| Commit message (Collapse) | Author | Age |
| |
|
|
|
|
|
|
|
|
|
| |
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
|
|
|
|
|
|
|
|
| |
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000136.html
Similar commit worked fine for me, including the nixos service.
I'd like to still improve the service to support easy passing of sockets
to http module.
|
| |
|
|
|
|
|
|
| |
I hope I got all the transitive dependencies.
The 'http' module load again, at least.
Close https://github.com/NixOS/nixpkgs/pull/64174
|
|\
| |
| | |
Lua/luarocks packaging improvements
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
luaPackages replaced by generated ones:
- bit32
- compat53
- cqueues
- luacyrussasl -> cyrussasl (luarocks name)
- luaexpat
- luadbi -> luadbi front-end module + separate backend modules
luadbi-{mysql,postgresql,sqlite3}
- luafilesystem
- luaossl
- luasec
- luasocket
- luastdlib -> stdlib (luarocks name)
- lrexlib -> lrexlib-pcre (we already have lrexlib-gnu and
lrexlib-posix, lrexlib-pcre however appears to be the variant used in
mudlet, which is the only current dep in nixpkgs)
- luasqlite -> luasql-sqlite3 (luarocks name)
- lfs -> luafilesytem (we literally had two manually written
luafilesystem expressions, under different names)
Changes and additions to overrides to generated luarocks packgaes,
including:
- busted: Install bash completions along with the zsh ones
- cqueues:
- Perform minor surgery on the rockspec to allow using a single
rockspec to build for all supported Lua versions
- Add a patch by @vcunat to work around a build issue
- luuid: Wrote a tiny patch to allow for Lua 5.1/Luajit compatibility
- General changes:
- Sorted the packages
- Attempted to make the formatting consistent
- Preferenced `.override` instead of `.overrideAttrs` wherever
possible
Minor changes to other packages to adjust for the Lua package changes:
- luakit expression simplified
- prosody expression simplified; but users will now need to specify the
luadbi backend module they intend to use in withExtraLibs
- knot-resolver inputs correctd
- mudlet inputs corrected (although this package was and should still be
broken)
|
|/
|
|
|
|
| |
* treewide: remove unused variables
* making ofborg happy
|
|
|
|
|
|
| |
One bugfix patch is included - merged upstream but not released yet.
knot-resolver wrapper would need to add binaryheap explicitly,
so it's migrated to the automatic LUA path discovery instead.
|
|
|
|
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.8.0
Some explanation for the patching is in this ML thread:
https://lists.nic.cz/pipermail/knot-dns-users/2019-March/001616.html
|
| |
|
|
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v3.2.1
|
|
|
|
| |
https://lists.nic.cz/pipermail/knot-resolver-announce/2018/000005.html
|
|
|
|
| |
https://lists.nic.cz/pipermail/knot-resolver-users/2018/000086.html
|
|\
| |
| |
| | |
Security fixes for a few packages are included.
|
| |\
| | |
| | |
| | | |
Hydra: ?compare=1474536
|
| | | |
|
| | | |
|
| |/
|/|
| |
| |
| |
| | |
They're in a single commit, as splitting would break knot-resolver build.
https://gitlab.labs.nic.cz/knot/knot-dns/blob/v2.7.1/NEWS
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v3.0.0/NEWS
|
|\ \
| |/
|/| |
|
| |
| |
| |
| | |
The module feels as a toy mostly, but why not in non-default setup...
|
|/
|
|
|
| |
Fixes CVE-2018-10920 and some less important things.
https://lists.nic.cz/pipermail/knot-resolver-announce/2018/000002.html
|
|\ |
|
| | |
|
|/ |
|
| |
|
|
|
|
|
| |
It includes security-relevant fixes.
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v2.4.0
|
|
|
|
|
|
|
|
|
| |
* treewide: http -> https sources
This updates the source urls of all top-level packages from http to
https where possible.
* buildtorrent: fix url and tab -> spaces
|
|
|
|
| |
Contains fixes for CVE-2018-1110.
|
|
|
|
| |
Manifestation in this case: ./scripts/embed-lua.sh: line 4: alias: not found
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Semi-automatic update generated by https://github.com/ryantm/nix-update tools.
This update was made based on information from https://repology.org/metapackage/knot-resolver/versions.
These checks were done:
- built on NixOS
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -V` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --version` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` and found version 2.2.0
- found 2.2.0 with grep in /nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0
- directory tree listing: https://gist.github.com/3b59aaaf9f7d90b8de351b6eb712e2a5
|
|
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v2.1.1/NEWS
|
|
|
|
|
| |
No exciting changes to most people, I suppose.
https://lists.nic.cz/pipermail/knot-resolver-users/2018/000007.html
|
|
|
|
|
| |
Also split extraFeatures into a wrapper derivation.
So far, no changes like user renaming nor systemd unit rework.
|
|
|
|
| |
The fixed problem seems not to happen on NixOS, but let's update anyway.
|
|
|
|
|
| |
Fixes CVE-2018-1000002.
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v1.5.2/NEWS
|
|
|
|
| |
It seems to be serving fine, atop 17.09.
|
|
|
|
| |
It's flaky, unfortunately.
|
|
|
|
|
|
| |
https://lists.nic.cz/pipermail/knot-dns-users/2017-November/001240.html
ICANN wants to watch what root trust anchors people use.
https://www.icann.org/resources/pages/ksk-rollover
|
|
|
|
|
| |
Partly thanks to lmdb.pc, partly thanks to 84bd2f4
(hopefully; untested on Darwin).
|
|
|
|
|
| |
Also drop rarely used dependencies, by default,
and utilize root server addresses from nixpkgs.
|
|
|
|
| |
https://lists.nic.cz/pipermail/knot-dns-users/2017-August/001184.html
|
| |
|
| |
|
|
|
|
| |
It will compile but won't really work ATM.
|
| |
|
| |
|
|
|
|
|
| |
The removal of `luaL_reg` alias caused lots of breakage.
Only sysdig and knot-resolver needed (also) other changes.
|
| |
|
|
|
|
| |
Just nitpick changes in the tarball, minutes after the release.
|