diff --git a/.bind-dyndb-ldap.metadata b/.bind-dyndb-ldap.metadata new file mode 100644 index 0000000..7f14f8d --- /dev/null +++ b/.bind-dyndb-ldap.metadata @@ -0,0 +1 @@ +282bf80634784e70a42c9cef050cbf74cdd5be0d SOURCES/bind-dyndb-ldap-11.1.tar.bz2 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..b51fbbe --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/bind-dyndb-ldap-11.1.tar.bz2 diff --git a/SOURCES/0001-Coverity-fix-REVERSE_INULL-for-pevent-inst.patch b/SOURCES/0001-Coverity-fix-REVERSE_INULL-for-pevent-inst.patch new file mode 100644 index 0000000..04b6cb8 --- /dev/null +++ b/SOURCES/0001-Coverity-fix-REVERSE_INULL-for-pevent-inst.patch @@ -0,0 +1,116 @@ +From e5c29893a318c0f1571c9918ab2c7c23dca3c952 Mon Sep 17 00:00:00 2001 +From: Tomas Krizek +Date: Mon, 27 Mar 2017 19:41:05 +0200 +Subject: [PATCH] Coverity: fix REVERSE_INULL for pevent->inst + +With the DynDB API changes, the ldap instance is acquired +differently. Previously, obtaining the instance could fail when +LDAP was disconnecting, thus the NULL check was necessary in the +cleanup part. + +Now, inst is obtained directly from the API. I'm not sure what is +the exact behaviour in edge cases such as LDAP disconnecting, so +I perform the NULL check a bit earlier, just to be safe. +--- + src/ldap_helper.c | 42 +++++++++++++++++++++--------------------- + 1 file changed, 21 insertions(+), 21 deletions(-) + +diff --git a/src/ldap_helper.c b/src/ldap_helper.c +index 1fa0ec9adfa2b9ca589587244da03cc6f0584919..e0c4b76f0bd350eda2d81588e6efb67b5221d630 100644 +--- a/src/ldap_helper.c ++++ b/src/ldap_helper.c +@@ -3714,6 +3714,7 @@ update_zone(isc_task_t *task, isc_event_t *event) + mctx = pevent->mctx; + dns_name_init(&prevname, NULL); + ++ REQUIRE(inst != NULL); + INSIST(task == inst->task); /* For task-exclusive mode */ + + if (SYNCREPL_DEL(pevent->chgtype)) { +@@ -3730,12 +3731,11 @@ update_zone(isc_task_t *task, isc_event_t *event) + } + + cleanup: +- if (inst != NULL) { +- sync_concurr_limit_signal(inst->sctx); +- sync_event_signal(inst->sctx, pevent); +- if (dns_name_dynamic(&prevname)) +- dns_name_free(&prevname, inst->mctx); +- } ++ sync_concurr_limit_signal(inst->sctx); ++ sync_event_signal(inst->sctx, pevent); ++ if (dns_name_dynamic(&prevname)) ++ dns_name_free(&prevname, inst->mctx); ++ + if (result != ISC_R_SUCCESS) + log_error_r("update_zone (syncrepl) failed for %s. " + "Zones can be outdated, run `rndc reload`", +@@ -3760,14 +3760,14 @@ update_config(isc_task_t * task, isc_event_t *event) + + mctx = pevent->mctx; + ++ REQUIRE(inst != NULL); + INSIST(task == inst->task); /* For task-exclusive mode */ + CHECK(ldap_parse_configentry(entry, inst)); + + cleanup: +- if (inst != NULL) { +- sync_concurr_limit_signal(inst->sctx); +- sync_event_signal(inst->sctx, pevent); +- } ++ sync_concurr_limit_signal(inst->sctx); ++ sync_event_signal(inst->sctx, pevent); ++ + if (result != ISC_R_SUCCESS) + log_error_r("update_config (syncrepl) failed for %s. " + "Configuration can be outdated, run `rndc reload`", +@@ -3790,14 +3790,14 @@ update_serverconfig(isc_task_t * task, isc_event_t *event) + + mctx = pevent->mctx; + ++ REQUIRE(inst != NULL); + INSIST(task == inst->task); /* For task-exclusive mode */ + CHECK(ldap_parse_serverconfigentry(entry, inst)); + + cleanup: +- if (inst != NULL) { +- sync_concurr_limit_signal(inst->sctx); +- sync_event_signal(inst->sctx, pevent); +- } ++ sync_concurr_limit_signal(inst->sctx); ++ sync_event_signal(inst->sctx, pevent); ++ + if (result != ISC_R_SUCCESS) + log_error_r("update_serverconfig (syncrepl) failed for %s. " + "Configuration can be outdated, run `rndc reload`", +@@ -3860,6 +3860,7 @@ update_record(isc_task_t *task, isc_event_t *event) + dns_name_init(&prevname, NULL); + dns_name_init(&prevorigin, NULL); + ++ REQUIRE(inst != NULL); + CHECK(zr_get_zone_ptr(inst->zone_register, &entry->zone_name, &raw, &secure)); + zone_found = ISC_TRUE; + +@@ -4020,13 +4021,12 @@ cleanup: + ldap_entry_logname(entry), pevent->chgtype); + } + +- if (inst != NULL) { +- sync_concurr_limit_signal(inst->sctx); +- if (dns_name_dynamic(&prevname)) +- dns_name_free(&prevname, inst->mctx); +- if (dns_name_dynamic(&prevorigin)) +- dns_name_free(&prevorigin, inst->mctx); +- } ++ sync_concurr_limit_signal(inst->sctx); ++ if (dns_name_dynamic(&prevname)) ++ dns_name_free(&prevname, inst->mctx); ++ if (dns_name_dynamic(&prevorigin)) ++ dns_name_free(&prevorigin, inst->mctx); ++ + if (raw != NULL) + dns_zone_detach(&raw); + if (secure != NULL) +-- +2.9.3 + diff --git a/SOURCES/0002-Add-empty-callback-for-getsize.patch b/SOURCES/0002-Add-empty-callback-for-getsize.patch new file mode 100644 index 0000000..63f08b9 --- /dev/null +++ b/SOURCES/0002-Add-empty-callback-for-getsize.patch @@ -0,0 +1,30 @@ +From 107c5ed7247788a04a23d6c65fca50f96c944345 Mon Sep 17 00:00:00 2001 +From: Tomas Krizek +Date: Tue, 27 Jun 2017 10:41:03 +0200 +Subject: [PATCH] Add empty callback for getsize + +BIND introduced getsize method in db.h. This is related to +CVE-2016-6170 and allows to set restriction of zone size limit. + +Signed-off-by: Tomas Krizek +--- + src/ldap_driver.c | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/src/ldap_driver.c b/src/ldap_driver.c +index 53ce1a9..38673b0 100644 +--- a/src/ldap_driver.c ++++ b/src/ldap_driver.c +@@ -867,7 +867,8 @@ static dns_dbmethods_t ldapdb_methods = { + findext, + setcachestats, + hashsize, +- nodefullname ++ nodefullname, ++ NULL, // getsize method not implemented (related BZ1353563) + }; + + isc_result_t ATTR_NONNULLS +-- +2.9.4 + diff --git a/SOURCES/0003-Support-for-BIND-9.11.3.patch b/SOURCES/0003-Support-for-BIND-9.11.3.patch new file mode 100644 index 0000000..092e3c2 --- /dev/null +++ b/SOURCES/0003-Support-for-BIND-9.11.3.patch @@ -0,0 +1,137 @@ +From b533d722fa62232955aedfdf1bbc0179f48497eb Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= +Date: Thu, 1 Mar 2018 19:41:10 +0100 +Subject: [PATCH] Support for BIND 9.11.3. Include explicitly isc/util.h in + each file that uses REQUIRE(). Support stdatomic feature, do not use function + call in STATIC_ASSERT(). + +--- + src/bindcfg.c | 1 + + src/fwd_register.c | 1 + + src/ldap_entry.h | 11 +++++------ + src/mldap.c | 4 ++-- + src/rbt_helper.c | 1 + + src/types.h | 2 +- + 6 files changed, 11 insertions(+), 9 deletions(-) + +diff --git a/src/bindcfg.c b/src/bindcfg.c +index 9b429ba..5539dea 100644 +--- a/src/bindcfg.c ++++ b/src/bindcfg.c +@@ -6,6 +6,7 @@ + + #include "config.h" + ++#include + #include + #include + +diff --git a/src/fwd_register.c b/src/fwd_register.c +index 355d15f..7cc0c5a 100644 +--- a/src/fwd_register.c ++++ b/src/fwd_register.c +@@ -3,6 +3,7 @@ + */ + + #include ++#include + #include + + #include "rbt_helper.h" +diff --git a/src/ldap_entry.h b/src/ldap_entry.h +index 6498c79..88b1c42 100644 +--- a/src/ldap_entry.h ++++ b/src/ldap_entry.h +@@ -6,7 +6,6 @@ + #define _LD_LDAP_ENTRY_H_ + + #include +-#include + #include + + #include "fwd_register.h" +@@ -19,15 +18,15 @@ + + /* Represents values associated with LDAP attribute */ + typedef struct ldap_value ldap_value_t; +-typedef LIST(ldap_value_t) ldap_valuelist_t; ++typedef ISC_LIST(ldap_value_t) ldap_valuelist_t; + struct ldap_value { + char *value; +- LINK(ldap_value_t) link; ++ ISC_LINK(ldap_value_t) link; + }; + + /* Represents LDAP attribute and it's values */ + typedef struct ldap_attribute ldap_attribute_t; +-typedef LIST(ldap_attribute_t) ldap_attributelist_t; ++typedef ISC_LIST(ldap_attribute_t) ldap_attributelist_t; + + /* Represents LDAP entry and it's attributes */ + typedef unsigned char ldap_entryclass_t; +@@ -41,7 +40,7 @@ struct ldap_entry { + + ldap_attribute_t *lastattr; + ldap_attributelist_t attrs; +- LINK(ldap_entry_t) link; ++ ISC_LINK(ldap_entry_t) link; + + /* Parsing. */ + isc_lex_t *lex; +@@ -59,7 +58,7 @@ struct ldap_attribute { + char **ldap_values; + ldap_value_t *lastval; + ldap_valuelist_t values; +- LINK(ldap_attribute_t) link; ++ ISC_LINK(ldap_attribute_t) link; + }; + + #define LDAP_ENTRYCLASS_NONE 0x0 +diff --git a/src/mldap.c b/src/mldap.c +index 143abce..304ba36 100644 +--- a/src/mldap.c ++++ b/src/mldap.c +@@ -119,13 +119,13 @@ void mldap_cur_generation_bump(mldapdb_t *mldap) { + * reference counter value. + */ + STATIC_ASSERT((isc_uint32_t) +- (typeof(isc_refcount_current((isc_refcount_t *)0))) ++ (typeof(((isc_refcount_t *)0)->refs)) + -1 + == 0xFFFFFFFF, \ + "negative isc_refcount_t cannot be properly shortened to 32 bits"); + + STATIC_ASSERT((isc_uint32_t) +- (typeof(isc_refcount_current((isc_refcount_t *)0))) ++ (typeof(((isc_refcount_t *)0)->refs)) + 0x90ABCDEF12345678 + == 0x12345678, \ + "positive isc_refcount_t cannot be properly shortened to 32 bits"); +diff --git a/src/rbt_helper.c b/src/rbt_helper.c +index 2a7e6cb..f610b07 100644 +--- a/src/rbt_helper.c ++++ b/src/rbt_helper.c +@@ -2,6 +2,7 @@ + * Copyright (C) 2013-2014 bind-dyndb-ldap authors; see COPYING for license + */ + ++#include + #include + + #include "util.h" +diff --git a/src/types.h b/src/types.h +index 25ef3b9..01d627c 100644 +--- a/src/types.h ++++ b/src/types.h +@@ -24,7 +24,7 @@ + * rdata1 -> rdata2 -> rdata3 rdata4 -> rdata5 + * next_rdatalist -> next_rdatalist ... + */ +-typedef LIST(dns_rdatalist_t) ldapdb_rdatalist_t; ++typedef ISC_LIST(dns_rdatalist_t) ldapdb_rdatalist_t; + + typedef struct enum_txt_assoc { + int value; +-- +2.14.3 + diff --git a/SOURCES/bind-dyndb-ldap-11.1.tar.bz2.asc b/SOURCES/bind-dyndb-ldap-11.1.tar.bz2.asc new file mode 100644 index 0000000..3becbc4 --- /dev/null +++ b/SOURCES/bind-dyndb-ldap-11.1.tar.bz2.