Files
buildroot/package/bind/Config.in
Bernd Kuhls 6c781be506 package/bind: security bump version to 9.20.29
https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-28
"The BIND 9.20.28 release was withdrawn after the discovery of a
 regression in it during pre-release testing."

https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-29
https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/changelog.html
https://seclists.org/oss-sec/2026/q3/801

Fixes CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19667,
CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-76163,
CVE-2026-77119, CVE-2026-77692, CVE-2026-78301, CVE-2026-80274,
CVE-2026-81563 & CVE-2026-81736.

Raise the minimum gcc version to 8 to fix a build error found by the
Gitlab pipelines which would be introduced by this bump due to upstream
commit:
a891e74233

opensslrsa_link.c:53:51: error: initializer element is not constant
 static const unsigned int rsa_max_modulus_bytes = (rsa_max_modulus_bits + 7) /

make[1]: *** [package/pkg-generic.mk:273:
 /builds/bkuhls/buildroot/br-test-pkg/bootlin-aarch64-glibc-old/build/bind-9.20.29/.stamp_built]
 Error 2

According to https://stackoverflow.com/a/67000730 the code needs gcc 8.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-09-16 22:39:26 +02:00

57 lines
1.9 KiB
Plaintext

config BR2_PACKAGE_BIND
bool "bind"
depends on BR2_USE_MMU # fork(), libcap, libuv
depends on BR2_TOOLCHAIN_HAS_SYNC_4 # libuv
depends on BR2_TOOLCHAIN_HAS_THREADS_NPTL # libuv
depends on BR2_INSTALL_LIBSTDCPP # liburcu
depends on !BR2_STATIC_LIBS # libuv
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_8
depends on BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS # liburcu
select BR2_PACKAGE_LIBCAP
select BR2_PACKAGE_LIBURCU
select BR2_PACKAGE_LIBUV
select BR2_PACKAGE_OPENSSL
help
BIND (Berkeley Internet Name Domain) is an
implementation of the Domain Name System (DNS) protocols
and provides an openly redistributable reference
implementation of the major components of the Domain
Name System, including:
* a Domain Name System server (named)
* a Domain Name System resolver library
* tools for verifying the proper operation of the DNS
server
The BIND DNS Server is used on the vast majority of name
serving machines on the Internet, providing a robust and
stable architecture on top of which an organization's naming
architecture can be built. The resolver library included in
the BIND distribution provides the standard APIs for
translation between domain names and Internet addresses and is
intended to be linked with applications requiring name
service.
https://www.isc.org/bind/
if BR2_PACKAGE_BIND
config BR2_PACKAGE_BIND_SERVER
bool "Install server components"
help
Install server components (named, lwresd)
config BR2_PACKAGE_BIND_TOOLS
bool "Install tools"
help
Install tools (dig, host, nslookup, nsupdate)
endif
comment "bind needs a toolchain w/ NPTL, dynamic library, C++, gcc >= 8"
depends on BR2_USE_MMU
depends on BR2_TOOLCHAIN_HAS_SYNC_4
depends on BR2_PACKAGE_LIBURCU_ARCH_SUPPORTS
depends on !BR2_TOOLCHAIN_HAS_THREADS_NPTL || BR2_STATIC_LIBS \
|| !BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_GCC_AT_LEAST_8