2024-02-21 11:24:24 +01:00
|
|
|
-------------------------------------------------------------------
|
2024-05-15 15:54:22 +02:00
|
|
|
Tue May 14 14:00:41 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
- Update to version 1.6.1:
|
|
|
|
+ Minor bugfix:
|
|
|
|
* Suppress warning about `trust-ad` in resolv.conf.
|
|
|
|
+ Build system:
|
|
|
|
* Honour DESTDIR, avoiding need for prefix= workaround.
|
|
|
|
* regression tests: Add missing dependency on hsyscalls.i.
|
|
|
|
GNU #51329. [Report from Sergei Trofimovich]
|
|
|
|
* regression tests: build with 64-bit time_t on 32-bit systems.
|
|
|
|
+ Documentation:
|
|
|
|
* Fix all http: URLs in docs to be https: instead.
|
|
|
|
- Drop: fixed upstream.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2024-02-21 11:24:24 +01:00
|
|
|
Tue Feb 20 10:01:52 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
- Use %autosetup macro. Allows to eliminate the usage of deprecated
|
|
|
|
%patchN.
|
|
|
|
|
2020-06-06 08:50:54 +02:00
|
|
|
-------------------------------------------------------------------
|
2020-06-15 17:25:03 +02:00
|
|
|
Mon Jun 15 12:40:37 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
|
|
|
|
|
|
|
|
- Update to 1.6.0
|
|
|
|
- Changes in 1.6.0:
|
|
|
|
* Bugfixes
|
|
|
|
* adnshost: Support --reverse in -f mode input stream
|
|
|
|
* timeout robustness against clock skew: track query start time and
|
|
|
|
duration. Clock instability may now only cause spurious timeouts
|
|
|
|
rather than indefinite hangs or even assertion failures.
|
|
|
|
* New features:
|
|
|
|
* adnshost: Offer ability to set adns checkc flags
|
|
|
|
* adnslogres: Honour --checkc-freq (if it comes first)
|
|
|
|
* adnsresfilter: Honour --checkc-freq and --checkc-entex
|
|
|
|
* time handling: Support use of CLOCK_MONOTONIC via an init flag.
|
|
|
|
* adns_str* etc.: Improve robustness; more allowable inputs values.
|
|
|
|
* Internal changes:
|
|
|
|
* adnshost: adh-opts.c: Whitespace adjustments to option table
|
|
|
|
* Build system and tests improvements
|
|
|
|
- Changes in 1.5.2
|
|
|
|
* Important security fixes:
|
|
|
|
CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9109:
|
|
|
|
Vulnerable applications: all adns callers.
|
|
|
|
Exploitable by: the local recursive resolver.
|
|
|
|
Likely worst case: Remote code execution.
|
|
|
|
CVE-2017-9106:
|
|
|
|
Vulnerable applications: those that make SOA queries.
|
|
|
|
Exploitable by: upstream DNS data sources.
|
|
|
|
Likely worst case: DoS (crash of the adns-using application)
|
|
|
|
CVE-2017-9107:
|
|
|
|
Vulnerable applications: those that use adns_qf_quoteok_query.
|
|
|
|
Exploitable by: sources of query domain names.
|
|
|
|
Likely worst case: DoS (crash of the adns-using application)
|
|
|
|
CVE-2017-9108:
|
|
|
|
Vulnerable applications: adnshost.
|
|
|
|
Exploitable by: code responsible for framing the input.
|
|
|
|
Likely worst case: DoS (adnshost crashes at EOF).
|
|
|
|
* Bugfixes:
|
|
|
|
* Do not include spurious external symbol `data' (fixes GCC10 build).
|
|
|
|
* If server sends TC flag over TCP, bail rather than retrying.
|
|
|
|
* Do not crash on certain strange resolv.conf contents.
|
|
|
|
* Fix various crashes if a global system failure occurs, or
|
|
|
|
adns_finish is called with outstanding queries.
|
|
|
|
* Correct a parsing error message very slightly.
|
|
|
|
* DNS packet parsing: Slight fix when packet is truncated.
|
|
|
|
* Fix ABI compatibility in string conversion of certain RR types.
