From bfa25fcbdf5706b5aa84e9015e2da3c11fd6d217 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 17 Jan 2025 09:38:33 +0000 Subject: [PATCH 01/27] Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index a007fea..667ffb7 100644 --- a/knot.spec +++ b/knot.spec @@ -8,7 +8,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.4.3 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -324,6 +324,9 @@ getent passwd knot >/dev/null || \ %doc %{_pkgdocdir}/html %changelog +* Fri Jan 17 2025 Fedora Release Engineering - 3.4.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild + * Tue Dec 10 2024 Jakub Ružička - 3.4.3-1 - Update to 3.4.3 From c7a05c603f436bf1466977962e92320b0ff41c55 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 23 Jan 2025 12:33:32 +0100 Subject: [PATCH 02/27] Release 3.4.4-1 --- knot.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot.spec b/knot.spec index 667ffb7..2b60057 100644 --- a/knot.spec +++ b/knot.spec @@ -7,8 +7,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.4.3 -Release: 2%{?dist} +Version: 3.4.4 +Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -324,6 +324,9 @@ getent passwd knot >/dev/null || \ %doc %{_pkgdocdir}/html %changelog +* Thu Jan 23 2025 Jakub Ružička - 3.4.4-1 +- Update to 3.4.4 + * Fri Jan 17 2025 Fedora Release Engineering - 3.4.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild diff --git a/sources b/sources index 8943dbb..ebdd2bb 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.4.3.tar.xz) = c05a214a9e5564d09257aff44c0f42e9d084d47536197c95dff7aa125a8b53ed99e26c90affaa6833779778cd8d37af9cc473f108ab6acf7230c476b5858c03f -SHA512 (knot-3.4.3.tar.xz.asc) = ee8618401628a2979475fb9cf6c408d454841d5aa35fd801fdb5c24f48efc000d39160b995490341de4c0db5942deedab8991436304a9d4900560274ea526b48 +SHA512 (knot-3.4.4.tar.xz) = bf8e80d430336934083c1f7c304306de78b254fba5d3b9dd8b44065a0f1527cd78b74d498d994822ed2d364b66091ad967d3cd991bde380fbba67ea34a1ee33f +SHA512 (knot-3.4.4.tar.xz.asc) = ee66d1b1304cd4630ce002e849f02a5f722ba1506c8d32b48bd7f80659227de774a1d4331b02187b0d5c8bb5a13a06cf5c9ca6688ee3662694b866856a5a6a09 From d143e24bd6f703619a02f525e3592f0298e26df8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Thu, 23 Jan 2025 19:41:30 +0100 Subject: [PATCH 03/27] Add sysusers.d config file to allow rpm to create users/groups automatically --- knot.spec | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/knot.spec b/knot.spec index 2b60057..75ed60f 100644 --- a/knot.spec +++ b/knot.spec @@ -8,7 +8,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.4.4 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -148,6 +148,11 @@ gpg2 --verify %{SOURCE1} %{SOURCE0} %endif %autosetup -p1 +# Create a sysusers.d config file +cat >knot.sysusers.conf </dev/null || groupadd -r knot -getent passwd knot >/dev/null || \ - useradd -r -g knot -d %{_sharedstatedir}/knot -s /sbin/nologin \ - -c "Knot DNS server" knot %if 0%{?suse_version} %service_add_pre knot.service %endif @@ -273,6 +276,7 @@ getent passwd knot >/dev/null || \ %{_mandir}/man8/knotc.* %{_mandir}/man8/knotd.* %ghost %attr(770,root,knot) %dir %{_rundir}/knot +%{_sysusersdir}/knot.conf %files utils %{_bindir}/kdig @@ -324,6 +328,9 @@ getent passwd knot >/dev/null || \ %doc %{_pkgdocdir}/html %changelog +* Thu Jan 23 2025 Zbigniew Jędrzejewski-Szmek - 3.4.4-2 +- Add sysusers.d config file to allow rpm to create users/groups automatically + * Thu Jan 23 2025 Jakub Ružička - 3.4.4-1 - Update to 3.4.4 From c4c752235536431e273ed20795656e2d2b26c377 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 19 Mar 2025 15:57:06 +0100 Subject: [PATCH 04/27] Release 3.4.5-1 --- knot.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot.spec b/knot.spec index 75ed60f..5dc40bc 100644 --- a/knot.spec +++ b/knot.spec @@ -7,8 +7,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.4.4 -Release: 2%{?dist} +Version: 3.4.5 +Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -328,6 +328,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Wed Mar 19 2025 Jakub Ružička - 3.4.5-1 +- Update to 3.4.5 + * Thu Jan 23 2025 Zbigniew Jędrzejewski-Szmek - 3.4.4-2 - Add sysusers.d config file to allow rpm to create users/groups automatically diff --git a/sources b/sources index ebdd2bb..b9c4389 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.4.4.tar.xz) = bf8e80d430336934083c1f7c304306de78b254fba5d3b9dd8b44065a0f1527cd78b74d498d994822ed2d364b66091ad967d3cd991bde380fbba67ea34a1ee33f -SHA512 (knot-3.4.4.tar.xz.asc) = ee66d1b1304cd4630ce002e849f02a5f722ba1506c8d32b48bd7f80659227de774a1d4331b02187b0d5c8bb5a13a06cf5c9ca6688ee3662694b866856a5a6a09 +SHA512 (knot-3.4.5.tar.xz) = 62e7023fa2a9b2323104816dbc2adeec513b70c1891f5f87ab4e951d0db18717f1089bab8b5d2ada008fcf2efd9f0547881084a2e6121891e15cbe9992528c9e +SHA512 (knot-3.4.5.tar.xz.asc) = 50b5c798dac5b7370508c9cc7571e2b3bda0f38a3b521b92710f779adb33a370d313a7ee41a6daffabdba5cf28e50c2a7ac463318b017a3eea826a011951cac9 From 14ad9e8872017ede2038a249174789a478b30e7f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 10 Apr 2025 14:56:53 +0200 Subject: [PATCH 05/27] Release 3.4.6-1 --- knot.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index 5dc40bc..767c5c4 100644 --- a/knot.spec +++ b/knot.spec @@ -7,7 +7,7 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.4.5 +Version: 3.4.6 Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz @@ -328,6 +328,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Thu Apr 10 2025 Jakub Ružička - 3.4.6-1 +- Update to 3.4.6 + * Wed Mar 19 2025 Jakub Ružička - 3.4.5-1 - Update to 3.4.5 diff --git a/sources b/sources index b9c4389..86febab 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.4.5.tar.xz) = 62e7023fa2a9b2323104816dbc2adeec513b70c1891f5f87ab4e951d0db18717f1089bab8b5d2ada008fcf2efd9f0547881084a2e6121891e15cbe9992528c9e -SHA512 (knot-3.4.5.tar.xz.asc) = 50b5c798dac5b7370508c9cc7571e2b3bda0f38a3b521b92710f779adb33a370d313a7ee41a6daffabdba5cf28e50c2a7ac463318b017a3eea826a011951cac9 +SHA512 (knot-3.4.6.tar.xz) = 30e6a843c5b4b89fd51f062f138e031a96cbaf86db5a559ab10dc98d3705086bd987bf99deb5f2c077f7201af8f05311ab8b579bfafa7d285ca4c3e78de8c096 +SHA512 (knot-3.4.6.tar.xz.asc) = 400512cfddadd93e4b536d2421126ee5fce19fa03e0ad6cee2407b1f67e242b9d65ac4ea3f527c17a7100cb63b583cf8a4ca617f6fe119cd4f15a001a0c80abf From da48f736c7765558cf31e43f30a6ccc7bf994b48 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 4 Jun 2025 12:17:47 +0200 Subject: [PATCH 06/27] Release 3.4.7-1 --- knot.spec | 85 ++++++++++++++++++++++++++++++++++++++++++++++++++++++- sources | 4 +-- 2 files changed, 86 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index 767c5c4..2aedafe 100644 --- a/knot.spec +++ b/knot.spec @@ -2,12 +2,19 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 +%if 0%{?fedora} >= 40 || 0%{?rhel} >= 9 +# use modern %pyproject_* macros on distros which support them +%define PYPROJECT 1 +%else +# use older %py3_* macros on older/other distros +%define PYPROJECT 0 +%endif %define BASE_VERSION %(echo "%{version}" | sed 's/^\\([^.]\\+\\.[^.]\\+\\).*/\\1/') %define repodir %{_builddir}/%{name}-%{version} Summary: High-performance authoritative DNS server Name: knot -Version: 3.4.6 +Version: 3.4.7 Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz @@ -39,6 +46,9 @@ BuildRequires: pkgconfig(libmnl) BuildRequires: pkgconfig(libnghttp2) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(systemd) +%if 0%{?fedora} || 0%{?rhel} +BuildRequires: softhsm +%endif # dnstap dependencies BuildRequires: pkgconfig(libfstrm) BuildRequires: pkgconfig(libprotobuf-c) @@ -46,6 +56,15 @@ BuildRequires: pkgconfig(libprotobuf-c) BuildRequires: pkgconfig(libmaxminddb) # XDP dependencies BuildRequires: pkgconfig(libbpf) +# Python modules (python3-libknot, knot-exporter) dependencies +BuildRequires: python3-devel +%if 0%{?PYPROJECT} +BuildRequires: pyproject-rpm-macros +BuildRequires: python3-pip +BuildRequires: python3-hatchling +%else +BuildRequires: python3-setuptools +%endif # Distro-dependent dependencies %if 0%{?suse_version} @@ -129,6 +148,23 @@ Requires: %{name} = %{version}-%{release} %description module-geoip The package contains geoip Knot DNS module for geography-based responses. +%package exporter +Summary: Prometheus exporter for Knot DNS +BuildArch: noarch +Requires: %{name}-libs%{?_isa} = %{version}-%{release} + +%description exporter +The package provides Python Prometheus exporter for Knot DNS. + +%package -n python3-libknot +Summary: Python bindings for libknot +BuildArch: noarch +Requires: %{name}-libs%{?_isa} = %{version}-%{release} +%{?python_provide:%python_provide python3-libknot} + +%description -n python3-libknot +The package provides Python bindings for the libknot shared library. + %package doc Summary: Documentation for the Knot DNS server BuildArch: noarch @@ -179,9 +215,43 @@ CFLAGS="%{optflags} -DNDEBUG -Wno-unused" make %{?