https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
luaPackages replaced by generated ones:
- bit32
- compat53
- cqueues
- luacyrussasl -> cyrussasl (luarocks name)
- luaexpat
- luadbi -> luadbi front-end module + separate backend modules
luadbi-{mysql,postgresql,sqlite3}
- luafilesystem
- luaossl
- luasec
- luasocket
- luastdlib -> stdlib (luarocks name)
- lrexlib -> lrexlib-pcre (we already have lrexlib-gnu and
lrexlib-posix, lrexlib-pcre however appears to be the variant used in
mudlet, which is the only current dep in nixpkgs)
- luasqlite -> luasql-sqlite3 (luarocks name)
- lfs -> luafilesytem (we literally had two manually written
luafilesystem expressions, under different names)
Changes and additions to overrides to generated luarocks packgaes,
including:
- busted: Install bash completions along with the zsh ones
- cqueues:
- Perform minor surgery on the rockspec to allow using a single
rockspec to build for all supported Lua versions
- Add a patch by @vcunat to work around a build issue
- luuid: Wrote a tiny patch to allow for Lua 5.1/Luajit compatibility
- General changes:
- Sorted the packages
- Attempted to make the formatting consistent
- Preferenced `.override` instead of `.overrideAttrs` wherever
possible
Minor changes to other packages to adjust for the Lua package changes:
- luakit expression simplified
- prosody expression simplified; but users will now need to specify the
luadbi backend module they intend to use in withExtraLibs
- knot-resolver inputs correctd
- mudlet inputs corrected (although this package was and should still be
broken)
The patch didn't apply since 9.12 -> 9.14 (26026c3e1a).
I'll hope it's not needed anymore (and let Borg verify that).
It was reportedly just a configure-time error: e4602677.
One bugfix patch is included - merged upstream but not released yet.
knot-resolver wrapper would need to add binaryheap explicitly,
so it's migrated to the automatic LUA path discovery instead.
add libressl, drop patch
neither openssl 1.0 (headers not found) nor openssl 1.1 (configuration
failed when trying to test constants) work, but libressl does
* substitute(): --subst-var was silently coercing to "" if the variable does not exist.
* libffi: simplify using `checkInputs`
* pythonPackges.hypothesis, pythonPackages.pytest: simpify dependency cycle fix
* utillinux: 2.32 -> 2.32.1
https://lkml.org/lkml/2018/7/16/532
* busybox: 1.29.0 -> 1.29.1
* bind: 9.12.1-P2 -> 9.12.2
https://ftp.isc.org/isc/bind9/9.12.2/RELEASE-NOTES-bind-9.12.2.html
* curl: 7.60.0 -> 7.61.0
* gvfs: make tests run, but disable
* ilmbase: disable tests on i686. Spooky!
* mdds: fix tests
* git: disable checks as tests are run in installcheck
* ruby: disable tests
* libcommuni: disable checks as tests are run in installcheck
* librdf: make tests run, but disable
* neon, neon_0_29: make tests run, but disable
* pciutils: 3.6.0 -> 3.6.1
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/pciutils/versions.
* mesa: more include fixes
mostly from void-linux (thanks!)
* npth: 1.5 -> 1.6
minor bump
* boost167: Add lockfree next_prior patch
* stdenv: cleanup darwin bootstrapping
Also gets rid of the full python and some of it's dependencies in the
stdenv build closure.
* Revert "pciutils: use standardized equivalent for canonicalize_file_name"
This reverts commit f8db20fb3a.
Patching should no longer be needed with 3.6.1.
* binutils-wrapper: Try to avoid adding unnecessary -L flags
(cherry picked from commit f3758258b8895508475caf83e92bfb236a27ceb9)
Signed-off-by: Domen Kožar <domen@dev.si>
* libffi: don't check on darwin
libffi usages in stdenv broken darwin. We need to disable doCheck for that case.
* "rm $out/share/icons/hicolor/icon-theme.cache" -> hicolor-icon-theme setup-hook
* python.pkgs.pytest: setupHook to prevent creation of .pytest-cache folder, fixes#40273
When `py.test` was run with a folder as argument, it would not only
search for tests in that folder, but also create a .pytest-cache folder.