|
|
|
|
* internal.h: Use `unsigned' for nextid; fixes theoretical C UB.
|
|
|
|
* Portability fix:
|
|
|
|
* common.make.in: add -Wno-unused-value. Fixes build with GCC9.
|
|
|
|
* Internal changes:
|
|
|
|
* Additional comments describing some internal code restrions.
|
|
|
|
* Robustness assert() against malfunctioning write() system call.
|
|
|
|
- It fixes the following CVEs [bsc#1172265]
|
|
|
|
CVE-2017-9103, CVE-2017-9104, CVE-2017-9105, CVE-2017-9106,
|
|
|
|
CVE-2017-9107, CVE-2017-9108, CVE-2017-9109
|
|
|
|
- refresh adns-visibility.patch
|
|
|
|
- drop adns-1.5.1-gcc10.patch that is no longer needed
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2020-06-06 08:50:54 +02:00
|
|
|
Tue Jun 2 12:48:11 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
|
|
|
|
|
|
|
|
- add adns-1.5.1-gcc10.patch to fix build with GCC10
|
|
|
|
- run spec-cleaner
|
|
|
|
|
2017-11-06 14:54:40 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Nov 4 20:26:32 UTC 2017 - aavindraa@gmail.com
|
|
|
|
|
|
|
|
- Update to 1.5.1
|
|
|
|
* Fix addr queries (including subqueries, ie including deferencing MX
|
|
|
|
lookups etc.) not to crash when one of the address queries returns
|
|
|
|
tempfail. Also, do not return a spurious pointer to the application
|
|
|
|
when one of the address queries returns a permanent error (although,
|
|
|
|
the application almost certainly won't use this pointer because the
|
|
|
|
associated count is zero).
|
|
|
|
* Portability fix for systems where socklen_t is bigger than int.
|
|
|
|
* Fix for malicious optimisation of memcpy in test suite, which
|
|
|
|
causes failure with gcc-4.1.9 -O3.
|
|
|
|
* Fix TCP async connect handling. The bug is hidden on Linux and on most
|
|
|
|
systems where the nameserver is on localhost. If it is not hidden,
|
|
|
|
adns's TCP support is broken unless adns_if_noautosys is used.
|
|
|
|
* adnsresfilter: Fix addrtextbuf buffer size. This is not actually a
|
|
|
|
problem in real compiled code but should be corrected.
|
|
|
|
* Properly include harness.h in adnstest.c in regress/. Suppresses
|
|
|
|
a couple of compiler warnings (implicit declaration of Texit, etc.)
|
|
|
|
- cleanup with spec-cleaner
|
|
|
|
|
2017-03-24 10:56:21 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 23 15:13:56 UTC 2017 - kstreitova@suse.com
|
|
|
|
|
|
|
|
- cleanup with spec-cleaner
|
|
|
|
- get rid of %{name} macro in the patch name
|
|
|
|
- restart patch numbering
|
|
|
|
|
2015-03-04 18:15:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Mar 2 19:52:21 UTC 2015 - mpluskal@suse.com
|
|
|
|
|
|
|
|
- Remove obsolete patches
|
|
|
|
* adns-ocloexec.patch
|
|
|
|
* adns-1.4-ipv6.patch
|
|
|
|
- Add gpg signature
|
|
|
|
- Cleanup spec-file with spec-cleaner
|
|
|
|
- Remove already disabled %check section, tests require working
|
|
|
|
network setup
|
|
|
|
- Update to 1.5.0
|
|
|
|
* This release provides full IPv6 support. Applications can
|
|
|
|
request AAAA records (containing IPv6 addresses) as well as,
|
|
|
|
or instead of, A records (containing IPv4 addresses). adns
|
|
|
|
1.5 can speak to nameservers over IPv6.
|
|
|
|
* converting between addresses and address literals. These carry
|
|
|
|
less baggage than getaddrinfo and getnameinfo.