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2 + +iQEcBAABCAAGBQJYwqX6AAoJECKiqUteSUFa2OkH/3NWkWc62TWaDkMN+EPUYSJ5 +Hf+hxQJdioATttopyuiCE+5q2iS/9n8DGgfQmdPXDalZwQfYWhX75WWlMIiWWy5F +FDZ29tWY41JqLCdV3xYMhR+Nd4OBegT+U3muIzsFcSS9el78kRmNJCu1yOur/Nc+ +r1v8o2J5PVmp1iYxvy5s77qcIC3cERGcLakDlRduZY00jCL5I5ysxG8sWQ8jJEIr +G1thN8cJeZ37pcOml943m0hLjzcJeNhmV/rgz7cMpH17r3yf5B600B+lGqrL9EtJ +lSTVRJQlZFosDPVrqKuNyMHi5iIroc8+TVZtw1aAyZ8KA39zG5wrMF5FphjVHm4= +=jtZI +-----END PGP SIGNATURE----- diff --git a/SPECS/bind-dyndb-ldap.spec b/SPECS/bind-dyndb-ldap.spec new file mode 100644 index 0000000..412c815 --- /dev/null +++ b/SPECS/bind-dyndb-ldap.spec @@ -0,0 +1,441 @@ +%define VERSION %{version} + +%define bind_version 32:9.11.4-14.P2 + +Name: bind-dyndb-ldap +Version: 11.1 +Release: 13%{?dist} +Summary: LDAP back-end plug-in for BIND + +Group: System Environment/Libraries +License: GPLv2+ +URL: https://releases.pagure.org/bind-dyndb-ldap +Source0: https://releases.pagure.org/%{name}/%{name}-%{VERSION}.tar.bz2 +Source1: https://releases.pagure.org/%{name}/%{name}-%{VERSION}.tar.bz2.asc +Patch1: 0001-Coverity-fix-REVERSE_INULL-for-pevent-inst.patch +Patch2: 0002-Add-empty-callback-for-getsize.patch +Patch3: 0003-Support-for-BIND-9.11.3.patch + +BuildRequires: bind-devel >= %{bind_version}, bind-lite-devel >= %{bind_version}, bind-pkcs11-devel >= %{bind_version} +BuildRequires: krb5-devel +BuildRequires: openldap-devel +BuildRequires: openssl-devel +BuildRequires: libuuid-devel +BuildRequires: automake, autoconf, libtool + +Requires: bind-pkcs11 >= %{bind_version}, bind-pkcs11-utils >= %{bind_version} + + +%description +This package provides an LDAP back-end plug-in for BIND. It features +support for dynamic updates and internal caching, to lift the load +off of your LDAP server. + + +%prep +%setup -q -n %{name}-%{VERSION} +%patch1 -p1 +%patch2 -p1 +%patch3 -p1 + +%build +autoreconf -fiv +%configure +make %{?_smp_mflags} + + +%install +rm -rf %{buildroot} +make install DESTDIR=%{buildroot} +mkdir -m 770 -p %{buildroot}/%{_localstatedir}/named/dyndb-ldap + +# Remove unwanted files +rm %{buildroot}%{_libdir}/bind/ldap.la +rm -r %{buildroot}%{_datadir}/doc/%{name} + + +%post +# Transform named.conf if it still has old-style API. +PLATFORM=$(uname -m) + +if [ $PLATFORM == "x86_64" ] ; then + LIBPATH=/usr/lib64 +else + LIBPATH=/usr/lib +fi + +# The following sed script: +# - scopes the named.conf changes to dynamic-db +# - replaces arg "name value" syntax with name "value" +# - changes dynamic-db header to dyndb +# - uses the new way the define path to the library +# - removes no longer supported arguments (library, cache_ttl, +# psearch, serial_autoincrement, zone_refresh) +while read -r PATTERN +do + SEDSCRIPT+="$PATTERN" +done < - 11.1-13 +- Move setting of named selinux boolean to bind (#1639410) + +* Wed Aug 08 2018 Alexander Bokovoy - 11.1-12 +- Make sure we explicitly require openssl-devel for a build +- Resolves: rhbz#1613942 + +* Mon Jul 23 2018 Petr Menšík - 11.1-11 +- Rebuild against BIND 9.11.4 + +* Thu Mar 01 2018 Petr Menšík - 11.1-10 +- Rebuild for bind 9.11.3. Minor tweaks to compile. + +* Wed Feb 07 2018 Fedora Release Engineering - 11.1-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Fri Jan 19 2018 Petr Menšík - 11.1-8 +- Rebuild again against bind-9.11.2-P1 + +* Tue Jan 09 2018 Petr Menšík - 11.1-7 +- Rebuild for bind 9.11.2 + +* Wed Aug 02 2017 Fedora Release Engineering - 11.1-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 11.1-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Tue Jun 27 2017 Tomas Krizek - 11.1-4 +- Bump BIND version and fix library dependecies +- Coverity fixes + +* Mon Jun 26 2017 Petr Menšík - 11.1-3 +- Build with updated libraries + +* Mon Mar 13 2017 Tomas Krizek - 11.1-2 +- Fix error poinstall sed script + +* Fri Mar 10 2017 Tomas Krizek - 11.1-1 +- Update to 11.1 +- Bumped required version of BIND to 9.11.0-6.P2 + (required since bind-dyndb-ldap 11.0-1 release) +- Updated source URL links to pagure + +* Fri Feb 10 2017 Tomas Krizek - 11.0-2 +- Patch to fix build warnings (removed duplicate const) + +* Thu Feb 09 2017 Tomas Krizek - 11.0-2 +- Added named.conf transformation script as post action + +* Thu Dec 15 2016 Tomas Krizek - 11.0-1 +- Update to 11.0 + +* Mon Nov 21 2016 Petr Menšík - 10.1-2 +- Patched to alfa 11.0 with support for BIND 9.11 +- Configuration format in named.conf is different + and incompatible with all previous versions. Please see README.md. +- Minimal BIND version is now 9.11.0rc1. Please see NEWS. + +* Wed Aug 17 2016 Petr Spacek - 10.1-1 +- Update to 10.1. +- Fix deletion of DNS root zone not to break global forwarding. + https://fedorahosted.org/bind-dyndb-ldap/ticket/167 + +* Wed Jul 27 2016 Petr Spacek - 10.0-2 +- Backport fix for crash https://fedorahosted.org/bind-dyndb-ldap/ticket/166 + +* Tue Jun 21 2016 Petr Spacek - 10.0-1 +- Update to 10.0 + +* Fri May 27 2016 Tomas Hozza - 9.0-3 +- Resolved build issue due to changes in libdns API + +* Thu May 26 2016 Tomas Hozza - 9.0-2 +- Rebuild against bind-9.10.4-P1 + +* Thu May 12 2016 Petr Spacek - 9.0-1 +- Update to 9.0 +- Fix for GCC 4.9+ was merged upstream + +* Fri Mar 04 2016 Petr Spacek - 8.0-6 +- Fix builds with GCC 4.9+ + +* Wed Feb 03 2016 Fedora Release Engineering - 8.0-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Thu Dec 17 2015 Petr Spacek - 8.0-4 +- Rebuild against bind 9.10.3-P2 + +* Fri Sep 04 2015 Tomas Hozza - 8.0-3 +- Rebuild against bind 9.10.3rc1 + +* Wed Jun 24 2015 Tomas Hozza - 8.0-2 +- rebuild against bind-9.10.2-P1 + +* Tue Jun 23 2015 Petr Spacek - 8.0-1 +- update to 8.0 + +* Wed Jun 17 2015 Fedora Release Engineering - 7.0-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Fri Mar 13 2015 Tomas Hozza - 7.0-4 +- rebuild against bind-9.10.2 + +* Wed Feb 25 