_smp_mflags} make html +# build python3-libknot +pushd python/libknot +%if %{PYPROJECT} +%pyproject_wheel +%else +%py3_build +%endif +popd +# build knot-exporter +pushd python/knot_exporter +%if %{PYPROJECT} +%pyproject_wheel +%else +%py3_build +%endif +popd + %install make install DESTDIR=%{buildroot} +# install python3-libknot +pushd python/libknot +%if %{PYPROJECT} +%pyproject_install +%else +%py3_install +%endif +popd +# install knot-exporter +pushd python/knot_exporter +%if %{PYPROJECT} +%pyproject_install +%else +%py3_install +%endif +popd + # install documentation install -d -m 0755 %{buildroot}%{_pkgdocdir}/samples install -p -m 0644 -t %{buildroot}%{_pkgdocdir}/samples samples/*.zone* @@ -302,6 +372,15 @@ V=1 make check %files module-geoip %{_libdir}/knot/modules-*/geoip.so +%files exporter +%{_bindir}/knot-exporter +%{python3_sitelib}/knot_exporter +%{python3_sitelib}/knot_exporter-*-info + +%files -n python3-libknot +%{python3_sitelib}/libknot +%{python3_sitelib}/libknot-*-info + %files libs %license COPYING %doc NEWS @@ -328,6 +407,10 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Wed Jun 04 2025 Jakub Ružička - 3.4.7-1 +- Update to 3.4.7 +- Add new knot-exporter and python3-libknot packages + * Thu Apr 10 2025 Jakub Ružička - 3.4.6-1 - Update to 3.4.6 diff --git a/sources b/sources index 86febab..c5dab5b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.4.6.tar.xz) = 30e6a843c5b4b89fd51f062f138e031a96cbaf86db5a559ab10dc98d3705086bd987bf99deb5f2c077f7201af8f05311ab8b579bfafa7d285ca4c3e78de8c096 -SHA512 (knot-3.4.6.tar.xz.asc) = 400512cfddadd93e4b536d2421126ee5fce19fa03e0ad6cee2407b1f67e242b9d65ac4ea3f527c17a7100cb63b583cf8a4ca617f6fe119cd4f15a001a0c80abf +SHA512 (knot-3.4.7.tar.xz) = edc0ac8f6bcb9a2bb0221fbc438f8b0b048bd592bea0a486f2cd8bedfd52509e3692a2e29daa39fdd4c11f7d1d83aa0b0d7394b94c8e15d570535cdc2b3a2e13 +SHA512 (knot-3.4.7.tar.xz.asc) = 56f15712467b06440daf5ab8e69d69671345959a0c91d799b2c43e6eb7f14f5be543abd11ff0d99edb45bb4b397fc0ee9f02282669832778cf6e4b2d56fe550a From 4beee8e3ef5ccec0d87363d2055888eec44f86e4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 12 Jun 2025 15:27:38 +0200 Subject: [PATCH 07/27] Remove %{_isa} from new noarch packages Requires --- knot.spec | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index 2aedafe..a33e6a0 100644 --- a/knot.spec +++ b/knot.spec @@ -151,7 +151,7 @@ The package contains geoip Knot DNS module for geography-based responses. %package exporter Summary: Prometheus exporter for Knot DNS BuildArch: noarch -Requires: %{name}-libs%{?_isa} = %{version}-%{release} +Requires: %{name}-libs = %{version}-%{release} %description exporter The package provides Python Prometheus exporter for Knot DNS. @@ -159,7 +159,7 @@ The package provides Python Prometheus exporter for Knot DNS. %package -n python3-libknot Summary: Python bindings for libknot BuildArch: noarch -Requires: %{name}-libs%{?_isa} = %{version}-%{release} +Requires: %{name}-libs = %{version}-%{release} %{?python_provide:%python_provide python3-libknot} %description -n python3-libknot @@ -407,7 +407,7 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog -* Wed Jun 04 2025 Jakub Ružička - 3.4.7-1 +* Thu Jun 12 2025 Jakub Ružička - 3.4.7-1 - Update to 3.4.7 - Add new knot-exporter and python3-libknot packages From 6c5a438f27182ff83996ce3de6beddc9e6bc5579 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 24 Jul 2025 18:52:17 +0000 Subject: [PATCH 08/27] Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index a33e6a0..c42fd88 100644 --- a/knot.spec +++ b/knot.spec @@ -15,7 +15,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.4.7 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -407,6 +407,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Thu Jul 24 2025 Fedora Release Engineering - 3.4.7-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild + * Thu Jun 12 2025 Jakub Ružička - 3.4.7-1 - Update to 3.4.7 - Add new knot-exporter and python3-libknot packages From dd527b7f5e5e7841907fe308a3ce9aa6f52c12c8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 30 Jul 2025 18:51:10 +0200 Subject: [PATCH 09/27] Release 3.4.8-1 --- knot.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot.spec b/knot.spec index c42fd88..f3111d9 100644 --- a/knot.spec +++ b/knot.spec @@ -14,8 +14,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.4.7 -Release: 2%{?dist} +Version: 3.4.8 +Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -407,6 +407,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Wed Jul 30 2025 Jakub Ružička - 3.4.8-1 +- Update to 3.4.8 + * Thu Jul 24 2025 Fedora Release Engineering - 3.4.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild diff --git a/sources b/sources index c5dab5b..2b9d53a 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.4.7.tar.xz) = edc0ac8f6bcb9a2bb0221fbc438f8b0b048bd592bea0a486f2cd8bedfd52509e3692a2e29daa39fdd4c11f7d1d83aa0b0d7394b94c8e15d570535cdc2b3a2e13 -SHA512 (knot-3.4.7.tar.xz.asc) = 56f15712467b06440daf5ab8e69d69671345959a0c91d799b2c43e6eb7f14f5be543abd11ff0d99edb45bb4b397fc0ee9f02282669832778cf6e4b2d56fe550a +SHA512 (knot-3.4.8.tar.xz) = 62fb62e07c751bbc63759c0c74e3967b6a245bb0c76770e109b2c1bacf1580be98315ce3ecac8adfbdd37beab7b300a06078c44e57a1189def9efbc48b8d2c3e +SHA512 (knot-3.4.8.tar.xz.asc) = 55900f6cd9963299066597da6eab2be61a9a8fb7acd562b24a6883466e132372b99fc9e9643aef39566d2eff5fec27850fed0d8b97ca8ea417626ef5c90481e1 From 5f2a9a0ff65a6f2c3f7ac531c2f23711899717b2 Mon Sep 17 00:00:00 2001 From: Python Maint Date: Fri, 15 Aug 2025 12:54:15 +0200 Subject: [PATCH 10/27] Rebuilt for Python 3.14.0rc2 bytecode --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index f3111d9..96b1692 100644 --- a/knot.spec +++ b/knot.spec @@ -15,7 +15,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.4.8 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -407,6 +407,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Fri Aug 15 2025 Python Maint - 3.4.8-2 +- Rebuilt for Python 3.14.0rc2 bytecode + * Wed Jul 30 2025 Jakub Ružička - 3.4.8-1 - Update to 3.4.8 From ddd930d7524ff6ba95206cb0b44228408fac84b3 Mon Sep 17 00:00:00 2001 From: Python Maint Date: Fri, 19 Sep 2025 12:24:39 +0200 Subject: [PATCH 11/27] Rebuilt for Python 3.14.0rc3 bytecode --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index 96b1692..5ec2d74 100644 --- a/knot.spec +++ b/knot.spec @@ -15,7 +15,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.4.8 -Release: 2%{?dist} +Release: 3%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -407,6 +407,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Fri Sep 19 2025 Python Maint - 3.4.8-3 +- Rebuilt for Python 3.14.0rc3 bytecode + * Fri Aug 15 2025 Python Maint - 3.4.8-2 - Rebuilt for Python 3.14.0rc2 bytecode From 52aa1c6b27ca981abe9960c0a4161be7204be75e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 16 Oct 2025 18:23:12 +0200 Subject: [PATCH 12/27] Release 3.5.1-1 --- knot.spec | 41 +++++++++++++++++++++++++++++++++++------ sources | 4 ++-- 2 files changed, 37 insertions(+), 8 deletions(-) diff --git a/knot.spec b/knot.spec index 5ec2d74..322d68d 100644 --- a/knot.spec +++ b/knot.spec @@ -14,8 +14,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.4.8 -Release: 3%{?dist} +Version: 3.5.1 +Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -46,6 +46,7 @@ BuildRequires: pkgconfig(libmnl) BuildRequires: pkgconfig(libnghttp2) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(systemd) +BuildRequires: pkgconfig(hiredis) %if 0%{?fedora} || 0%{?rhel} BuildRequires: softhsm %endif @@ -94,6 +95,8 @@ Requires(postun): systemd Requires: %{name}-libs%{?_isa} = %{version}-%{release} +Recommends: %{name}-keymgr + %if 0%{?suse_version} Provides: group(knot) %endif @@ -103,8 +106,8 @@ Knot DNS is a high-performance authoritative DNS server implementation. %package libs Summary: Libraries used by the Knot DNS server and client applications -# Knot DNS 3.4+ isn't compatible with earlier knot-resolver -Conflicts: knot-resolver < 5.7.4-2 +# Knot DNS 3.5+ isn't compatible with earlier knot-resolver +Conflicts: knot-resolver < 5.7.6-3 %description libs The package contains shared libraries used by the Knot DNS server and @@ -134,6 +137,13 @@ Requires: %{name}-libs%{?_isa} = %{version}-%{release} %description dnssecutils The package contains DNSSEC tools shipped with the Knot DNS server. +%package keymgr +Summary: Knot DNS key management utility +Requires: %{name}-libs%{?_isa} = %{version}-%{release} + +%description keymgr +The package contains keymgr program for Knot DNS key management. + %package module-dnstap Summary: dnstap module for Knot DNS Requires: %{name} = %{version}-%{release} @@ -165,6 +175,13 @@ Requires: %{name}-libs = %{version}-%{release} %description -n python3-libknot The package provides Python bindings for the libknot shared library. +%package -n valkey-module-knot +Summary: Valkey module for Knot DNS. +Requires: %{name}-libs = %{version}-%{release} + +%description -n valkey-module-knot +The package provides Valkey module for Knot DNS. + %package doc Summary: Documentation for the Knot DNS server BuildArch: noarch @@ -205,9 +222,11 @@ CFLAGS="%{optflags} -DNDEBUG -Wno-unused" --libexecdir=/usr/lib/knot \ --with-rundir=/run/knot \ --with-moduledir=%{_libdir}/knot/modules-%{BASE_VERSION} \ + --with-redisdir=%{_libdir}/valkey/modules \ --with-storage=/var/lib/knot \ %{?configure_db_sizes} \ %{?configure_quic} \ + --enable-redis=auto \ --disable-static \ --enable-dnstap=yes \ --with-module-dnstap=shared \ @@ -333,7 +352,6 @@ V=1 make check %{_unitdir}/knot.service %{_sbindir}/kcatalogprint %{_sbindir}/kjournalprint -%{_sbindir}/keymgr %{_sbindir}/knotc %{_sbindir}/knotd %if 0%{?suse_version} @@ -342,7 +360,6 @@ V=1 make check %{_mandir}/man5/knot.conf.* %{_mandir}/man8/kcatalogprint.* %{_mandir}/man8/kjournalprint.* -%{_mandir}/man8/keymgr.* %{_mandir}/man8/knotc.* %{_mandir}/man8/knotd.* %ghost %attr(770,root,knot) %dir %{_rundir}/knot @@ -366,6 +383,10 @@ V=1 make check %{_mandir}/man1/kzonecheck.* %{_mandir}/man1/kzonesign.* +%files keymgr +%{_sbindir}/keymgr +%{_mandir}/man8/keymgr.* + %files module-dnstap %{_libdir}/knot/modules-*/dnstap.so @@ -381,6 +402,9 @@ V=1 make check %{python3_sitelib}/libknot %{python3_sitelib}/libknot-*-info +%files -n valkey-module-knot +%attr(0755, root, root) %{_libdir}/valkey/modules/knot.so + %files libs %license COPYING %doc NEWS @@ -407,6 +431,11 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Thu Oct 16 2025 Jakub Ružička - 3.5.1-1 +- Update to 3.5.1 +- Add new valkey-module-knot package +- Split keymgr into knot-keymgr package + * Fri Sep 19 2025 Python Maint - 3.4.8-3 - Rebuilt for Python 3.14.0rc3 bytecode diff --git a/sources b/sources index 2b9d53a..5f51682 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.4.8.tar.xz) = 62fb62e07c751bbc63759c0c74e3967b6a245bb0c76770e109b2c1bacf1580be98315ce3ecac8adfbdd37beab7b300a06078c44e57a1189def9efbc48b8d2c3e -SHA512 (knot-3.4.8.tar.xz.asc) = 55900f6cd9963299066597da6eab2be61a9a8fb7acd562b24a6883466e132372b99fc9e9643aef39566d2eff5fec27850fed0d8b97ca8ea417626ef5c90481e1 +SHA512 (knot-3.5.1.tar.xz) = f4f42425fe20a0632489a6de642993515a7914b0392553dc8842e3ec2a4ab0c515dd3e11799c90a7f36e79d83fa92998aa6f03a5c6c527d1520c2cb6388fc9ba +SHA512 (knot-3.5.1.tar.xz.asc) = 740528e26e999bf4c12cc2995838f8d1bf0aaac68d3bc823f45090ed5f498bb3cb294b4c07fa0056dd8b7033a7502f800cbdf608276fbf40c79d566035aca8d3 From e93f63e14a45244eb059f8e7091c74994bfeae86 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Fri, 19 Dec 2025 15:09:23 +0100 Subject: [PATCH 13/27] Release 3.5.2-1 --- knot.