GNU bug report logs - #78300
[PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes]

Previous Next

To reply to this bug, email your comments to 78300 AT debbugs.gnu.org.
There is no need to reopen the bug first.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: ashish.is <at> lostca.se
To: guix-patches <at> gnu.org
Cc: Ashish SHUKLA <ashish.is <at> lostca.se>
Subject: [PATCH] gnu: knot-resolver: Update to 5.7.5. [security fixes]
Date: Wed,  7 May 2025 15:00:58 +0000

From: Ashish SHUKLA <ashish.is <at> lostca.se>

* gnu/packages/dns.scm (knot-resolver): Update to 5.7.5.

Change-Id: I8e62f61c13a8161fae4fb909fad7b1522d4c3d52
---
Hi,

As per the release notes[0]:

> Security
> DoS: fix unconfirmed crashes with the line below (!1683) [system] requirement "h && h->end > h->begin" failed in queue_pop_impl

References:
[0] https://www.knot-resolver.cz/2025-04-24-knot-resolver-5.7.5.html

 gnu/packages/dns.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm
index 3d780019a0..7ac5b9e3f6 100644
--- a/gnu/packages/dns.scm
+++ b/gnu/packages/dns.scm
@@ -987,14 +987,14 @@ (define-public knot
 (define-public knot-resolver
   (package
     (name "knot-resolver")
-    (version "5.7.4")
+    (version "5.7.5")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://secure.nic.cz/files/knot-resolver/"
                                   "knot-resolver-" version ".tar.xz"))
               (sha256
                (base32
-                "1j6rig8mb4sh11q6cfhqmlsaxw41fwiglkflz8d08a38y3nacvbb"))))
+                "0rnz7k5pjqd4ds46iyf6r7xwrci0apm2sr6lpaf9sncjmbwrq8w0"))))
     (build-system meson-build-system)
     (outputs '("out" "doc"))
     (arguments

base-commit: 475173e4f25ad6437ee770b83e741d759f5ce380
-- 
2.49.0

Message #10 received at 78300-done <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: ashish.is <at> lostca.se
Cc: Sharlatan Hellseher <sharlatanus <at> gmail.com>, 78300-done <at> debbugs.gnu.org
Subject: Re: [bug#78300] [PATCH] gnu: knot-resolver: Update to 5.7.5.
 [security fixes]
Date: Mon, 12 May 2025 10:37:39 +0200

ashish.is <at> lostca.se writes:

> From: Ashish SHUKLA <ashish.is <at> lostca.se>
>
> * gnu/packages/dns.scm (knot-resolver): Update to 5.7.5.
>
> Change-Id: I8e62f61c13a8161fae4fb909fad7b1522d4c3d52

Applied, thanks!

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.