JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

knot-resolver: 4.0.0 -> 4.1.0 (security)

Browse Source 
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
This commit is contained in:
Vladimír Čunát 2019-07-10 16:52:57 +02:00
parent 9efdd2e434
commit f15625a6c0
No known key found for this signature in database
GPG Key ID: E747DF1F9575A3AA
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/servers/dns/knot-resolver/default.nix
View File

@ -23,11 +23,11 @@ exportLuaPathsFor = luaPkgs: ''
unwrapped = stdenv.mkDerivation rec {
name = "knot-resolver-${version}";
version = "4.0.0";
version = "4.1.0";
src = fetchurl {
url = "https://secure.nic.cz/files/knot-resolver/${name}.tar.xz";
sha256 = "37161d931e64535ce38c33b9635f06a43cd1541945bf2c79a55e37f230de1631";
sha256 = "2fe470f9bb1007667cdd448f758087244b7195a0234c2b100a9beeed0a2d3e68";
};
outputs = [ "out" "dev" ];
@ -61,7 +61,8 @@ unwrapped = stdenv.mkDerivation rec {
rm "$out"/lib/libkres.a
'';
doInstallCheck = stdenv.hostPlatform == stdenv.buildPlatform;
# aarch64: see https://github.com/wahern/cqueues/issues/223
doInstallCheck = with stdenv; hostPlatform == buildPlatform && !hostPlatform.isAarch64;
installCheckInputs = [ cmocka which cacert ];
installCheckPhase = ''
meson test --print-errorlogs
@ -71,8 +72,7 @@ unwrapped = stdenv.mkDerivation rec {
description = "Caching validating DNS resolver, from .cz domain registry";
homepage = https://knot-resolver.cz;
license = licenses.gpl3Plus;
# Platforms using negative pointers for stack won't work ATM due to LuaJIT impl.
platforms = filter (p: p != "aarch64-linux") platforms.unix;
platforms = platforms.unix;
maintainers = [ maintainers.vcunat /* upstream developer */ ];
};
};