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index 322d68d..4b79d07 100644 --- a/knot.spec +++ b/knot.spec @@ -14,7 +14,7 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.1 +Version: 3.5.2 Release: 1%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Fri Dec 19 2025 Jakub Ružička - 3.5.2-1 +- Update to 3.5.2 + * Thu Oct 16 2025 Jakub Ružička - 3.5.1-1 - Update to 3.5.1 - Add new valkey-module-knot package diff --git a/sources b/sources index 5f51682..b941cb1 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.1.tar.xz) = f4f42425fe20a0632489a6de642993515a7914b0392553dc8842e3ec2a4ab0c515dd3e11799c90a7f36e79d83fa92998aa6f03a5c6c527d1520c2cb6388fc9ba -SHA512 (knot-3.5.1.tar.xz.asc) = 740528e26e999bf4c12cc2995838f8d1bf0aaac68d3bc823f45090ed5f498bb3cb294b4c07fa0056dd8b7033a7502f800cbdf608276fbf40c79d566035aca8d3 +SHA512 (knot-3.5.2.tar.xz) = 4dd8e42088f792459859da807427024ded926c2a8fb5b9fd4596b631a184269e3d84f0cd4be9192f2546977c598c418f8d44cabccbc393f9f7cf2f0dd5adc595 +SHA512 (knot-3.5.2.tar.xz.asc) = 5f6ee7fedc0d5b904572d2f6d47858065cdc4efa7217b4e9dcbb38ae63a1533646ba2b042bb0c1fe533a3caf6ba41c81010616393d2a0adcea77712608931b38 From 2cc594afcfad57bafd4d5de54630f8f31bf8484d Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 16 Jan 2026 18:02:21 +0000 Subject: [PATCH 14/27] Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index 4b79d07..5318ad9 100644 --- a/knot.spec +++ b/knot.spec @@ -15,7 +15,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.5.2 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-3.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Fri Jan 16 2026 Fedora Release Engineering - 3.5.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild + * Fri Dec 19 2025 Jakub Ružička - 3.5.2-1 - Update to 3.5.2 From fc398a4a26e8ccf6f06c99b431828ffadd1f46da Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Sat, 28 Mar 2026 23:04:54 +0100 Subject: [PATCH 15/27] fix mixed-use-of-spaces-and-tabs and macro-in-comment --- knot.spec | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/knot.spec b/knot.spec index 5318ad9..13bb497 100644 --- a/knot.spec +++ b/knot.spec @@ -3,10 +3,10 @@ %define GPG_CHECK 1 %if 0%{?fedora} >= 40 || 0%{?rhel} >= 9 -# use modern %pyproject_* macros on distros which support them +# use modern pyproject_* macros on distros which support them %define PYPROJECT 1 %else -# use older %py3_* macros on older/other distros +# use older py3_* macros on older/other distros %define PYPROJECT 0 %endif %define BASE_VERSION %(echo "%{version}" | sed 's/^\\([^.]\\+\\.[^.]\\+\\).*/\\1/') @@ -58,13 +58,13 @@ BuildRequires: pkgconfig(libmaxminddb) # XDP dependencies BuildRequires: pkgconfig(libbpf) # Python modules (python3-libknot, knot-exporter) dependencies -BuildRequires: python3-devel +BuildRequires: python3-devel %if 0%{?PYPROJECT} -BuildRequires: pyproject-rpm-macros -BuildRequires: python3-pip -BuildRequires: python3-hatchling +BuildRequires: pyproject-rpm-macros +BuildRequires: python3-pip +BuildRequires: python3-hatchling %else -BuildRequires: python3-setuptools +BuildRequires: python3-setuptools %endif # Distro-dependent dependencies From b38277f3bb693ff11f4776b01923f17cc33f7a55 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Sat, 28 Mar 2026 23:20:33 +0100 Subject: [PATCH 16/27] fix summary-not-capitalized and summary-ended-with-dot --- knot.spec | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/knot.spec b/knot.spec index 13bb497..f8d40f4 100644 --- a/knot.spec +++ b/knot.spec @@ -145,18 +145,18 @@ Requires: %{name}-libs%{?_isa} = %{version}-%{release} The package contains keymgr program for Knot DNS key management. %package module-dnstap -Summary: dnstap module for Knot DNS +Summary: Knot DNS dnstap module Requires: %{name} = %{version}-%{release} %description module-dnstap -The package contains dnstap Knot DNS module for logging DNS traffic. +The package contains Knot DNS module for logging DNS traffic in dnstap format. %package module-geoip -Summary: geoip module for Knot DNS +Summary: Knot DNS geoip module Requires: %{name} = %{version}-%{release} %description module-geoip -The package contains geoip Knot DNS module for geography-based responses. +The package contains Knot DNS module for geography-based responses. %package exporter Summary: Prometheus exporter for Knot DNS @@ -176,11 +176,11 @@ Requires: %{name}-libs = %{version}-%{release} The package provides Python bindings for the libknot shared library. %package -n valkey-module-knot -Summary: Valkey module for Knot DNS. +Summary: Knot DNS module for Valkey support Requires: %{name}-libs = %{version}-%{release} %description -n valkey-module-knot -The package provides Valkey module for Knot DNS. +The package provides Knot DNS module to support storing zone data in Valkey (Redis). %package doc Summary: Documentation for the Knot DNS server From 6b682bb598a8f18529cddfcd2ea02d79f0ab39c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Sat, 28 Mar 2026 23:20:51 +0100 Subject: [PATCH 17/27] fix non-etc-or-var-file-marked-as-conffile --- knot.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index f8d40f4..af8f14d 100644 --- a/knot.spec +++ b/knot.spec @@ -344,7 +344,7 @@ V=1 make check %attr(750,root,knot) %dir %{_sysconfdir}/knot %config(noreplace) %attr(640,root,knot) %{_sysconfdir}/knot/knot.conf %if 0%{?fedora} || 0%{?rhel} > 7 -%config(noreplace) %attr(644,root,root) %{_datadir}/dbus-1/system.d/cz.nic.knotd.conf +%attr(644,root,root) %{_datadir}/dbus-1/system.d/cz.nic.knotd.conf %endif %attr(770,root,knot) %dir %{_sharedstatedir}/knot %dir %{_libdir}/knot From 7560d696c51b492b32b1441bee4103ab209d59cd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Sat, 28 Mar 2026 23:23:47 +0100 Subject: [PATCH 18/27] fix license, release 3.5 switched from GPLv3+ to GPLv2+ --- knot.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index af8f14d..83143dd 100644 --- a/knot.spec +++ b/knot.spec @@ -16,7 +16,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.5.2 Release: 2%{?dist} -License: GPL-3.0-or-later +License: GPL-2.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz From 57e9234db18af44b23b837f67bb2922fc7a86168 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Sat, 28 Mar 2026 23:00:24 +0100 Subject: [PATCH 19/27] new upstream release, 3.5.3 --- knot.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot.spec b/knot.spec index 83143dd..831fee6 100644 --- a/knot.spec +++ b/knot.spec @@ -14,8 +14,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.2 -Release: 2%{?dist} +Version: 3.5.3 +Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Sat Mar 28 2026 Jan Včelák - 3.5.3-1 +- Update to 3.5.3 + * Fri Jan 16 2026 Fedora Release Engineering - 3.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild diff --git a/sources b/sources index b941cb1..8fba9cd 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.2.tar.xz) = 4dd8e42088f792459859da807427024ded926c2a8fb5b9fd4596b631a184269e3d84f0cd4be9192f2546977c598c418f8d44cabccbc393f9f7cf2f0dd5adc595 -SHA512 (knot-3.5.2.tar.xz.asc) = 5f6ee7fedc0d5b904572d2f6d47858065cdc4efa7217b4e9dcbb38ae63a1533646ba2b042bb0c1fe533a3caf6ba41c81010616393d2a0adcea77712608931b38 +SHA512 (knot-3.5.3.tar.xz) = 7064a18ce10fa9488176592baddfda32b55f6ca2470dce4083c82aca8fae95f568cb9ddd2bb9f55466eeffbb04ea616e67014f44b94f2fb2b8f98f8a419271a3 +SHA512 (knot-3.5.3.tar.xz.asc) = 4ad40aaba569b4e6ccf3b6f264d3e45866855d5c388f6bd8140704ad9db09ef71d271c59704ca8e92bd39c0e7d62894d535b1f4e0642d1db33d113855ac6d6bd From 99e18d3da25f3a16301c9bd1c49a5f04c1ebe40e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Tue, 7 Apr 2026 15:26:58 +0200 Subject: [PATCH 20/27] new upstream release, 3.5.4 --- knot.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index 831fee6..82d7a5e 100644 --- a/knot.spec +++ b/knot.spec @@ -14,7 +14,7 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.3 +Version: 3.5.4 Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Tue Apr 07 2026 Jan Včelák - 3.5.4-1 +- Update to 3.5.4 + * Sat Mar 28 2026 Jan Včelák - 3.5.3-1 - Update to 3.5.3 diff --git a/sources b/sources index 8fba9cd..8bfb532 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.3.tar.xz) = 7064a18ce10fa9488176592baddfda32b55f6ca2470dce4083c82aca8fae95f568cb9ddd2bb9f55466eeffbb04ea616e67014f44b94f2fb2b8f98f8a419271a3 -SHA512 (knot-3.5.3.tar.xz.asc) = 4ad40aaba569b4e6ccf3b6f264d3e45866855d5c388f6bd8140704ad9db09ef71d271c59704ca8e92bd39c0e7d62894d535b1f4e0642d1db33d113855ac6d6bd +SHA512 (knot-3.5.4.tar.xz) = 2dd51cc2d5c80a9570a8cd89cf094e7445ba60cc44df8152a932da5be2e8734a4c3916d6c36e6dea74031afab5d2af52e64bc7ce9efb93efe752c54ad5a3a818 +SHA512 (knot-3.5.4.tar.xz.asc) = 10da9849134a07303a075d26a9c3a5e59528f8251b250874e34404d71432115f9f1f98c059cf48fb42361f30fb7bbdc0de013f3d2e3ffa8a663bc78048e7e7bd From 18d97b0eb17048e434c5698e298f7341d91689ac Mon Sep 17 00:00:00 2001 From: Python Maint Date: Wed, 3 Jun 2026 22:20:02 +0200 Subject: [PATCH 21/27] Rebuilt for Python 3.15 --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index 82d7a5e..5b84166 100644 --- a/knot.spec +++ b/knot.spec @@ -15,7 +15,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.5.4 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Wed Jun 03 2026 Python Maint - 3.5.4-2 +- Rebuilt for Python 3.15 + * Tue Apr 07 2026 Jan Včelák - 3.5.4-1 - Update to 3.5.4 From 77a5b0fddf3f791ea4d9a5dd5632132e963057fb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Mon, 22 Jun 2026 09:54:11 +0200 Subject: [PATCH 22/27] new upstream release, 3.5.5 --- knot.