Not only is this state we don't want, but it was also causing
collisions.
* parity-ui: fix after merge
* python.pkgs.pytest-flake8: disable test, fix build
* Revert "meson: 0.46.1 -> 0.47.0"
With meson 0.47.0 (or 0.47.1, or git)
things are very wrong re:rpath handling
resulting in at best missing libs but
even corrupt binaries :(.
When we run patchelf it masks the problem
by removing obviously busted paths.
Which is probably why this wasn't noticed immediately.
Unfortunately the binary already
has a long series of paths scribbled
in a space intended for a much smaller string;
in my testing it was something like
lengths were 67 with 300+ written to it.
I think we've reported the relevant issues upstream,
but unfortunately it appears our patches
are what introduces the overwrite/corruption
(by no longer being correct in what they assume)
This doesn't look so bad to fix but it's
not something I can spend more time on
at the moment.
--
Interestingly the overwritten string data
(because it is scribbled past the bounds)
remains in the binary and is why we're suddenly
seeing unexpected references in various builds
-- notably this is is the reason we're
seeing the "extra-utils" breakage
that entirely crippled NixOS on master
(and probably on staging before?).
Fixes#43650.
This reverts commit 305ac4dade.
(cherry picked from commit 273d68eff8f7b6cd4ebed3718e5078a0f43cb55d)
Signed-off-by: Domen Kožar <domen@dev.si>
Since years I'm not maintaining anything of the list below other
than some updates when I needed them for some reason. Other people
is doing that maintenance on my behalf so I better take me out but
for very few packages. Finally!
* treewide: http -> https sources
This updates the source urls of all top-level packages from http to
https where possible.
* buildtorrent: fix url and tab -> spaces
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/nsd/versions.
These checks were done:
- built on NixOS
- /nix/store/cv3f36znw2zrckq1082wjf6j7vr5yzyg-nsd-4.1.22/bin/nsd passed the binary check.
- Warning: no invocation of /nix/store/cv3f36znw2zrckq1082wjf6j7vr5yzyg-nsd-4.1.22/bin/nsd-checkconf had a zero exit code or showed the expected version
- /nix/store/cv3f36znw2zrckq1082wjf6j7vr5yzyg-nsd-4.1.22/bin/nsd-checkzone passed the binary check.
- Warning: no invocation of /nix/store/cv3f36znw2zrckq1082wjf6j7vr5yzyg-nsd-4.1.22/bin/nsd-control had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/cv3f36znw2zrckq1082wjf6j7vr5yzyg-nsd-4.1.22/bin/nsd-control-setup had a zero exit code or showed the expected version
- 2 of 5 passed binary check by having a zero exit code.
- 0 of 5 passed binary check by having the new version present in output.
- found 4.1.22 with grep in /nix/store/cv3f36znw2zrckq1082wjf6j7vr5yzyg-nsd-4.1.22
- directory tree listing: https://gist.github.com/ec1aa618f9ae7b813590da95020758aa
- du listing: https://gist.github.com/8277d4bf5e8944c2b6396fb624e08250
Additionally:
+ split native and other build inputs
+ alphabetically order dependencies
+ explicitly disable libjson support (the configure script looks for it in
/usr, /usr/local, and /opt/local)
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/powerdns/versions.
These checks were done:
- built on NixOS
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/pdns_control passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/pdnsutil passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/zone2sql passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/zone2json passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnsgram passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnsreplay passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnsscan passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnsscope passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnswasher passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dumresp passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/pdns_notify passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/nproxy passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/nsec3dig passed the binary check.
- Warning: no invocation of /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/saxfr had a zero exit code or showed the expected version
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/stubquery passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/ixplore passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/sdig passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/calidns passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnsbulktest passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnstcpbench passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/zone2ldap passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/dnspcap2protobuf passed the binary check.
- /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3/bin/pdns_server passed the binary check.
- 22 of 23 passed binary check by having a zero exit code.
- 20 of 23 passed binary check by having the new version present in output.
