From unknown Sun Jun 22 00:37:40 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#78300] [PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes] Resent-From: ashish.is@lostca.se Original-Sender: "Debbugs-submit" Resent-CC: sharlatanus@gmail.com, guix-patches@gnu.org Resent-Date: Wed, 07 May 2025 15:03:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 78300 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78300@debbugs.gnu.org Cc: Ashish SHUKLA , Sharlatan Hellseher X-Debbugs-Original-To: guix-patches@gnu.org X-Debbugs-Original-Xcc: Sharlatan Hellseher Received: via spool by submit@debbugs.gnu.org id=B.17466301472063 (code B ref -1); Wed, 07 May 2025 15:03:02 +0000 Received: (at submit) by debbugs.gnu.org; 7 May 2025 15:02:27 +0000 Received: from localhost ([127.0.0.1]:45512 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uCgHz-0000XC-Aj for submit@debbugs.gnu.org; Wed, 07 May 2025 11:02:27 -0400 Received: from lists.gnu.org ([2001:470:142::17]:45466) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uCgHx-0000Ws-1W for submit@debbugs.gnu.org; Wed, 07 May 2025 11:02:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uCgHr-0001Ky-Ie for guix-patches@gnu.org; Wed, 07 May 2025 11:02:19 -0400 Received: from anamika.lostca.se ([2a01:4f9:3b:505c::2]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uCgHp-0002C1-EB for guix-patches@gnu.org; Wed, 07 May 2025 11:02:19 -0400 Received: from borboleta.inet6.in (unknown [IPv6:2a01:4f9:3070:1aea::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id E5C961FCAE; Wed, 7 May 2025 15:02:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1746630134; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=ZtuzgxLFUKXRIGJZhQCs+O5IZ8jlMwjeKFL9R19fyrk=; b=DX7TUuvUk5YAo2rJ8KyuAfub6ClfY/r4OzdyixYL8u8WVtT3alSzz+X2Nd7VvvLUAAybbC IL/Tg16PuuJ49rh6hseAWxrkrjpI66mnzA0LEswJ9J1R0o7wBKUDe6R+dGbK1q4I35iuGy f6WgOXe/Wm/SeL+OhyTH18oWYtYUmpw= From: ashish.is@lostca.se Date: Wed, 7 May 2025 15:00:58 +0000 Message-ID: <03e90cc645c12cd48f07ca6b062a593ba405121f.1746630057.git.ashish.is@lostca.se> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a01:4f9:3b:505c::2; envelope-from=ashish.is@lostca.se; helo=anamika.lostca.se X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: Ashish SHUKLA * gnu/packages/dns.scm (knot-resolver): Update to 5.7.5. Change-Id: I8e62f61c13a8161fae4fb909fad7b1522d4c3d52 --- Hi, As per the release notes[0]: > Security > DoS: fix unconfirmed crashes with the line below (!1683) [system] requirement "h && h->end > h->begin" failed in queue_pop_impl References: [0] https://www.knot-resolver.cz/2025-04-24-knot-resolver-5.7.5.html gnu/packages/dns.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 3d780019a0..7ac5b9e3f6 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -987,14 +987,14 @@ (define-public knot (define-public knot-resolver (package (name "knot-resolver") - (version "5.7.4") + (version "5.7.5") (source (origin (method url-fetch) (uri (string-append "https://secure.nic.cz/files/knot-resolver/" "knot-resolver-" version ".tar.xz")) (sha256 (base32 - "1j6rig8mb4sh11q6cfhqmlsaxw41fwiglkflz8d08a38y3nacvbb")))) + "0rnz7k5pjqd4ds46iyf6r7xwrci0apm2sr6lpaf9sncjmbwrq8w0")))) (build-system meson-build-system) (outputs '("out" "doc")) (arguments base-commit: 475173e4f25ad6437ee770b83e741d759f5ce380 -- 2.49.0 From unknown Sun Jun 22 00:37:40 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: ashish.is@lostca.se Subject: bug#78300: closed (Re: [bug#78300] [PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes]) Message-ID: References: <87y0v24430.fsf@gnu.org> <03e90cc645c12cd48f07ca6b062a593ba405121f.1746630057.git.ashish.is@lostca.se> X-Gnu-PR-Message: they-closed 78300 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 78300@debbugs.gnu.org Date: Mon, 12 May 2025 08:55:06 +0000 Content-Type: multipart/mixed; boundary="----------=_1747040106-15199-1" This is a multi-part message in MIME format... ------------=_1747040106-15199-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #78300: [PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes] which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 78300@debbugs.gnu.org. --=20 78300: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D78300 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1747040106-15199-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 78300-done) by debbugs.gnu.org; 12 May 2025 08:54:57 +0000 Received: from localhost ([127.0.0.1]:50069 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uEOw4-0003ur-3P for