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot.spec b/knot.spec index 5b84166..823e289 100644 --- a/knot.spec +++ b/knot.spec @@ -14,8 +14,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.4 -Release: 2%{?dist} +Version: 3.5.5 +Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Mon Jun 22 2026 Jan Včelák - 3.5.5-1 +- Update to 3.5.5 + * Wed Jun 03 2026 Python Maint - 3.5.4-2 - Rebuilt for Python 3.15 diff --git a/sources b/sources index 8bfb532..573df41 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.4.tar.xz) = 2dd51cc2d5c80a9570a8cd89cf094e7445ba60cc44df8152a932da5be2e8734a4c3916d6c36e6dea74031afab5d2af52e64bc7ce9efb93efe752c54ad5a3a818 -SHA512 (knot-3.5.4.tar.xz.asc) = 10da9849134a07303a075d26a9c3a5e59528f8251b250874e34404d71432115f9f1f98c059cf48fb42361f30fb7bbdc0de013f3d2e3ffa8a663bc78048e7e7bd +SHA512 (knot-3.5.5.tar.xz) = 983789c7fbbb191d4bd8e9f13050a5d5310a8bc69184b6d3440711fff88fa631ca6703b0800dd5581bd84850b4253dddfb36c2bdd46f6f158333b5ad934fdfdc +SHA512 (knot-3.5.5.tar.xz.asc) = b20be4fde7d62954898e8e1e9b9d81cad5a543d7d7636fcccebaa313905491c900f7c02c0782b8287f6262736bd08a1a208cda5557776dbeed8aaab589ef1b68 From 2a824914fe90d9be8d412f8459a9f0aeb547506c Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 16 Jul 2026 05:11:27 +0000 Subject: [PATCH 23/27] Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild --- knot.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot.spec b/knot.spec index 823e289..f98a9e8 100644 --- a/knot.spec +++ b/knot.spec @@ -15,7 +15,7 @@ Summary: High-performance authoritative DNS server Name: knot Version: 3.5.5 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Thu Jul 16 2026 Fedora Release Engineering - 3.5.5-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild + * Mon Jun 22 2026 Jan Včelák - 3.5.5-1 - Update to 3.5.5 From 8bb70dd3f625f91eac697d83d7db59ec0ff887fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Sun, 2 Aug 2026 10:51:43 +0200 Subject: [PATCH 24/27] new upstream release, 3.5.6 --- knot.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot.spec b/knot.spec index f98a9e8..8fd5882 100644 --- a/knot.spec +++ b/knot.spec @@ -14,8 +14,8 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.5 -Release: 2%{?dist} +Version: 3.5.6 +Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz Source0: https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Sun Aug 02 2026 Jan Včelák - 3.5.6-1 +- Update to 3.5.6 (security fix for ACL evaluation) + * Thu Jul 16 2026 Fedora Release Engineering - 3.5.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild diff --git a/sources b/sources index 573df41..7f37c71 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.5.tar.xz) = 983789c7fbbb191d4bd8e9f13050a5d5310a8bc69184b6d3440711fff88fa631ca6703b0800dd5581bd84850b4253dddfb36c2bdd46f6f158333b5ad934fdfdc -SHA512 (knot-3.5.5.tar.xz.asc) = b20be4fde7d62954898e8e1e9b9d81cad5a543d7d7636fcccebaa313905491c900f7c02c0782b8287f6262736bd08a1a208cda5557776dbeed8aaab589ef1b68 +SHA512 (knot-3.5.6.tar.xz) = bd1818552ab076a007aae2d14fdae053e7ffabb37bcfd6cd4485b866fe2d80675f3a4367a87afe4c4a32ea529a503f2b6857632eb74f7cac0598f15b093d286b +SHA512 (knot-3.5.6.tar.xz.asc) = 5647f932b145d6a4fd12e205fe895fe18df67a3e9c33a8bb3fc93b93762bbe46a359b86cf2482e0089eddb8fbe9fe22f306df94527804c9b3bf35631914c1101 From 8b8291b1ecaba18dab86ff3884c19db476704967 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Tue, 18 Aug 2026 21:16:56 +0200 Subject: [PATCH 25/27] new upstream release, 3.5.7 --- knot.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index 8fd5882..c1974d2 100644 --- a/knot.spec +++ b/knot.spec @@ -14,7 +14,7 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.6 +Version: 3.5.7 Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Tue Aug 18 2026 Jan Včelák - 3.5.7-1 +- Update to 3.5.7 (security fixes) + * Sun Aug 02 2026 Jan Včelák - 3.5.6-1 - Update to 3.5.6 (security fix for ACL evaluation) diff --git a/sources b/sources index 7f37c71..a3869f1 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.6.tar.xz) = bd1818552ab076a007aae2d14fdae053e7ffabb37bcfd6cd4485b866fe2d80675f3a4367a87afe4c4a32ea529a503f2b6857632eb74f7cac0598f15b093d286b -SHA512 (knot-3.5.6.tar.xz.asc) = 5647f932b145d6a4fd12e205fe895fe18df67a3e9c33a8bb3fc93b93762bbe46a359b86cf2482e0089eddb8fbe9fe22f306df94527804c9b3bf35631914c1101 +SHA512 (knot-3.5.7.tar.xz) = 83c0a6aaf85ba079639b7fb06cf7cd43daf184573414f74b8da8f795f23a4b0c2361780e6d0622b5fabe88ac62e8dcc3fb2b7f05abdb967b27917539fb063dfc +SHA512 (knot-3.5.7.tar.xz.asc) = 75e342eabe106d3700b9bcb1719c615a6b43db37e052769dc99e011fb6fae9a6b11c2bee3efcab3d252f0fae1250e320c714c7421d0255137bf2df72a5b19930 From a1bede96a3d720c751bbd0b1c03167bbf6141cca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Mon, 7 Sep 2026 08:51:06 +0200 Subject: [PATCH 26/27] new upstream release, 3.5.8 --- knot.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot.spec b/knot.spec index c1974d2..a4e3066 100644 --- a/knot.spec +++ b/knot.spec @@ -14,7 +14,7 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.7 +Version: 3.5.8 Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Mon Sep 07 2026 Jan Včelák - 3.5.8-1 +- Update to 3.5.8 (security fixes in XDP, DDNS, and TSIG) + * Tue Aug 18 2026 Jan Včelák - 3.5.7-1 - Update to 3.5.7 (security fixes) diff --git a/sources b/sources index a3869f1..03eb05a 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.7.tar.xz) = 83c0a6aaf85ba079639b7fb06cf7cd43daf184573414f74b8da8f795f23a4b0c2361780e6d0622b5fabe88ac62e8dcc3fb2b7f05abdb967b27917539fb063dfc -SHA512 (knot-3.5.7.tar.xz.asc) = 75e342eabe106d3700b9bcb1719c615a6b43db37e052769dc99e011fb6fae9a6b11c2bee3efcab3d252f0fae1250e320c714c7421d0255137bf2df72a5b19930 +SHA512 (knot-3.5.8.tar.xz) = de7212d4b2d6b5868e848db55a3b276ff650bfe46b1fb8df5a6702d6e1408d85ad25b692a95eb26bd5165e8ebf2b2b9bed6fac46d8f6b870698bb32a97c179f3 +SHA512 (knot-3.5.8.tar.xz.asc) = 9f85e7db04d310fed38811b7ee86da80bff4571ea974bc39e81d737a1fd4a587a5ff3fdcb6cea7a04c8ab2590d814411f6fc8b3b8e352ce4a7471c24901f26b4 From 29f88aa6d500d76d631449cc7e444e74f8942157 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20V=C4=8Del=C3=A1k?= Date: Tue, 8 Sep 2026 22:49:15 +0200 Subject: [PATCH 27/27] new upstream release, 3.6.0 --- knot.spec | 1144 +---------------------------------------------------- sources | 4 +- 2 files changed, 6 insertions(+), 1142 deletions(-) diff --git a/knot.spec b/knot.spec index a4e3066..30b8052 100644 --- a/knot.spec +++ b/knot.spec @@ -14,7 +14,7 @@ Summary: High-performance authoritative DNS server Name: knot -Version: 3.5.8 +Version: 3.6.0 Release: 1%{?dist} License: GPL-2.0-or-later URL: https://www.knot-dns.cz @@ -431,6 +431,9 @@ V=1 make check %doc %{_pkgdocdir}/html %changelog +* Tue Sep 08 2026 Jan Včelák - 3.6.0-1 +- Update to 3.6.0 + * Mon Sep 07 2026 Jan Včelák - 3.5.8-1 - Update to 3.5.8 (security fixes in XDP, DDNS, and TSIG) @@ -465,1142 +468,3 @@ V=1 make check - Update to 3.5.1 - Add new valkey-module-knot package - Split keymgr into knot-keymgr package - -* Fri Sep 19 2025 Python Maint - 3.4.8-3 -- Rebuilt for Python 3.14.0rc3 bytecode - -* Fri Aug 15 2025 Python Maint - 3.4.8-2 -- Rebuilt for Python 3.14.0rc2 bytecode - -* Wed Jul 30 2025 Jakub Ružička - 3.4.8-1 -- Update to 3.4.8 - -* Thu Jul 24 2025 Fedora Release Engineering - 3.4.7-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - -* Thu Jun 12 2025 Jakub Ružička - 3.4.7-1 -- Update to 3.4.7 -- Add new knot-exporter and python3-libknot packages - -* Thu Apr 10 2025 Jakub Ružička - 3.4.6-1 -- Update to 3.4.6 - -* Wed Mar 19 2025 Jakub Ružička - 3.4.5-1 -- Update to 3.4.5 - -* Thu Jan 23 2025 Zbigniew Jędrzejewski-Szmek - 3.4.4-2 -- Add sysusers.d config file to allow rpm to create users/groups automatically - -* Thu Jan 23 2025 Jakub Ružička - 3.4.4-1 -- Update to 3.4.4 - -* Fri Jan 17 2025 Fedora Release Engineering - 3.4.3-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - -* Tue Dec 10 2024 Jakub Ružička - 3.4.3-1 -- Update to 3.4.3 - -* Mon Nov 25 2024 Jakub Ružička - 3.4.2-1 -- Update to 3.4.2 - -* Mon Aug 26 2024 Jakub Ružička - 3.3.9-1 -- Update to 3.3.9 - -* Mon Jul 22 2024 Jakub Ružička - 3.3.8-1 -- Update to 3.3.8 - -* Thu Jul 18 2024 Fedora Release Engineering - 3.3.7-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - -* Tue Jun 25 2024 Jakub Ružička - 3.3.7-1 -- Update to 3.3.7 - -* Thu Jun 13 2024 Jakub Ružička - 3.3.6-1 -- Update to 3.3.6 - -* Thu Mar 07 2024 Jakub Ružička - 3.3.5-1 -- Update to 3.3.5 - -* Wed Jan 24 2024 Jakub Ružička - 3.3.4-1 -- Update to 3.3.4 - -* Sun Jan 21 2024 Fedora Release Engineering - 3.3.3-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Wed Dec 13 2023 Jakub Ružička - 3.3.3-1 -- Update to 3.3.3 - -* Fri Oct 20 2023 Jakub Ružička - 3.3.2-1 -- Update to 3.3.2 - -* Tue Sep 12 2023 Jakub Ružička - 3.3.1-1 -- Update to 3.3.1 - -* Mon Aug 28 2023 Jakub Ružička - 3.3.0-1 -- Update to 3.3.0 - -* Thu Jul 27 2023 Jakub Ružička - 3.2.9-1 -- Update to 3.2.9 - -* Thu Jul 20 2023 Fedora Release Engineering - 3.2.8-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - -* Mon Jun 26 2023 Jakub Ružička - 3.2.8-1 -- Update to 3.2.8 - -* Tue Jun 06 2023 Jakub Ružička - 3.2.7-1 -- Update to 3.2.7 -- Remove unneeded tests patch -- Use _datadir for config - -* Fri May 12 2023 Michel Alexandre Salim - 3.2.6-2 -- Add BR on libxdp on RHEL >= 9 to use with libbpf-1.x - -* Thu Apr 06 2023 Jakub Ružička - 3.2.6-1 -- Update to 3.2.6 -- Sync upstream packaging improvements - -* Thu Feb 02 2023 Jakub Ružička - 3.2.5-1 -- Update to 3.2.5 - -* Thu Jan 19 2023 Fedora Release Engineering - 