- found 4.1.3 with grep in /nix/store/yacb209ny3gi3p0bg2n4hamp39b9dqxi-powerdns-4.1.3
- directory tree listing: https://gist.github.com/4e2a99ca3fe4bbb630b7cbd39e96db37
- du listing: https://gist.github.com/9722c4085ca5ddbe661816db86a84a6f
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/bind/versions.
These checks were done:
- built on NixOS
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/delv passed the binary check.
- Warning: no invocation of /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/arpaname had a zero exit code or showed the expected version
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/named-rrchecker passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/mdig passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/ddns-confgen passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-cds passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-dsfromkey passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-importkey passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-keyfromlabel passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-keygen passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-revoke passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-settime passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-signzone passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/dnssec-verify passed the binary check.
- Warning: no invocation of /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/genrandom had a zero exit code or showed the expected version
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/named passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/named-checkconf passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/named-checkzone passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/named-compilezone passed the binary check.
- Warning: no invocation of /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/named-journalprint had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/nsec3hash had a zero exit code or showed the expected version
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/rndc passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/rndc-confgen passed the binary check.
- /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2/bin/tsig-keygen passed the binary check.
- 20 of 24 passed binary check by having a zero exit code.
- 14 of 24 passed binary check by having the new version present in output.
- found 9.12.1-P2 with grep in /nix/store/zxylanld5x7l9n2n24g70qj91n4kmj5x-bind-9.12.1-P2
- directory tree listing: https://gist.github.com/d95b236ef147c4c8ad6a99ca42db1acd
- du listing: https://gist.github.com/f6bcea6b6bdce7df3f66bbf02768bd20
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/nsd/versions.
These checks were done:
- built on NixOS
- /nix/store/vwidqdayh0l8rf5sjq37hr6ygdxrmkbb-nsd-4.1.21/bin/nsd passed the binary check.
- Warning: no invocation of /nix/store/vwidqdayh0l8rf5sjq37hr6ygdxrmkbb-nsd-4.1.21/bin/nsd-checkconf had a zero exit code or showed the expected version
- /nix/store/vwidqdayh0l8rf5sjq37hr6ygdxrmkbb-nsd-4.1.21/bin/nsd-checkzone passed the binary check.
- Warning: no invocation of /nix/store/vwidqdayh0l8rf5sjq37hr6ygdxrmkbb-nsd-4.1.21/bin/nsd-control had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/vwidqdayh0l8rf5sjq37hr6ygdxrmkbb-nsd-4.1.21/bin/nsd-control-setup had a zero exit code or showed the expected version
- 2 of 5 passed binary check by having a zero exit code.
- 0 of 5 passed binary check by having the new version present in output.
- found 4.1.21 with grep in /nix/store/vwidqdayh0l8rf5sjq37hr6ygdxrmkbb-nsd-4.1.21
- directory tree listing: https://gist.github.com/57f572db82ca8e038bcf1c970d13f10e
- du listing: https://gist.github.com/11c687e733f7222872d6e3733c5f9d0b
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/powerdns/versions.
These checks were done:
- built on NixOS
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdns_control -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdns_control --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdnsutil -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdnsutil --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdnsutil help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdnsutil --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/zone2sql --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/zone2sql --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/zone2json --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/zone2json --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsgram -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsgram --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsgram help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsgram --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsreplay -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsreplay --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsreplay help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsreplay --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscan -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscan --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscan help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscan --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscope -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscope --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscope help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsscope --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnswasher --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnswasher --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dumresp --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dumresp --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdns_notify --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdns_notify --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/nproxy -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/nproxy --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/nproxy --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/nsec3dig --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/nsec3dig --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/stubquery -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/stubquery --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/stubquery help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/stubquery --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/ixplore --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/ixplore --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/sdig --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/sdig --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/calidns -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/calidns --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/calidns --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsbulktest -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsbulktest --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnsbulktest --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnstcpbench -h’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnstcpbench --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnstcpbench --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/zone2ldap --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/zone2ldap --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnspcap2protobuf --help’ got 0 exit code
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/dnspcap2protobuf --version’ and found version 4.1.2
- ran ‘/nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2/bin/pdns_server --help’ got 0 exit code
- found 4.1.2 with grep in /nix/store/wc0f44gmgaxq2qh1w1x9k3i8z0z7i304-powerdns-4.1.2
- directory tree listing: https://gist.github.com/35d763a9dcfb4d88e41f300f06f27168
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/knot-dns/versions.