2015 Tomas Hozza - 7.0-3 +- Rebuild against bind-9.10.2rc2 + +* Mon Feb 02 2015 Tomas Hozza - 7.0-2 +- rebuild against bind-9.10.2rc1 + +* Mon Jan 12 2015 Petr Spacek - 7.0-1 +- update to 7.0 to add support for BIND 9.10 + +* Tue Dec 02 2014 Petr Spacek - 6.1-1 +- update to 6.1 +- drop patches which were merged upstream + +* Tue Oct 21 2014 Petr Viktorin - 6.0-5 +- use lower version of bind-pkcs11-utils for f20 and el7 + +* Mon Oct 20 2014 Petr Spacek - 6.0-4 +- add dependency on bind-pkcs11-utils >= 32:9.9.6-2 + to help with freeipa-server upgrade + +* Mon Oct 20 2014 Petr Spacek - 6.0-3 +- replace dependency on bind with dependency on bind-pkcs11 >= 32:9.9.6-2 + to help with freeipa-server upgrade + +* Fri Oct 03 2014 Tomas Hozza - 6.0-2 +- rebuild against bind-9.9.6 + +* Tue Sep 23 2014 Petr Spacek - 6.0-1 +- update to 6.0 + +* Fri Sep 12 2014 Petr Spacek - 5.3-1 +- update to 5.3 + +* Mon Sep 08 2014 Petr Spacek 5.2-1 +- update to 5.2 + +* Fri Aug 15 2014 Fedora Release Engineering - 5.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Thu Jul 24 2014 Petr Spacek 5.1-1 +- update to 5.1 +- fixes bug 1122393 + +* Tue Jun 24 2014 Petr Spacek 5.0-1 +- update to 5.0 + +* Sat Jun 07 2014 Fedora Release Engineering - 4.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Wed Apr 09 2014 Petr Spacek 4.3-1 +- update to 4.3 + +* Mon Feb 24 2014 Petr Spacek 4.1-2 +- remove deprecated define _BSD_SOURCE + +* Mon Feb 24 2014 Petr Spacek 4.1-1 +- update to 4.1 + +* Thu Jul 18 2013 Petr Spacek 3.5-1 +- update to 3.5 + +* Mon Jul 15 2013 Tomas Hozza 3.4-2 +- rebuild against new bind + +* Tue Jun 25 2013 Petr Spacek 3.4-1 +- update to 3.4 + +* Tue Jun 04 2013 Petr Spacek 3.3-1 +- update to 3.3 +- patch bind-dyndb-ldap-tbabej-0001-Build-fixes-for-Fedora-19.patch merged + +* Tue May 14 2013 Petr Spacek 3.2-1 +- update to 3.2 + +* Tue Apr 16 2013 Adam Tkac 3.1-2 +- rebuild against new bind +- build with --disable-werror + +* Fri Apr 12 2013 Petr Spacek 3.1-1 +- update to 3.1 + +* Tue Apr 02 2013 Petr Spacek 3.0-1 +- update to 3.0 + +* Tue Mar 26 2013 Petr Spacek 2.6-1 +- update to 2.6 + +* Mon Feb 04 2013 Petr Spacek 2.5-1 +- update to 2.5 + +* Tue Jan 15 2013 Petr Spacek 2.4-1 +- update to 2.4 + +* Thu Nov 8 2012 Petr Spacek 2.3-2 +- rebuild with proper changelog + +* Thu Nov 8 2012 Petr Spacek 2.3-1 +- update to 2.3 + +* Mon Oct 29 2012 Adam Tkac 2.1-1 +- update to 2.1 + +* Thu Oct 11 2012 Adam Tkac 2.0-0.3.20121009git6a86b1 +- rebuild against new bind-libs + +* Tue Oct 9 2012 Petr Spacek 2.0-0.2.20121009git6a86b1 +- update to the latest master + +* Fri Sep 21 2012 Adam Tkac 2.0-0.1.20120921git7710d89 +- update to the latest master +- bind-dyndb-ldap110-master.patch was merged + +* Thu Aug 16 2012 Adam Tkac 1.1.0-0.16.rc1 +- update to the latest git + +* Thu Aug 02 2012 Adam Tkac 1.1.0-0.15.rc1 +- update to the latest git + - fix for CVE-2012-3429 has been merged + +* Thu Aug 02 2012 Adam Tkac 1.1.0-0.14.rc1 +- fix CVE-2012-3429 + +* Wed Jul 18 2012 Fedora Release Engineering - 1.1.0-0.13.rc1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Thu