3.2.4-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - -* Mon Dec 12 2022 Jakub Ružička - 3.2.4-1 -- Update to 3.2.4 - -* Mon Nov 28 2022 Jakub Ružička - 3.2.3-2 -- Rebuilt for libbpf 1.0 transition - -* Mon Nov 21 2022 Jakub Ružička - 3.2.3-1 -- Update to 3.2.3 - -* Fri Nov 04 2022 Jakub Ružička - 3.2.2-2 -- New BuildRequires: libxdp (needed for libbpf >= 1.0) - -* Tue Nov 01 2022 Jakub Ružička - 3.2.2-1 -- Update to 3.2.2 - -* Fri Sep 09 2022 Jakub Ružička - 3.2.1-1 -- Update to 3.2.1 -- Remove patches included upstream -- Update Conflicts and move to knot-libs - -* Mon Aug 22 2022 Jakub Ružička - 3.2.0-1 -- Update to 3.2.0 -- Patch: fix tests on 32-bit platforms -- Patch: revert problematic hardening of service file -- Enable QUIC -- New knot-dnssecutils subpackage -- Debian compat (knot-utils vs knot-dnsutils) -- Remove bundled(jquery) version as it differes between distros - -* Thu Jul 21 2022 Fedora Release Engineering - 3.1.8-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - -* Thu Apr 28 2022 Jakub Ružička - 3.1.8-1 -- Update to 3.1.8 - -* Wed Mar 30 2022 Jakub Ružička - 3.1.7-1 -- Update to 3.1.7 - -* Thu Feb 10 2022 Jakub Ružička - 3.1.6-1 -- Update to 3.1.6 -- Add dbus config -- Use _sharedstatedir for home - -* Thu Jan 20 2022 Fedora Release Engineering - 3.1.5-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - -* Wed Jan 05 2022 Jakub Ružička 3.1.5-1 -- Update to 3.1.5 - -* Sat Nov 06 2021 Adrian Reber - 3.1.4-2 -- Rebuilt for protobuf 3.19.0 - -* Thu Nov 04 2021 Jakub Ružička - 3.1.4-1 -- Update to 3.1.4 - -* Tue Oct 26 2021 Adrian Reber - 3.1.3-2 -- Rebuilt for protobuf 3.18.1 - -* Tue Oct 19 2021 Jakub Ružička - 3.1.3-1 -- Update to 3.1.3 - -* Thu Sep 09 2021 Jakub Ružička - 3.1.2-1 -- Update to 3.1.2 - -* Tue Aug 10 2021 Jakub Ružička - 3.1.1-1 -- Update to 3.1.1 -- Enable XDP on ARM and improve XDP config macros -- Remove patch included upstream - -* Wed Aug 04 2021 Jakub Ružička 3.1.0-2 -- Introduce a patch to fix tests on ppc64le -- Use autosetup macro to apply patches - -* Mon Aug 02 2021 Jakub Ružička - 3.1.0-1 -- Update to 3.1.0 -- Add missing BuildRequires including new libmnl for kxdpgun -- Temporarily disable XDP on ARM until issues are resolved - -* Thu Jul 22 2021 Fedora Release Engineering - 3.0.8-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - -* Fri Jul 16 2021 Jakub Ružička - 3.0.8-1 -- Update to 3.0.8 -- Print failed tests during check - -* Thu Jun 17 2021 Jakub Ružička - 3.0.7-1 -- Update to 3.0.7 - -* Fri May 14 2021 Jakub Ružička - 3.0.6-1 -- Update to 3.0.6 - -* Tue Mar 30 2021 Jakub Ružička 3.0.5-1 -- Update to 3.0.5 -- Properly escape BASE_VERSION macro -- Include module dirs in main package - -* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 3.0.4-2 -- Rebuilt for updated systemd-rpm-macros - See https://pagure.io/fesco/issue/2583. - -* Mon Feb 01 2021 Jakub Ružička - 3.0.4-1 -- Update to 3.0.4 -- Move dnstap module to subpackage -- Move geoip module to subpackage -- Remove redundant VERSION macro - -* Tue Jan 26 2021 Fedora Release Engineering - 3.0.3-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -* Thu Jan 14 08:45:48 CET 2021 Adrian Reber - 3.0.3-2 -- Rebuilt for protobuf 3.14 - -* Thu Dec 17 2020 Jakub Ružička - 3.0.3-1 -- Update to 3.0.3 - -* Wed Nov 11 2020 Jakub Ružička - 3.0.2-2 -- Remove patch included in upstream release - -* Wed Nov 11 2020 Jakub Ružička - 3.0.2-1 -- Update to 3.0.2 - -* Thu Oct 29 2020 Jakub Ružička - 3.0.1-2 -- Respect GnuTLS insecure algorithms - -* Mon Oct 12 2020 Jakub Ružička - 3.0.1-1 -- Update to 3.0.1 -- Sync packaging from upstream - -* Thu Sep 24 2020 Adrian Reber - 3.0.0-2 -- Rebuilt for protobuf 3.13 - -* Thu Sep 10 2020 Jakub Ružička 3.0.0-1 -- New major upstream release 3.0.0 -- Sync packaging from upstream - -* Wed Sep 02 2020 Jakub Ružička 2.9.6-1 -- Update to 2.9.6 - -* Tue Jul 28 2020 Fedora Release Engineering - 2.9.5-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Sun Jun 14 2020 Adrian Reber - 2.9.5-2 -- Rebuilt for protobuf 3.12 - -* Mon May 25 2020 Tomas Krizek - 2.9.5-1 -- new upstream release 2.9.5 - -* Tue May 05 2020 Tomas Krizek - 2.9.4-1 -- new upstream release 2.9.4 - -* Tue Mar 03 2020 Tomas Krizek - 2.9.3-1 -- new upstream release 2.9.3 - -* Wed Jan 29 2020 Fedora Release Engineering - 2.9.2-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - -* Fri Dec 13 2019 Tomas Krizek - 2.9.2-1 -- new upstream release 2.9.2 - -* Tue Nov 12 2019 Tomas Krizek - 2.9.1-1 -- New upstream release 2.9.1 -- add EPEL8 compatibility -- fix unsafe PGP keyring permissions - -* Tue Sep 24 2019 Tomas Krizek - 2.8.4-1 -- new upstream release 2.8.4 - -* Thu Jul 25 2019 Fedora Release Engineering - 2.8.3-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - -* Tue Jul 16 2019 Tomas Krizek - 2.8.3-1 -- New upstream release 2.8.3 - -* Wed Jun 26 2019 Tomas Krizek - 2.8.2-1 -- New upstream release 2.8.2 - -* Wed May 29 2019 Tomas Krizek - 2.8.1-1 -- New upstream release 2.8.1 -- Resolves BZ#1700251 - -* Thu Feb 28 2019 Tomas Krizek - 2.7.6-3 -- Added 01-test_net-disable-udp-send-on-unconnected.patch to disable - unnecessary failing test. Fixes BZ#1675235 - -* Fri Feb 01 2019 Fedora Release Engineering - 2.7.6-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - -* Wed Jan 23 2019 Tomas Krizek - 2.7.6-1 -Knot DNS 2.7.6 (2019-01-23) -=========================== - -Improvements: -------------- - - Zone status also shows when the zone load is scheduled - - Server workers status also shows background workers utilization - - Default control timeout for knotc was increased to 10 seconds - - Pkg-config files contain auxiliary variable with library filename - -Bugfixes: ---------- - - Configuration commit or server reload can drop some pending zone events - - Nonempty zone journal is created even though it's disabled #635 - - Zone is completely re-signed during empty dynamic update processing - - Server can crash when storing a big zone difference to the journal - - Failed to link on FreeBSD 12 with Clang - -* Mon Jan 07 2019 Tomas Krizek - 2.7.5-1 -Knot DNS 2.7.5 (2019-01-07) -=========================== - -Features: ---------- - - Keymgr supports NSEC3 salt handling - -Improvements: -------------- - - Zone history in journal is dropped apon AXFR-like zone update - - Libdnssec is no longer linked against libm #628 - - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - - Better support for libknot packaging in Python - - Manually generated KSK is 'ready' by default - - Kdig supports '+timeout' as an alias for '+time' - - Kdig supports '+nocomments' option - - Kdig no longer prints empty lines between retries - - Kdig returns failure if operations not successfully resolved #632 - - Fixed repeating of the 'KSK submission, waiting for confirmation' log - - Various improvements in documentation, Dockerfile, and tests - -Bugfixes: ---------- - - Knotc fails to unset huge configuration section - - Kjournalprint sometimes fails to display zone journal content - - Improper timing of ZSK removal during ZSK rollover - - Missing UTC time zone indication in the 'iso' keymgr list output - - A race condition in the online signing module - -* Tue Nov 13 2018 Tomas Krizek - 2.7.4-1 -Knot DNS 2.7.4 (2018-11-13) -=========================== - -Features: ---------- - - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) - -Improvements: -------------- - - Added warning log when DNSSEC events not successfully scheduled - - New semantic check on timer values in keymgr - - DS query no longer asks other addresses if got a negative answer - - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - - Extended logging for zone loading - - Various documentation improvements - -Bugfixes: ---------- - - Failed to import module configuration #613 - - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - - IXFR doesn't fall back to AXFR if malformed reply - - DNSSEC events not correctly scheduled for empty zone updates - - During algorithm rollover old keys get removed before DS TTL expires #617 - - Maximum zone's RRSIG TTL not considered during algorithm rollover #620 - -* Fri Oct 12 2018 Tomas Krizek - 2.7.3-1 -Knot DNS 2.7.3 (2018-10-11) -=========================== - -Features: ---------- - - New queryacl module for query access control - - Configurable answer rrset rotation #612 - - Configurable NSEC bitmap in online signing - -Improvements: -------------- - - Better error logging for KASP DB operations #601 - - Some documentation improvements - -Bugfixes: ---------- - - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - - Failed to link statically with embedded LMDB - - Configuration commit causes zone reload for all zones - - The statistics module overlooks TSIG record in a request - - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - - Race condition in online signing during key rollover #600 - - Server can crash if geoip module is enabled in the geo mode - -* Wed Aug 29 2018 Tomas Krizek - 2.7.2-1 -Knot DNS 2.7.2 (2018-08-29) -=========================== - -Improvements: -------------- - - Keymgr list command displays also key size - - Kjournalprint displays total occupied size in the debug mode - - Server doesn't stop if failed to load a shared module from the module directory - - Libraries libcap-ng, pthread, and dl are linked selectively if needed - -Bugfixes: ---------- - - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - - Server can crash when loading zone file difference and zone-in-journal is set - - Incorrect treatment of specific queries in the module RRL - - Failed to link module Cookies as a shared library - -* Wed Aug 15 2018 Tomas Krizek - 2.7.1-1 -Knot DNS 2.7.1 (2018-08-14) -=========================== - -Improvements: -------------- - - Added zone wire size information to zone loading log message - - Added debug log message for each unsuccessful remote address operation - - Various improvements