Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

powerdns: 4.1.4 -> 4.1.5 #50013

Merged
merged 1 commit into from Nov 10, 2018
Merged

powerdns: 4.1.4 -> 4.1.5 #50013

merged 1 commit into from Nov 10, 2018

Conversation

r-ryantm
Copy link
Contributor

@r-ryantm r-ryantm commented Nov 9, 2018

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/powerdns/versions.

meta.description for powerdns is: '"Authoritative DNS server"'.

Checks done (click to expand)
  • built on NixOS
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/pdns_control passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/pdnsutil passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/zone2sql passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/zone2json passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnsgram passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnsreplay passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnsscan passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnsscope passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnswasher passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dumresp passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/pdns_notify passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/nproxy passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/nsec3dig passed the binary check.
  • Warning: no invocation of /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/saxfr had a zero exit code or showed the expected version
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/stubquery passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/ixplore passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/sdig passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/calidns passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnsbulktest passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnstcpbench passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/zone2ldap passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnspcap2protobuf passed the binary check.
  • /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/pdns_server passed the binary check.
  • 22 of 23 passed binary check by having a zero exit code.
  • 20 of 23 passed binary check by having the new version present in output.
  • found 4.1.5 with grep in /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5
  • directory tree listing: https://gist.github.com/bb685313017ca4bd3978ea763e191304
  • du listing: https://gist.github.com/22ce53cbe4eb979c3daef39feb38c491
Outpath report (click to expand)

Outpath difference report
3 total rebuild paths

1 package rebuilds

1 x86_64-linux rebuilds
1 i686-linux rebuilds
0 x86_64-darwin rebuilds
1 aarch64-linux rebuilds

First ten rebuilds by attrpath
powerdns

Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5 \
  --option binary-caches 'https://cache.nixos.org/ https://r-ryantm.cachix.org/' \
  --option trusted-public-keys '
  r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(r-ryantm's Cachix cache is only trusted for this store-path realization.)

Or, build yourself:

nix-build -A powerdns https://github.com/r-ryantm/nixpkgs/archive/08cd9b812be1936354531d1cd8b42b792c0110cd.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5
ls -la /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin

cc @Mic92 @disassembler for testing.

@r-ryantm
powerdns: 4.1.4 -> 4.1.5
08cd9b8 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/powerdns/versions
@GrahamcOfBorg
Copy link

No attempt on x86_64-darwin (full log)

The following builds were skipped because they don't evaluate on x86_64-darwin: powerdns

Partial log (click to expand)


a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

@GrahamcOfBorg
Copy link

No attempt on aarch64-linux (full log)

The following builds were skipped because they don't evaluate on aarch64-linux: powerdns

Partial log (click to expand)


a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

@GrahamcOfBorg
Copy link

Success on x86_64-linux (full log)

Attempted: powerdns

Partial log (click to expand)

shrinking /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnspcap2protobuf
shrinking /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/dnsbulktest
shrinking /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin/pdnsutil
gzipping man pages under /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/share/man/
strip is /nix/store/vcc4svb8gy29g4pam2zja6llkbcwsyiq-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/lib  /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin  /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/sbin
patching script interpreter paths in /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5
checking for references to /build in /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5...
moving /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/sbin/* to /nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5/bin
/nix/store/g8q0k347m446ba5g5k2mxhp2adg37crq-powerdns-4.1.5

@Mic92
Copy link
Member

Mic92 commented Nov 9, 2018

needs a backport: https://blog.powerdns.com/2018/11/06/powerdns-authoritative-server-4-0-6-4-1-5-and-recursor-4-0-9-4-1-5-released/

@c0bw3b c0bw3b merged commit 377c5b7 into NixOS:master Nov 10, 2018
@c0bw3b c0bw3b mentioned this pull request Nov 10, 2018
Merged
9 tasks
@c0bw3b
Copy link
Contributor

c0bw3b commented Nov 10, 2018

@ckauhaus if these two CVEs shows up in the next roundup:

PowerDNS Security Advisory 2018-03 (CVE-2018-10851)
PowerDNS Security Advisory 2018-05 (CVE-2018-14626)

@ckauhaus
Copy link
Contributor

The NIST is not that fast... both CVEs didn't happend to have a structured record right now. But thanks for the heads-up anyway. :-)

@r-ryantm r-ryantm deleted the auto-update/powerdns branch November 17, 2018 22:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
1.severity: security 10.rebuild-darwin: 0 10.rebuild-linux: 1-10
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
5 participants
@r-ryantm @GrahamcOfBorg @Mic92 @c0bw3b @ckauhaus