Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unbound: 1.9.4 -> 1.9.5 #74676

Merged
merged 1 commit into from Dec 1, 2019
Merged

unbound: 1.9.4 -> 1.9.5 #74676

merged 1 commit into from Dec 1, 2019

Conversation

r-ryantm
Copy link
Contributor

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/unbound/versions.

meta.description for unbound is: '"Validating, recursive, and caching DNS resolver"'.

meta.homepage for unbound is: '"https://www.unbound.net"

Checks done (click to expand)
Rebuild report (if merged into master) (click to expand)

23479 total rebuild path(s)

8423 package rebuild(s)

8361 x86_64-linux rebuild(s)
7313 i686-linux rebuild(s)
935 x86_64-darwin rebuild(s)
6870 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
AgdaSheaves
AgdaStdlib
DisnixWebService
EmptyEpsilon
MMA
OVMF
OVMF-CSM
OVMF-secureBoot
R
SDL
SDL2
SDL2_gfx
SDL2_image
SDL2_mixer
SDL2_net
SDL2_ttf
SDL_Pango
SDL_gfx
SDL_gpu
SDL_image
SDL_mixer
SDL_net
SDL_sound
SDL_stretch
SDL_ttf
Sylk
TotalParserCombinators
_20kly
_90secondportraits
a2jmidid
abbaye-des-morts
abcde
abcl
abiword
abootimg
accountsservice
acoustidFingerprinter
acsccid
adapta-gtk-theme
adementary-theme
adlplug
adobe-reader
adom
adoptopenjdk-icedtea-web
adwaita-qt
aegisub
aeolus
aeon
aerc
aesop

Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/sbhiiywh3ivgcqc4rvv693bd75vw3dh2-unbound-1.9.5 \
  --option binary-caches 'https://cache.nixos.org/ https://r-ryantm.cachix.org/' \
  --option trusted-public-keys '
  r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(r-ryantm's Cachix cache is only trusted for this store-path realization.)

Or, build yourself:

nix-build -A unbound https://github.com/r-ryantm/nixpkgs/archive/98aae6ce3ba28c6c9838fe9fef3d5743a210b4ee.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/sbhiiywh3ivgcqc4rvv693bd75vw3dh2-unbound-1.9.5
ls -la /nix/store/sbhiiywh3ivgcqc4rvv693bd75vw3dh2-unbound-1.9.5/bin

cc @ehmry @fpletz @globin for testing.

@lsix
Copy link
Member

lsix commented Nov 30, 2019

This also fixes CVE-2019-18934.

The CVE fix (at least) should probably be backported to release-19.09 (https://nlnetlabs.nl/downloads/unbound/patch_cve_2019-18934.diff)

Copy link
Member

@lsix lsix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested successfully.

Staging automation moved this from Needs review to Ready Nov 30, 2019
@FRidh FRidh merged commit 335e62b into NixOS:staging Dec 1, 2019
Staging automation moved this from Ready to Done Dec 1, 2019
@r-ryantm r-ryantm deleted the auto-update/unbound branch December 7, 2019 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Staging
  
Done
Development

Successfully merging this pull request may close these issues.

None yet

3 participants