for packaging - -Bugfixes: ---------- - - Incompatible handling of RRSIG TTL value when creating a DNS message - - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - - Default configure prefix is ignored - -Knot DNS 2.7.0 (2018-08-03) -=========================== - -Features: ---------- - - New DNS Cookies module and related '+cookie' kdig option - - New module for response tailoring according to client's subnet or geographic location - - General EDNS Client Subnet support in the server - - OSS-Fuzz integration (Thanks to Jonathan Foote) - - New '+ednsopt' kdig option (Thanks to Jan Včelák) - - Online Signing support for automatic key rollover - - Non-normal file (e.g. pipe) loading support in zscanner #542 - - Automatic SOA serial incrementation if non-empty zone difference - - New zone file load option for ignoring zone file's SOA serial - - New build-time option for alternative malloc specification - - Structured logging for DNSSEC key submission event - - Empty QNAME support in kdig - -Improvements: -------------- - - Various library and server optimizations - - Reduced memory consumption of outgoing IXFR processing - - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - - Online Signing properly signs delegations and CNAME records - - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - - DNSSEC-related records are ignored when loading zone difference with signing enabled - - Minimum allowed RSA key length was increased to 1024 - - Removed explicit dependency on Nettle - -Bugfixes: ---------- - - Possible uninitialized address buffer use in zscanner - - Possible index overflow during multiline record parsing in zscanner - - kdig +tls sometimes consumes 100 % CPU #561 - - Single-Type Signing doesn't work with single ZSK key #566 - - Zone not flushed after re-signing during zone load #594 - - Server crashes when committing empty zone transaction - - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - -Compatibility: --------------- - - Removed obsolete RRL configuration - - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - - Removed obsolete 'ixfr-from-differences' configuration option - - Removed old journal migration - - Removed module rosedb - - -* Fri Jul 13 2018 Fedora Release Engineering - 2.6.8-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Wed Jul 11 2018 Tomas Krizek - 2.6.8-1 -Knot DNS 2.6.8 (2018-07-10) -=========================== - -Features: ---------- - - New 'import-pkcs11' command in keymgr - -Improvements: -------------- - - Unixtime serial policy mimics Bind – increment if lower #593 - -Bugfixes: ---------- - - Creeping memory consuption upon server reload #584 - - Kdig incorrectly detects QNAME if 'notify' is a prefix - - Server crashes when zone sign fails #587 - - CSK->KZSK rollover retires CSK early #588 - - Server crashes when zone expires during outgoing multi-message transfer - - Kjournalprint doesn't convert zone name argument to lower-case - - Cannot switch to a previously used ksk-shared dnssec policy #589 - -* Thu May 17 2018 Tomas Krizek - 2.6.7-1 -Knot DNS 2.6.7 (2018-05-17) -=========================== - -Features: ---------- - - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - -Improvements: -------------- - - Trailing data indication from the packet parser (libknot) - - Better configuration check for a problematical option combination - -Bugfixes: ---------- - - Incomplete configuration option item name check - - Possible buffer overflow in 'knot_dname_to_str' (libknot) - - Module dnsproxy doesn't preserve letter case of QNAME - - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode - -* Wed Apr 11 2018 Tomas Krizek - 2.6.6-1 -Knot DNS 2.6.6 (2018-04-11) -=========================== - -Features: ---------- - - New EDNS option counters in the statistics module - - New '+orphan' filter for the 'zone-purge' operation - -Improvements: -------------- - - Reduced memory consuption of disabled statistics metrics - - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - - Server no longer fails to start if MODULE_DIR doesn't exist - - Configuration include doesn't fail if empty wildcard match - - Added a configuration check for a problematical option combination - -Bugfixes: ---------- - - NSEC3 chain not re-created when SOA minimum TTL changed - - Failed to start server if no template is configured - - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - - Inaccurate outgoing zone transfer size in the log message - - Invalid dname compression if empty question section - - Missing EDNS in EMALF responses - -* Mon Mar 26 2018 Iryna Shcherbina - 2.6.5-2 -- Update Python 2 dependency declarations to new packaging standards - (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - -* Mon Feb 12 2018 Tomas Krizek - 2.6.5-1 -- New upstream release 2.6.5 - -Knot DNS 2.6.5 (2018-02-12) -=========================== - -Features: ---------- - - New 'zone-notify' command in knotc - - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - -Improvements: -------------- - - Better heap memory trimming for zone operations - - Added proper polling for TLS operations in kdig - - Configuration export uses stdout as a default output - - Simplified detection of atomic operations - - Added '--disable-modules' configure option - - Small documentation updates - -Bugfixes: ---------- - - Zone retransfer doesn't work well if more masters configured - - Kdig can leak or double free memory in corner cases - - Inconsistent error outputs from dynamic configuration operations - - Failed to generate documentation on OpenBSD - -* Fri Feb 09 2018 Igor Gnatenko - 2.6.4-3 -- Escape macros in %%changelog - -* Wed Feb 07 2018 Fedora Release Engineering - 2.6.4-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Mon Jan 22 2018 Tomas Krizek - 2.6.4-1 -- Added PGP signature verification -- Added integration test - -- New upstream release 2.6.4 - -Knot DNS 2.6.4 (2018-01-02) -=========================== - -Features: ---------- - - Module synthrecord allows multiple 'network' specification - - New CSK handling support in keymgr - -Improvements: -------------- - - Allowed configuration for infinite zsk lifetime - - Increased performance and security of the module synthrecord - - Signing changeset is stored into journal even if 'zonefile-load' is whole - -Bugfixes: ---------- - - Unintentional zone re-sign during reload if empty NSEC3 salt - - Inconsistent zone names in journald structured logs - - Malformed outgoing transfer for big zone with TSIG - - Some minor DNSSEC-related issues - -Knot DNS 2.6.3 (2017-11-24) -=========================== - -Bugfixes: ---------- - - Wrong detection of signing scheme rollover - -Knot DNS 2.6.2 (2017-11-23) -=========================== - -Features: ---------- - - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support - -Improvements: -------------- - - Allowed explicit configuration for infinite ksk lifetime - - Proper error messages instead of unclear error codes in server log - - Better support for old compilers - -Bugfixes: ---------- - - Unexpected reply for DS query with an owner below a delegation point - - Old dependencies in the pkg-config file - - -* Mon Nov 06 2017 Petr Špaček - 2.6.1-1 -- New upstream release 2.6.1 - -Knot DNS 2.6.1 (2017-11-02) -=========================== - -Features: ---------- - - NSEC3 Opt-Out support in the DNSSEC signing - - New CDS/CDNSKEY publish configuration option - -Improvements: -------------- - - Simplified DNSSEC log message with DNSKEY details - - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - - New documentation sections for DNSSEC key rollovers and shared keys - - Keymgr no longer prints useless algorithm number for generated key - - Kdig prints unknown RCODE in a numeric format - - Better support for LLVM libFuzzer - -Bugfixes: ---------- - - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - - Immediate zone flush not scheduled during the zone load event - - Server crashes upon dynamic zone addition if a query module is loaded - - Kdig fails to connect over TLS due to SNI is set to server IP address - - Possible out-of-bounds memory access at the end of the input - - TCP Fast Open enabled by default in kdig breaks TLS connection - -Knot DNS 2.6.0 (2017-09-29) -=========================== - -Features: ---------- - - On-slave (inline) signing support - - Automatic DNSSEC key algorithm rollover - - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - - New 'journal-content' and 'zonefile-load' configuration options - - keymgr tries to run as user/group set in the configuration - - Public-only DNSSEC key import into KASP DB via keymgr - - NSEC3 resalt and parent DS query events are persistent in timer DB - - New processing state for a response suppression within a query module - - Enabled server side TCP Fast Open if supported - - TCP Fast Open support in kdig - -Improvements: -------------- - - Better record owner compression if related to the previous rdata dname - - NSEC(3) chain is no longer recomputed whole on every update - - Remove inconsistent and unnecessary quoting in log files - - Avoiding of overlapping key rollovers at a time - - More DNSSSEC-related semantic checks - - Extended timestamp format in keymgr - -Bugfixes: ---------- - - Incorrect journal free space computation causing inefficient space handling - - Interface-automatic broken on Linux in the presence of asymmetric routing - -Knot DNS 2.5.5 (2017-09-29) -=========================== - -Improvements: -------------- - - Constant time memory comparison in the TSIG processing - - Proper use of the ctype functions - - Generated RRSIG records have inception time 90 minutes in the past - -Bugfixes: ---------- - - Incorrect online signature for NSEC in the case of a CNAME record - - Incorrect timestamps in dnstap records - - EDNS Subnet Client validation rejects valid payloads - - Module configuration semantic checks are not