These checks were done:
- built on NixOS
- ran ‘/nix/store/p1k7d2y5aa4haxlkkn2jadviwvl5plcc-ipset-6.38/bin/ipset -h’ got 0 exit code
- ran ‘/nix/store/p1k7d2y5aa4haxlkkn2jadviwvl5plcc-ipset-6.38/bin/ipset --help’ got 0 exit code
- ran ‘/nix/store/p1k7d2y5aa4haxlkkn2jadviwvl5plcc-ipset-6.38/bin/ipset help’ got 0 exit code
- found 2.6.6 in filename of file in /nix/store/p1k7d2y5aa4haxlkkn2jadviwvl5plcc-ipset-6.38
- directory tree listing: https://gist.github.com/f62ed14efd30650e1e05f1af8d5c2af4
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/pdns-recursor/versions.
These checks were done:
- built on NixOS
- ran `/nix/store/x1l2ipjyj57g4h4zb8pnggs4if00zv4x-pdns-recursor-4.1.2/bin/rec_control --help` got 0 exit code
- ran `/nix/store/x1l2ipjyj57g4h4zb8pnggs4if00zv4x-pdns-recursor-4.1.2/bin/pdns_recursor --help` got 0 exit code
- ran `/nix/store/x1l2ipjyj57g4h4zb8pnggs4if00zv4x-pdns-recursor-4.1.2/bin/pdns_recursor --version` and found version 4.1.2
- ran `/nix/store/x1l2ipjyj57g4h4zb8pnggs4if00zv4x-pdns-recursor-4.1.2/bin/pdns_recursor --help` and found version 4.1.2
- found 4.1.2 with grep in /nix/store/x1l2ipjyj57g4h4zb8pnggs4if00zv4x-pdns-recursor-4.1.2
- directory tree listing: https://gist.github.com/78903ab083c7a33959374a77efcf439b
Semi-automatic update generated by https://github.com/ryantm/nix-update tools.
This update was made based on information from https://repology.org/metapackage/knot-resolver/versions.
These checks were done:
- built on NixOS
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -V` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --version` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` and found version 2.2.0
- found 2.2.0 with grep in /nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0
- directory tree listing: https://gist.github.com/3b59aaaf9f7d90b8de351b6eb712e2a5
Semi-automatic update generated by https://github.com/ryantm/nix-update tools. These checks were done:
- built on NixOS
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/delv help` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/delv -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-rrchecker -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-rrchecker --help` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-rrchecker -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-rrchecker -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-rrchecker --version` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-rrchecker --help` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/mdig -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/mdig -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/ddns-confgen -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-cds -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-dsfromkey -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-importkey -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-keyfromlabel -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-keygen -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-revoke -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-settime -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone --help` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone --version` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone -h` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-signzone --help` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify --help` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify --version` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify -h` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/dnssec-verify --help` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named -V` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-checkconf -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/named-checkzone -v` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/rndc -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/rndc -h` and found version 9.12.1
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/rndc-confgen -h` got 0 exit code
- ran `/nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1/bin/rndc-confgen -h` and found version 9.12.1
- found 9.12.1 with grep in /nix/store/9i6c9yx3p0gvhphd4ahj8pfcm0n78han-bind-9.12.1
- directory tree listing: https://gist.github.com/e9daefd05b7c96cd83a144018a3b6aaf
Semi-automatic update. These checks were performed:
- built on NixOS
- ran `/nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20/bin/nsd -h` got 0 exit code
- ran `/nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20/bin/nsd -v` and found version 4.1.20
- ran `/nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20/bin/nsd -h` and found version 4.1.20
- ran `/nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20/bin/nsd-checkzone -h` got 0 exit code