Jun 07 2012 Adam Tkac - 1.1.0-0.12.rc1 +- update to the latest master (#827401) + +* Thu Apr 26 2012 Adam Tkac - 1.1.0-0.11.rc1 +- update to 1.1.0rc1 (CVE-2012-2134) + +* Tue Mar 27 2012 Adam Tkac - 1.1.0-0.10.b2 +- update to 1.1.0b2 + +* Tue Mar 06 2012 Adam Tkac - 1.1.0-0.9.b1 +- update to 1.1.0b1 + +* Mon Feb 13 2012 Adam Tkac - 1.1.0-0.8.a2 +- update to 1.1.0a2 + +* Thu Feb 02 2012 Adam Tkac - 1.1.0-0.7.a1 +- rebuild against new bind + +* Wed Jan 18 2012 Adam Tkac - 1.1.0-0.6.a1 +- update to 1.1.0a1 + +* Thu Jan 12 2012 Fedora Release Engineering - 1.0.0-0.5.rc1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Mon Nov 14 2011 Adam Tkac - 1.0.0-0.4.rc1 +- update to 1.0.0rc1 + +* Mon Nov 14 2011 Adam Tkac - 1.0.0-0.3.b1 +- rebuild against new bind + +* Fri Sep 09 2011 Adam Tkac - 1.0.0-0.2.b1 +- rebuild against new bind + +* Wed Aug 31 2011 Adam Tkac - 1.0.0-0.1.b1 +- update to 1.0.0b1 (psearch + bugfixes) +- bind-dyndb-ldap-rh727856.patch merged + +* Wed Aug 03 2011 Adam Tkac - 0.2.0-4 +- fix race condition in semaphore_wait (#727856) + +* Mon Feb 21 2011 Adam Tkac - 0.2.0-3 +- rebuild against new bind + +* Mon Feb 07 2011 Fedora Release Engineering - 0.2.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Jan 12 2011 Adam Tkac - 0.2.0-1 +- update to 0.2.0 +- patches merged + - 0001-Bugfix-Improve-LDAP-schema-to-be-loadable-by-OpenLDA.patch + - 0004-Bugfix-Fix-loading-of-child-zones-from-LDAP.patch + +* Wed Dec 15 2010 Adam Tkac - 0.1.0-0.17.b +- fix LDAP schema (#622604) +- load child zones from LDAP correctly (#622617) + +* Fri Oct 22 2010 Adam Tkac - 0.1.0-0.16.b +- build with correct RPM_OPT_FLAGS (#645529) + +* Wed Oct 20 2010 Adam Tkac - 0.1.0-0.15.b +- use "isc-config.sh" utility to get correct BIND9 CFLAGS + +* Thu Sep 30 2010 Adam Tkac - 0.1.0-0.14.b +- rebuild against new bind + +* Fri Aug 27 2010 Adam Tkac - 0.1.0-0.13.b +- rebuild against new bind + +* Tue Aug 17 2010 Adam Tkac - 0.1.0-0.12.b +- rebuild against new bind + +* Tue Aug 03 2010 Adam Tkac - 0.1.0-0.11.b +- rebuild against new bind + +* Mon May 31 2010 Adam Tkac - 0.1.0-0.10.b +- rebuild against new bind + +* Wed Mar 24 2010 Martin Nagy - 0.1.0-0.9.b +- update to the latest upstream release + +* Thu Jan 28 2010 Adam Tkac - 0.1.0-0.8.a1.20091210git +- rebuild against new bind + +* Tue Dec 15 2009 Adam Tkac - 0.1.0-0.7.a1.20091210git +- rebuild against new bind + +* Thu Dec 10 2009 Martin Nagy - 0.1.0-0.6.a1.20091210git +- update to the latest git snapshot +- change upstream URL, project moved to fedorahosted +- change license to GPL version 2 or later +- add epoch to versioned requires +- add krb5-devel to the list of build requires + +* Tue Dec 01 2009 Adam Tkac - 0.1.0-0.5.a1 +- rebuild against new bind + +* Thu Nov 26 2009 Adam Tkac - 0.1.0-0.4.a1 +- rebuild against new bind + +* Fri Jul 24 2009 Fedora Release Engineering - 0.1.0-0.3.a1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Fri Jun 19 2009 Caolán McNamara - 0.1.0-0.2.a1 +- rebuild for dependencies + +* Sun May 03 2009 Martin Nagy - 0.1.0-0.1.a1 +- initial packaging