executed - - Kzonecheck segfaults with unusual inputs - -Knot DNS 2.5.4 (2017-08-31) -=========================== - -Improvements: -------------- - - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - - New warning when unforced flush with disabled zone file synchronization - - New 'dnskey' keymgr command - - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - - Removed 'OK' from listing keymgr command outputs - - Extended journal and keymgr documentation and logging - -Bugfixes: ---------- - - Incorrect handling of specific corner-cases with zone-in-journal - - The 'share' keymgr command doesn't work - - Server crashes if configured with query-size and reply-size statistics options - - Malformed big integer configuration values on some 32-bit platforms - - Keymgr uses local time when parsing date inputs - - Memory leak in kdig upon IXFR query - -* Mon Jul 31 2017 Petr Spacek - 2.5.3-1 -- new upstream release -WARNING: Automatic upgrade from versions 1.y.z is no longer possible. -To migrate, upgrade your packages gradually or use contacts listed on -https://www.knot-dns.cz/support/ (if you are in trouble). - -Knot DNS 2.5.3 (2017-07-14) -=========================== - -Features: ---------- - - CSK rollover support for Single-Type Signing Scheme - -Improvements: -------------- - - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - - New documentation section for manual DNSSEC key algorithm rollover - - Initial KSK also generated in the submission state - - The 'ds' keymgr command with no parameter uses all KSK keys - - New debug mode in kjournalprint - - Updated keymgr documentation - -Bugfixes: ---------- - - Sometimes missing RRSIG by KSK in submission state. - - Minor DNSSEC-related issues - -Knot DNS 2.5.2 (2017-06-23) -=========================== - -Security: ---------- - - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) - -Improvements: -------------- - - Extended debug logging for TSIG errors - - Better error message for unknown module section in the configuration - - Module documentation compilation no longer depends on module configuration - - Extended policy section configuration semantic checks - - Improved python version compatibility in pykeymgr - - Extended migration section in the documentation - - Improved DNSSEC event timing on 32-bit systems - - New KSK rollover start log info message - - NULL qtype support in kdig - -Bugfixes: ---------- - - Failed to process included configuration - - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - - Corner case journal fixes (huge changesets, OpenWRT operation) - - Confusing event timestamps in knotc zone-status output - - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - - CDS/CDNSKEY RRSIG not updated - -Knot DNS 2.5.1 (2017-06-07) -=========================== - -Bugfixes: ---------- - - pykeymgr no longer crash on empty json files in the KASP DB directory - - pykeymgr no longer imports keys in the "removed" state - - Imported keys in the "removed" state no longer makes knotd to crash - - Including an empty configuration directory no longer makes knotd to crash - - pykeymgr is distributed and installed to the distribution tarball - -Knot DNS 2.5.0 (2017-06-05) -=========================== - -Features: ---------- - - KASP database switched from JSON files to LMDB database - - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - - Dynamic module loading support with proper module API - - Journal can store full zone contents (not only differences) - - Zone freeze/thaw support - - Updated knotc zone-status output with optional column filters - - New '[no]crypto' option in kdig - - New keymgr implementation reflecting KASP database changes - - New pykeymgr for JSON-based KASP database migration - - Removed obsolete knot1to2 utility - -Improvements: -------------- - - Added libidn2 support to kdig (with libidn fallback) - - Maximum timer database switched from configure to the server configuration - -* Wed Jul 26 2017 Fedora Release Engineering - 2.4.5-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Mon Jul 10 2017 Petr Spacek - 2.4.5-1 -New upstream release: 2.4.5 - -Knot DNS 2.4.5 (2017-06-23) -=========================== - -Security: ---------- - - Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) - -Bugfixes: ---------- - - Corner case journal fixes (huge changesets, OpenWRT operation) - -Knot DNS 2.4.4 (2017-06-05) -=========================== - -Improvements: -------------- - - Improved error handling in kjournalprint - -Bugfixes: ---------- - - Zone flush not replanned upon unsuccessful flush - - Journal inconsistency after deleting deleted zone - - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - - Unreliable LMDB mapsize detection in kjournalprint - - Some minor issues found by AddressSanitizer - -Knot DNS 2.4.3 (2017-04-11) -=========================== - -Improvements: -------------- - - New 'journal-db-mode' optimization configuration option - - The default TSIG algorithm for utilities input is HMAC-SHA256 - - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - - Added some more semantic checks on the knotc configuration operations - -Bugfixes: ---------- - - Missing 'zone' keyword in the YAML output - - Missing trailing dot in the keymgr DS owner output - - Journal logs 'invalid parameter' in several cases - - Some minor journal-related problems - -Knot DNS 2.4.2 (2017-03-23) -=========================== - -Features: ---------- - - Zscanner can store record comments placed on the same line - - Knotc status extension with version, configure, and workers parameters - -Improvements: -------------- - - Significant incoming XFR speed-up in the case of many zones - -Bugfixes: ---------- - - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - - User-driven zscanner parsing logic inconsistency - - Lower serial at master doesn't trigger any errors - - Queries with too long DNAME substitution do not return YXDOMAIN response - - Incorrect elapsed time in the DDNS log - - Failed to process forwarded DDNS request with TSIG - -* Mon Feb 27 2017 Petr Spacek - 2.4.1-1 -- new upstream release: - + fix: Transfer of a huge rrset goes into an infinite loop - + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL - + fix: Failed to build utilities with disabled daemon - + fix: Memory leaks during keys removal - + fix: Rough TSIG packet reservation causes early truncation - + fix: Minor out-of-bounds string termination write in rrset dump - + fix: Server crash during stop if failed to open timers DB - + fix: Failed to compile on OS X older than Sierra - + fix: Poor minimum UDP-max-size configuration check - + fix: Failed to receive one-record-per-message IXFR-style AXFR - + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message - + improvement: Speed-up of rdata addition into a huge rrset - + improvement: Introduce check of minumum timeout for next refresh - + improvement: Dnsproxy module can forward all queries without local resolving - -* Fri Feb 10 2017 Fedora Release Engineering - 2.4.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Tue Jan 24 2017 Petr Spacek - 2.4.0-1 -- new upstream release: - + fix: False positive semantic-check warning about invalid bitmap in NSEC - + fix: Unnecessary SOA queries upon notify with up to date serial - + fix: Timers for expired zones are reset on reload - + fix: Zone doesn't expire when the server is down - + fix: Failed to handle keys with duplicate keytags - + fix: Per zone module and global module insconsistency - + fix: Obsolete online signing module configuration - + fix: Malformed output from kjournalprint - + fix: Redundant SO_REUSEPORT activation on the TCP socket - + fix: Failed to use higher number of background workers - + improvement: Lower memory consumption with qp-trie - + improvement: Zone events and zone timers improvements - + improvement: Print all zone names in the FQDN format - + improvement: Simplified query module interface - + improvement: Shared TCP connection between SOA query and transfer - + improvement: Response Rate Limiting as a module with statistics support - + improvement: Key filters in keymgr - + features: New unified LMDB-based zone journal - + features: Server statistics support - + features: New statistics module for traffic measuring - + features: Automatic deletion of retired DNSSEC keys - + features: New control logging category - -* Fri Dec 09 2016 Jan Vcelak - 2.3.3-1 -- new upstream release: - + fix: double free when failed to apply zone journal - + fix: zone bootstrap retry interval not preserved upon zone reload - + fix: DNSSEC related records not flushed if not signed - + fix: false semantic checks warning about incorrect type in NSEC bitmap - + fix: memory leak in kzonecheck - + improvement: all zone names are fully-qualified in log - + features: new kjournalprint utility - -* Thu Nov 17 2016 Jan Vcelak - 2.3.2-1 -- new upstream release: - + fix: missing glue in some responses - + fix: knsupdate prompt printing on non-terminal - + fix: configuration policy item names in documentation - + fix: segfault on OS X Sierra - + fix: incorrect %%s expansion for the root zone - + fix: refresh not existing slave zone after restart - + fix: immediate zone refresh upon restart if refresh already scheduled - + fix: early zone transfer after restart if transfer already scheduled - + fix: not ignoring empty non-terminal parents during delegation lookup - + fix: CD bit clearing in responses - + fix: compilation error on GNU/kFreeBSD - + fix: server crash after double zone-commit if journal error - + improvement: significant speed-up of conf-commit and conf-diff operations - + improvement: new EDNS Client Subnet API - + improvement: better semantic-checks error messages - + improvement: speed-up of knotc if control operation and known socket - + improvement: zone purge operation purges also zone timers - + feature: print TLS certificate