- ran `/nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20/bin/nsd-checkzone -h` and found version 4.1.20
- found 4.1.20 with grep in /nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20
- found 4.1.20 in filename of file in /nix/store/4za086gx5nlvf44i0syc2y6lprhh49kz-nsd-4.1.20
cc "@hrdinka"
* pgadmin: use https homepage
* msn-pecan: move homepage to github
google code is now unavailable
* pidgin-latex: use https for homepage
* pidgin-opensteamworks: use github for homepage
google code is unavailable
* putty: use https for homepage
* ponylang: use https for homepage
* picolisp: use https for homepage
* phonon: use https for homepage
* pugixml: use https for homepage
* pioneer: use https for homepage
* packer: use https for homepage
* pokerth: usee https for homepage
* procps-ng: use https for homepage
* pycaml: use https for homepage
* proot: move homepage to .github.io
* pius: use https for homepage
* pdfread: use https for homepage
* postgresql: use https for homepage
* ponysay: move homepage to new site
* prometheus: use https for homepage
* powerdns: use https for homepage
* pm-utils: use https for homepage
* patchelf: move homepage to https
* tesseract: move homepage to github
* quodlibet: move homepage from google code
* jbrout: move homepage from google code
* eiskaltdcpp: move homepage to github
* nodejs: use https to homepage
* nix: use https for homepage
* pdf2djvu: move homepage from google code
* game-music-emu: move homepage from google code
* vacuum: move homepae from google code
* pkgs: refactor needless quoting of homepage meta attribute
A lot of packages are needlessly quoting the homepage meta attribute
(about 1400, 22%), this commit refactors all of those instances.
* pkgs: Fixing some links that were wrongfully unquoted in the previous
commit
* Fixed some instances
The old forms presumably predates, or were made in ignorance of,
`let inherit`. This way is better style as the scoping as more lexical,
something which Nix can (or might already!) take advantage of.
* Fix#1132 for SERVFAIL zones perform backoff, and remembers the timeout on next startup.
* Fix null memcpy for radixtree with single link element.
* Robust fix against missing master in tcp_open for xfrd.
* Fix wildcards in include: config statements with chroot enabled.
* suppress compile warning in lex files.
* Fix to try every master once, then wait for timeout or notify.
* Save backoff timeout into xfrd.state file, this file has a higher version number now. Old files are skipped silently (causes refresh) and created as new files upon exit.
* Fix restart of zone transfers when new config becomes available.
Using outputsToInstall the intended behaviour of including host and dnsutils
when bind is installed can be implemented instead of using symlinks to fix
installing all outputs individually with nix-env.
Fixes#19761.
The list of permitted syscalls in the seccomp sandbox is only defined
for x86. It fails to build otherwise:
````
In file included from /tmp/nix-build-bind-9.10.4-P3.drv-0/bind-9.10.4-P3/lib/isc/include/isc/magic.h:23:0,
from /tmp/nix-build-bind-9.10.4-P3.drv-0/bind-9.10.4-P3/lib/isc/include/isc/app.h:89,
from ./main.c:26:
./main.c: In function 'setup_seccomp':
./main.c:848:17: error: 'scmp_syscalls' undeclared (first use in this function)
INSIST((sizeof(scmp_syscalls) / sizeof(int)) ==
````
These tools are commonly used but don't require the other bind binaries.
Bind's libs are used, so they've also been split into an extra output.
The old version of host isn't maintained anymore and was removed From Debian
back in 2009: https://packages.qa.debian.org/h/host.html
4.1.12
======
Bugfixes
--------
Fix malformed edns query assertion failure, reported by Michal Kepien (NASK).
4.1.11
======
Features
--------
* When tcp is more than half full, use short timeout for tcp session.
* Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori.
* Fix#790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865.
Bugfixes
--------
* Fix build without IPv6, patch from Zdenek Kaspar.
* Fix#783: Trying to run a root server without having configured it silently gives wrong answers.
* Fix#782: Serve DS record but parent zone has no NS record.
* Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
4.1.10
======
Features
--------
* ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down.
* NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size.
* print notice that nsd is starting before taking off.
Bugfixes
--------
* Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
* Fix#751: NSD fails to occlude names below a DNAME.
* If set without nsd.db print "" as the default in the man pages.
* Fix#755: NSD spins after a zone update and a lot of TCP queries.
* Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser.
* #772 Document that recvmmsg has IPv6 problems on some linux kernels.
4.1.9
=====
Bugfixes
--------
* Change the nsd.db file version because of nanosecond precision fix.