submit@debbugs.gnu.org; Mon, 12 May 2025 04:54:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45030) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uEOvu-0003tr-AV for 78300-done@debbugs.gnu.org; Mon, 12 May 2025 04:54:46 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uEOvo-00033I-OC; Mon, 12 May 2025 04:54:40 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=PJLbprkpoOf2O+g1jEZQ+E5yWxQ29YBg9ohIuq+KiW8=; b=PIJsxGXeAhNXVFrUuDUP hkimS0gqV0iFk8g4RF3kHRkBCfu+b7evkXHLBkVWvj3QJw1xhbIaxLctJ+RrLhNBH+hQnD8QKPKH8 Qc1LoujalJKmUeEK8lrKBmcMnq5Q86PscZgkZh2337X0ww7aRb4sZS//KZmDbHB8Ca3yckopMj97X rZC0Sujg6gTVvsKPOcG/MNwfR+ifyrQW9bM0iL3kHvFSQGy9fUv2hpQLQrUFnxop9KJiJMoUFsEJk IU2K4bSxhCy6MnSCC+UvVByKOUQIPQT/yVZnjKw1Bey4yL1dgOnVZYDw6esEZ6mwAV5dglxZLbhvg yZSpxU84GtAHrQ==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: ashish.is@lostca.se Subject: Re: [bug#78300] [PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes] In-Reply-To: <03e90cc645c12cd48f07ca6b062a593ba405121f.1746630057.git.ashish.is@lostca.se> (ashish is's message of "Wed, 7 May 2025 15:00:58 +0000") References: <03e90cc645c12cd48f07ca6b062a593ba405121f.1746630057.git.ashish.is@lostca.se> Date: Mon, 12 May 2025 10:37:39 +0200 Message-ID: <87y0v24430.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 78300-done Cc: Sharlatan Hellseher , 78300-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) ashish.is@lostca.se writes: > From: Ashish SHUKLA > > * gnu/packages/dns.scm (knot-resolver): Update to 5.7.5. > > Change-Id: I8e62f61c13a8161fae4fb909fad7b1522d4c3d52 Applied, thanks! ------------=_1747040106-15199-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 7 May 2025 15:02:27 +0000 Received: from localhost ([127.0.0.1]:45512 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uCgHz-0000XC-Aj for submit@debbugs.gnu.org; Wed, 07 May 2025 11:02:27 -0400 Received: from lists.gnu.org ([2001:470:142::17]:45466) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uCgHx-0000Ws-1W for submit@debbugs.gnu.org; Wed, 07 May 2025 11:02:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uCgHr-0001Ky-Ie for guix-patches@gnu.org; Wed, 07 May 2025 11:02:19 -0400 Received: from anamika.lostca.se ([2a01:4f9:3b:505c::2]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uCgHp-0002C1-EB for guix-patches@gnu.org; Wed, 07 May 2025 11:02:19 -0400 Received: from borboleta.inet6.in (unknown [IPv6:2a01:4f9:3070:1aea::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id E5C961FCAE; Wed, 7 May 2025 15:02:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1746630134; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=ZtuzgxLFUKXRIGJZhQCs+O5IZ8jlMwjeKFL9R19fyrk=; b=DX7TUuvUk5YAo2rJ8KyuAfub6ClfY/r4OzdyixYL8u8WVtT3alSzz+X2Nd7VvvLUAAybbC IL/Tg16PuuJ49rh6hseAWxrkrjpI66mnzA0LEswJ9J1R0o7wBKUDe6R+dGbK1q4I35iuGy f6WgOXe/Wm/SeL+OhyTH18oWYtYUmpw= From: ashish.is@lostca.se To: guix-patches@gnu.org Subject: [PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes] Date: Wed, 7 May 2025 15:00:58 +0000 Message-ID: <03e90cc645c12cd48f07ca6b062a593ba405121f.1746630057.git.ashish.is@lostca.se> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 X-Debbugs-Cc: Sharlatan Hellseher Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a01:4f9:3b:505c::2; envelope-from=ashish.is@lostca.se; helo=anamika.lostca.se X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit Cc: Ashish SHUKLA X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: Ashish SHUKLA * gnu/packages/dns.scm (knot-resolver): Update to 5.7.5. Change-Id: I8e62f61c13a8161fae4fb909fad7b1522d4c3d52 --- Hi, As per the release notes[0]: > Security > DoS: fix unconfirmed crashes with the line below (!1683) [system] requirement "h && h->end > h->begin" failed in queue_pop_impl References: [0] https://www.knot-resolver.cz/2025-04-24-knot-resolver-5.7.5.html gnu/packages/dns.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 3d780019a0..7ac5b9e3f6 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -987,14 +987,14 @@ (define-public knot (define-public knot-resolver (package (name "knot-resolver") - (version "5.7.4") + (version "5.7.5") (source (origin (method url-fetch) (uri (string-append "https://secure.nic.cz/files/knot-resolver/" "knot-resolver-" version ".tar.xz")) (sha256 (base32 - "1j6rig8mb4sh11q6cfhqmlsaxw41fwiglkflz8d08a38y3nacvbb")))) + "0rnz7k5pjqd4ds46iyf6r7xwrci0apm2sr6lpaf9sncjmbwrq8w0")))) (build-system meson-build-system) (outputs '("out" "doc")) (arguments base-commit: 475173e4f25ad6437ee770b83e741d759f5ce380 -- 2.49.0 ------------=_1747040106-15199-1--