hierarchy in kdig verbose mode - + feature: new +subnet alias for +client - + feature: new mod-whoami and mod-noudp modules - + feature: new zone-purge control command - + feature: new log-queries and log-responses options for mod-dnstap - + feature: simple modules don't require empty configuration section - + feature: new zone journal path configuration option - + feature: new timeout configuration option for module dnsproxy - -* Mon Aug 29 2016 Jan Vcelak - 2.3.0-3 -- fix post-installation scriptlet (RHBZ #1370939) - -* Thu Aug 11 2016 Jan Vcelak - 2.3.0-2 -- endian independent DNS cookies (fixes build on ppc64 and s390x) - -* Tue Aug 09 2016 Jan Vcelak - 2.3.0-1 -- new upstream release: - + fix: No wildcard expansion below empty non-terminal for NSEC signed zone - + fix: Don't ignore non-existing records to be removed in IXFR - + fix: Fix kdig IXFR response processing if the transfer content is empty - + fix: Avoid multiple loads of the same PKCS #11 module - + improvement: Refactored semantic checks and better error messages - + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response - + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 - + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171) - + feature: DNS-over-TLS support in kdig (RFC 7858) - + feature: EDNS(0) padding and alignment support in kdig (RFC 7830) - -* Fri Jun 24 2016 Jan Vcelak - 2.2.1-2 -- rebuild for updated userspace-rcu - -* Mon May 30 2016 Jan Vcelak - 2.2.1-1 -- new upstream release: - + fix: Separate logging of server and zone events - + fix: Concurrent zone file flushing with many zones - + fix: Control timeout parsing in knotc - + fix: "Environment maxreaders limit reached" error in knotc - + fix: Don't apply journal changes on modified zone file - + fix: Enable multiple zone names completion in interactive knotc - + fix: Set the TC flag in a response if a glue doesn't fit the response - + fix: Disallow server reload when there is an active configuration transaction - + improvement: Distinguish unavailable zones from zones with zero serial in log messages - + improvement: Log warning and error messages to standard error output in all utilities - + improvement: Document tested PKCS #11 devices - + improvement: Extended Python configuration interface -- update requirements for Fedora 25 - -* Sun May 29 2016 Jan Vcelak - 2.2.0-3 -- update default configuration file - -* Sun May 08 2016 Jan Vcelak - 2.2.0-2 -- fix: systemd service starting - -* Tue Apr 26 2016 Jan Vcelak - 2.2.0-1 -- new upstream release: - + fix: Query/response message type setting in dnstap module - + fix: Remote address retrieval from dnstap capture in kdig - + fix: Global modules execution for queries hitting existing zones - + fix: Execution of semantic checks after an IXFR transfer - + fix: kdig failure when the first AXFR message contains just the SOA record - + fix: Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - + fix: Mark PKCS#11 generated keys as sensitive - + fix: Error when removing the only zone from the server - + fix: Don't abort knotc transaction when some check fails - + feature: URI and CAA resource record types support - + feature: RRL client address based white list - + feature: knotc interactive mode - + improvement: Consistent IXFR error messages - + improvement: Various fixes for better compatibility with PKCS#11 devices - + improvement: Various keymgr user interface improvements - + improvement: Better zone event scheduler performance with many zones - + improvement: New server control interface - + improvement: kdig uses local resolver if resolv.conf is empty - -* Wed Feb 10 2016 Jan Vcelak 2.1.1-1 -- new upstream release: - + fix: Allow import of duplicate private key into the KASP - + fix: Avoid duplicate NSEC for Wildcard No Data answer - + fix: Server crash when an incomming transfer is in progress and reload is issued - + fix: Socket polling when configured with many interfaces and threads - + improvement: Use correct source address for UDP messages recieved on ANY address - + improvement: Extend documentation of knotc commands - -* Thu Feb 04 2016 Fedora Release Engineering - 2.1.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Thu Jan 14 2016 Jan Vcelak 2.1.0-1 -- new upstream release: - + improvement: Remove implementation limit for the number of network interfaces - + improvement: Remove possibly insecure server control over a network socket - + fix: Schedule zone bootstrap after slave zone fails to load from disk - -* Sun Dec 20 2015 Jan Vcelak 2.1.0-0.1.rc1 -- new upstream pre-release: - + feature: Per-thread UDP socket binding using SO_REUSEPORT - + feature: Support for dynamic configuration database - + feature: DNSSEC, Support for cryptographic tokens via PKCS #11 interface - + feature: DNSSEC, Experimental support for online signing - + improvement: Support for zone file name patterns - + improvement: Configurable location of zone timer database - + improvement: Non-blocking network operations and better timeout handling - + improvement: Caching of Critical configuration values for better performance - + improvement: Logging of ACL failures - + improvement: RRL: Add rate-limit-slip zero support to drop all responses - + improvement: RRL: Document behavior for different rate-limit-slip options - + improvement: kdig: Warning instead of error on TSIG validation failure - + improvement: Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - + fix: synth-record module: Fix application of default configuration options - + fix: TSIG: Allow compressed TSIG name when forwarding DDNS updates - -* Wed Nov 25 2015 Jan Vcelak 2.0.2-1 -- new upstream release: - + security fix: out-of-bound read in packet parser for malformed NAPTR record - -* Thu Sep 03 2015 Jan Vcelak 2.0.1-1 -- new upstream release: - + fix: do not reload expired zones on 'knotc reload' and server startup - + fix: rare race-condition in event scheduling causing delayed event execution - + fix: skipping of non-authoritative nodes in NSEC proofs - + fix: TC flag setting in RRL slipped answers - + fix: disable domain name compression for root label - + fix: fix CNAME following when quering for NSEC RR type - + fix: fix refreshing of DNSSEC signatures for zone keys - + fix: fix binding an unavailable IPv6 address (IP_FREEBIND) - + fix: fix infinite loop in knotc zonestatus and memstats - + fix: fix memory leak in configuration on server shutdown - + fix: fix broken dnsproxy module - + fix: fix multi value parsing on big-endian - + fix: adapt to Nettle 3 API break causing base64 decoding failures on big-endian - + feature: add 'keymgr zone key ds' to show key's DS record - + feature: add 'keymgr tsig generate' to generate TSIG keys - + feature: add query module scoping to process either all queries or zone queries only - + feature: add support for file name globbing in config file includes - + feature: add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - + improvement: send minimal responses (remove NS from Authority section for NOERROR) - + improvement: update persistent timers only on shutdown for better performance - + improvement: allow change of RR TTL over DDNS - + improvement: documentation fixes, updates, and improvements in formatting - + improvement: install yparser and zscanner header files - -* Mon Jul 20 2015 Jan Vcelak 2.0.0-1 -- new upstream release: - + feature: possibility to disable zone file synchronization - + feature: knsupdate, add input prompt in interactive mode - + feature: knsupdate, TSIG algorithm specification in interactive mode - -* Thu Jun 18 2015 Jan Vcelak 2.0.0-0.1.rc1 -- new upstream pre-release: - + fix: lost NOTIFY message if received during zone transfer - + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP - + fix: kdig, hide TSIG section with +noall - + fix: do not set AA flag for AXFR/IXFR queries - + feature: new configuration format in YAML, binary store im LMDB - + feature: DNSSEC, separate library, switch to GnuTLS, new utilities - + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) - + feature: zone parser, split long TXT/SPF strings into multiple strings - + feature: kdig, add generic dump style option (+generic) - + feature: try all master servers on failure in multi-master environment - + feature: improved remotes and ACLs (multiple addresses, multiple keys) - + feature: basic support for zone file patterns (%%s to substitute zone name) - + improvement: do not write class for SOA record (unified with other RR types) - + improvement: do not write master server address into the zone file - + documentation: manual pages also in HTML and PDF format - -* Wed Jun 17 2015 Fedora Release Engineering - 1.99.1-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - -* Mon May 04 2015 Kalev Lember - 1.99.1-3 -- Rebuilt for nettle soname bump - -* Fri Feb 13 2015 Jan Vcelak 1.99.1-2 -- fix BuildRequires for systemd integration - -* Fri Feb 13 2015 Jan Vcelak 1.99.1-1 -- new upstream pre-release version: - + DNSSEC: switch from OpenSSL to GnuTLS - + DNSSEC: initial support for KASP -- split package into subpackages -- add documentation building -- restart daemon on updated diff --git a/sources b/sources index 03eb05a..107fbb6 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-3.5.8.tar.xz) = de7212d4b2d6b5868e848db55a3b276ff650bfe46b1fb8df5a6702d6e1408d85ad25b692a95eb26bd5165e8ebf2b2b9bed6fac46d8f6b870698bb32a97c179f3 -SHA512 (knot-3.5.8.tar.xz.asc) = 9f85e7db04d310fed38811b7ee86da80bff4571ea974bc39e81d737a1fd4a587a5ff3fdcb6cea7a04c8ab2590d814411f6fc8b3b8e352ce4a7471c24901f26b4 +SHA512 (knot-3.6.0.tar.xz) = 83369a94ce7f35f41b08d599844e4c9586c29ba8efcf841e90560734b81df72054ddd62df609b84149944a36672bb71219c66e6e0c8ee7e41d5c421fc256e64a +SHA512 (knot-3.6.0.tar.xz.asc) = 31985e81306275b1cf1c382b0a97317a7220a1166ae680f1ed6dc02bb16dfe0789ccec3f98947d89d5966494132686169eb70c9222d0beada2f6c02072fa2c99