Commit 324f730e authored by Thomas Gerbet's avatar Thomas Gerbet Committed by Thomas Gerbet
Browse files

bind: 9.18.21 -> 9.18.24 

Fixes CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-6516, CVE-2023-50387 and CVE-2023-50868.

Security advisories:
https://kb.isc.org/docs/cve-2023-4408
https://kb.isc.org/docs/cve-2023-5517
https://kb.isc.org/docs/cve-2023-5679
https://kb.isc.org/docs/cve-2023-6516
https://kb.isc.org/docs/cve-2023-50387
https://kb.isc.org/docs/cve-2023-50868

Release notes:
https://bind9.readthedocs.io/en/v9.18.24/notes.html
parent 00aa9078

pkgs/servers/dns/bind/default.nix

+5 −2
Original line number Diff line number Diff line
@@ -24,11 +24,11 @@ 


stdenv.mkDerivation rec {

  pname = "bind";

  version = "9.18.21";

  version = "9.18.24";



  src = fetchurl {

    url = "https://downloads.isc.org/isc/bind9/${version}/${pname}-${version}.tar.xz";

    hash = "sha256-pVa+IlBdnqT5xnF67pxUlznGhJiv88ppA1eH7MZI/sU=";

    hash = "sha256-cJ1zAjyRFd2tO6tltsjHmlkBltDRFPXQyiUz29Ut32Y=";

  };



  outputs = [ "out" "lib" "dev" "man" "dnsutils" "host" ];
@@ -91,6 +91,9 @@ stdenv.mkDerivation rec { 
  preCheck = lib.optionalString stdenv.hostPlatform.isMusl ''

    # musl doesn't respect TZDIR, skip timezone-related tests

    sed -i '/^ISC_TEST_ENTRY(isc_time_formatISO8601L/d' tests/isc/time_test.c

  '' + lib.optionalString stdenv.hostPlatform.isDarwin ''

    # Test timeouts on Darwin

    sed -i '/^ISC_TEST_ENTRY(tcpdns_recv_one/d' tests/isc/netmgr_test.c

  '';



  passthru = {