory in case of error in the openssl ecdsa constructor
Convert a few uses to toLogString to print DNSName’s that may be empty in a safer manner
Avoid a crash on DEC Alpha systems
Clear all caches on (N)TA changes


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/net/powerdns-recursor/Makefile
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/powerdns-recursor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/powerdns-recursor/Makefile
diff -u pkgsrc/net/powerdns-recursor/Makefile:1.30 pkgsrc/net/powerdns-recursor/Makefile:1.31
--- pkgsrc/net/powerdns-recursor/Makefile:1.30  Tue Sep  4 10:22:38 2018
+++ pkgsrc/net/powerdns-recursor/Makefile       Fri Nov 30 12:57:41 2018
@@ -1,19 +1,19 @@
-# $NetBSD: Makefile,v 1.30 2018/09/04 10:22:38 fhajny Exp $
-#
+# $NetBSD: Makefile,v 1.31 2018/11/30 12:57:41 adam Exp $
 
-DISTNAME=              pdns-recursor-4.1.4
-CATEGORIES=            net
-MASTER_SITES=          http://downloads.powerdns.com/releases/
-EXTRACT_SUFX=          .tar.bz2
-
-MAINTAINER=            pkgsrc-users%NetBSD.org@localhost
-HOMEPAGE=              https://www.powerdns.com/
-COMMENT=               PowerDNS resolver/recursing nameserver
-LICENSE=               gnu-gpl-v2
+DISTNAME=      pdns-recursor-4.1.8
+CATEGORIES=    net
+MASTER_SITES=  http://downloads.powerdns.com/releases/
+EXTRACT_SUFX=  .tar.bz2
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://www.powerdns.com/
+COMMENT=       PowerDNS resolver/recursing nameserver
+LICENSE=       gnu-gpl-v2
 
-GNU_CONFIGURE=         yes
 USE_LANGUAGES=         c c++11
 USE_TOOLS+=            gmake pkg-config
+GNU_CONFIGURE=         yes
+CONFIGURE_ARGS+=       --without-net-snmp
 
 RCD_SCRIPTS+=          pdns_recursor
 

Index: pkgsrc/net/powerdns-recursor/distinfo
diff -u pkgsrc/net/powerdns-recursor/distinfo:1.26 pkgsrc/net/powerdns-recursor/distinfo:1.27
--- pkgsrc/net/powerdns-recursor/distinfo:1.26  Tue Sep  4 10:22:38 2018
+++ pkgsrc/net/powerdns-recursor/distinfo       Fri Nov 30 12:57:42 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.26 2018/09/04 10:22:38 fhajny Exp $
+$NetBSD: distinfo,v 1.27 2018/11/30 12:57:42 adam Exp $
 
-SHA1 (pdns-recursor-4.1.4.tar.bz2) = 8fd2a65f2869569b77516f858c34afc283fb5524
-RMD160 (pdns-recursor-4.1.4.tar.bz2) = cf3dead4bbea3c45bf915e33188e1b35a6c530b0
-SHA512 (pdns-recursor-4.1.4.tar.bz2) = 1904685dfdcd69d4b85c4c70559d51cc8ef288551ffd8f93a96108c3aca4e46ec3950f93840e4bd39da00c63129033b5a541beb68d1e924d477b5b0abbf1d00c
-Size (pdns-recursor-4.1.4.tar.bz2) = 1224360 bytes
+SHA1 (pdns-recursor-4.1.8.tar.bz2) = a78c1a7966cab9e2b9032080a7e28227a32a1b3b
+RMD160 (pdns-recursor-4.1.8.tar.bz2) = d98b6881a76fe2caecb8c997996b580779a470af
+SHA512 (pdns-recursor-4.1.8.tar.bz2) = 5c09b8ce3f2f3ed6bb350cbd20e6cad4b66f9db85677605d57eca67187c05ddde5071af246a7398e2821c9ed2e5ff101d2b4928366b3ddf12013020fa9b74e61
+Size (pdns-recursor-4.1.8.tar.bz2) = 1237750 bytes
 SHA1 (patch-configure) = 5c91dcbc43a51bf30af200e234f18eb9b7458e6f
 SHA1 (patch-dns.hh) = 7e9c1b10a066a605b74ebdbee2d894aed50f6c68
 SHA1 (patch-ext_json11_json11.cpp) = 2de8ea8b51556bd3e3c1a88f681697eff239ab1a