|
|
|
|
* bugfixes and other minor changes (see changelog for details)
|
|
|
|
|
2013-06-12 10:22:41 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jun 11 22:44:58 UTC 2013 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- remove debug statement in the spec file, leftover from
|
|
|
|
previous change.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 10 19:35:24 UTC 2013 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- Build with large file support in 32 bit archs, autoconf
|
|
|
|
stuff is fine, but C files included config.h after C library
|
|
|
|
headers, therefore no prototypes for *64 functions found.
|
|
|
|
|
2013-03-20 13:25:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Mar 20 12:08:57 UTC 2013 - mmeister@suse.com
|
|
|
|
|
|
|
|
- Added download url as source.
|
|
|
|
Please see http://en.opensuse.org/SourceUrls
|
|
|
|
|
2011-12-20 14:44:36 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Dec 20 11:24:52 UTC 2011 - coolo@suse.com
|
|
|
|
|
|
|
|
- add autoconf as buildrequire to avoid implicit dependency
|
|
|
|
|
2011-11-22 16:10:08 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 22 15:09:47 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- Remove redundant/unwanted tags/section (cf. specfile guidelines)
|
|
|
|
|
2011-11-22 03:36:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 22 02:23:10 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- Use O_CLOEXEC in library code.
|
|
|
|
- Change the visibility patch to not use the error prone
|
|
|
|
version-script but rather GCC visibility
|
|
|
|
|
2011-09-17 12:06:32 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Sep 16 19:06:22 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- Implement baselibs for package
|
2011-09-17 14:45:20 +02:00
|
|
|
- Remove redundant tags/sections from specfile
|
2011-09-17 12:06:32 +02:00
|
|
|
|
2010-11-08 14:41:34 +01:00
|
|
|
-------------------------------------------------------------------
|
2010-12-20 00:42:59 +01:00
|
|
|
Sun Dec 19 23:07:43 UTC 2010 - cristian.rodriguez@opensuse.org
|
|
|
|
|
|
|
|
- Use 64bit file offsets
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2010-11-08 14:41:34 +01:00
|
|
|
Fri Nov 5 20:35:16 UTC 2010 - cristian.rodriguez@opensuse.org
|
|
|
|
|
|
|
|
- export only public symbols
|
|
|
|
|
2009-01-19 01:38:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jan 16 23:00:59 CET 2009 - crrodriguez@suse.de
|
|
|
|
|
|
|
|
- remove static libraries
|
|
|
|
|
2008-09-24 14:58:43 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 18 10:40:36 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
- document CVE-2008-1447 / CVE-2008-4100 poisoning vulnerability
|
|
|
|
in README.SUSE [bnc#426515]
|
|
|
|
|
2008-02-21 01:31:47 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 20 17:08:29 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
- added patch to support IPv6 protocol [#350506]
|
|
|
|
|
2007-08-10 09:49:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Aug 7 04:23:16 CEST 2007 - crrodriguez@suse.de
|
|
|
|
|
|
|
|
- update to version 1.4
|
|
|
|
- run ldconfig
|
|
|
|
- use library packaging policy
|
|
|
|
- run make check
|
|
|
|
|
2007-01-15 23:50:52 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Sep 1 15:19:17 CEST 2006 - mt@suse.de
|
|
|
|
|
|
|
|
- updated to adns-1.3, providing new support for SRV RRs
|
|
|
|
and unknown RRs as well as several portability fixes.
|
|
|
|
- adopted configure and destdir patches, removed obsolete
|
|
|
|
codecleanup and missing_symlink patches
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Apr 27 00:03:42 CEST 2006 - mrueckert@suse.de
|
|
|
|
|
|
|
|
- added adns-missing_symlink.diff:
|
|
|
|
add missing symlink "libadns.so" so you can dynamically
|
|
|
|
link against libadns.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 25 21:34:07 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Dec 19 14:52:07 CET 2005 - ro@suse.de
|
|
|
|
|
|
|
|
- added libadns.so.1 to filelist
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Apr 4 18:33:27 CEST 2005 - pth@suse.de
|
|
|
|
|
|
|
|
- Make declarations of adns__parse_domain match.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Aug 10 07:47:56 CEST 2004 - lmuelle@suse.de
|
|
|
|
|
|
|
|
- Inital SuSE RPM; [#43590].
|