- Update to version 4.9.1
* Improvements
+ rpm: Change home directory to /var/lib/pdns
+ m4: Add option for 64-bit time_t on 32-bit systems with glibc-2.34 (Sven Wegener)
+ Wrap backend factories in smart pointers
+ (optionally) drop whitespace on join
* Bug Fixes
+ autoconf: allow prerelease systemd versions (Chris Hofstaedtler)
+ ixfrdist: Fix broken ‘uid’ and ‘gid’ parsing for non-numerical values
+ YaHTTP: Enforce max # of request fields and max request line size
+ Fix memory leaks in the bind file format parser
+ dnsproxy: fix build on s390x (Chris Hofstaedtler)
+ pdnsutil check-zone: accept LUA A/AAAA as SVCB address targets
+ Properly finalize PKCS11 modules before releasing them (Aki Tuomi)
+ don’t crash when a catalog SOA is invalid
+ debian: adjust option name in shipped postinst
- fix building on older openSUSE releases
- added pdns-4.9.0-fix_boost.patch
OBS-URL: https://build.opensuse.org/request/show/1177309
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=93
- Update to 4.7.3
* Improvements
- API: slightly clearer message when a backend cannot create domains PR#12296
* Bug Fixes
- lmdb: make outgoing notifications work PR#12299
- lmdb: implement alsoNotifies PR#12266
- API: do not create SOA and NS records for consumer zones PR#12291
- API: fix newly created zone not rectified PR#12273
- fix invalid catalog zone sql query for gpgsqlbackend PR#12272
- fix pdns_control list-zones PR#12181
OBS-URL: https://build.opensuse.org/request/show/1041916
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=87
- Update to 4.2.1:
New features
* Add SLAVE-RENOTIFY zone metadata support
* Add configurable timeout for inbound
* for gmysql backend, add an option to send the SSL capability flag
Improvements
* Register a few known RR types
* bindbackend: use metadata for also-notifies as well
* pdnsutil increase-serial: under SOA-EDIT=INCEPTION-EPOCH,
bump as if it is EPOCH
* API: optionally do not return dnssec info in domain list
Bug Fixes
* LUA view: do not crash on empty IP list
* API: Accept headers without spaces
* Avoid database state-related SERVFAILs after a LUA error
* Fix broken edit-zone and other features with the LMDB backend
* rfc2136, pdnsutil: somewhat improve duplicate record handling
OBS-URL: https://build.opensuse.org/request/show/752958
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=66
- Update to 4.1.11:
* update postgresql schema to address a possible denial of service
by an authorized user by inserting a crafted record in a MASTER
type zone under their control. (bsc#1142810, CVE-2019-10203)
To fix the issue, run the following command against your PostgreSQL
pdns database:
ALTER TABLE domains ALTER notified_serial TYPE bigint
USING CASE WHEN notified_serial >= 0
THEN notified_serial::bigint END;
- spec file simplifications and cleanup
* fixes a denial of service but when authorized user to cause
the server to exit by inserting a crafted record in a MASTER
type zone under their control. (bsc#1138582, CVE-2019-10162)
* fixes a denial of service of slave server when an authorized
master server sends large number of NOTIFY messages
(bsc#1138582, CVE-2019-10163)
OBS-URL: https://build.opensuse.org/request/show/720228
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=63
- Update to 4.1.5
* Improvements
- Apply alias scopemask after chasing
- Release memory in case of error in the openssl ecdsa constructor
- Switch to devtoolset 7 for el6
* Bug Fixes
- Crafted zone record can cause a denial of service
(bsc#1114157, CVE-2018-10851)
- Packet cache pollution via crafted query
(bsc#1114169, CVE-2018-14626)
- Fix compilation with libressl 2.7.0+
- Actually truncate truncated responses
OBS-URL: https://build.opensuse.org/request/show/646920
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=57
- Update to 4.1.2
- Improvements
* API: increase serial after dnssec related updates
* Auth: lower ‘packet too short’ loglevel
* Make check-zone error on rows that have content but shouldn’t
* Auth: avoid an isane amount of new backend connections during an axfr
* Report unparseable data in stoul invalid_argument exception
* Backport: recheck serial when axfr is done
* Backport: add tcp support for alias
- Bug Fixes
* Auth: allocate new statements after reconnecting to postgresql
* Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
* Rather than crash, sheepishly report no file/linenum
* Document undocumented config vars
* Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
- misc
* Move includes around to avoid boost L conflict
* Backport: update edns option code list
* Auth: link dnspcap2protobuf against librt when needed
* Fix a warning on botan >= 2.5.0
* Auth 4.1.x: unbreak build
* Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)
- add patch for upstream issue #6228https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch
OBS-URL: https://build.opensuse.org/request/show/606956
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=54
- update to 4.0.1
Bug fixes
- #4126 Wait for the connection to the carbon server to be established
- #4206 Don't try to deallocate empty PG statements
- #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
- #4252 Don't include bind files if length <= 2 or > sizeof(filename)
- #4255 Catch runtime_error when parsing a broken MNAME
Improvements
- #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
- #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
- #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
- #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
- #4192 dnsreplay: Only add Client Subnet stamp when asked
- #4250 Use toLogString() for ringAccount (Kees Monshouwer)
Additions
- #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
- #4142 Add used filedescriptor statistic (Kees Monshouwer)
- update to 4.0.0
https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
- remotebackend split out now
- enabled experimental_gss_tsig support
- enabled protobuf based stats support
- no more xdb and lmdb backend
- added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
--enable-reproducible
OBS-URL: https://build.opensuse.org/request/show/416553
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=42
- update to version 3.4.1
Changes since 3.4.0:
* commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now
polls the security status of a release at startup and periodically. More
detail on this feature, and how to turn it off, can be found in Section 2,
“Security polling”.
* commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header
(X-API-Key)
* commit 4a95ab4: Use transaction for pdnssec increase-serial
* commit 6e82a23: Don't empty ordername during pdnssec increase-serial
* commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes
ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD
or BIND.
OBS-URL: https://build.opensuse.org/request/show/259027
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=30
- only enable geoip backend on distros newer than 12.3
before the package lacks the pkg-config file and there is no
fallback to finding geoip without it.
- fix permissions of the home directory
- enable some backends that we had forgotten:
- pipe (main package)
- random (main package)
- geoip (new subpackage)
- new BR: yaml-cpp-devel and GeoIP-devel
OBS-URL: https://build.opensuse.org/request/show/258655
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=29
- set license to GPLv2 Only (bnc#762986)
- update to 3.1
Warning:
Version 3.1 of the PowerDNS Authoritative Server is a
major upgrade if you are coming from 2.9.x. There are also some
important changes if you are coming from 3.0. Please refer to
Section 1, “From PowerDNS Authoritative Server 2.9.x to 3.0” and
Section 2, “From PowerDNS Authoritative Server 3.0 to 3.1” for
important information on correct and stable operation, as well as
notes on performance and memory use.
For the details see:
http://rtfm.powerdns.com/changelog.html#changelog-auth-3-1
- added pdns-3.1_lib_lua.patch:
instead of using an hardcoded -llua5.1 use the LUA_LIBS variable.
- refreshed pdns-3.0.rc1_polarssl.patch
- added 2 new subpackages:
pdns-backend-mydns
pdns-backend-lua (new dependency 5.2 > lua >= 5.1)
OBS-URL: https://build.opensuse.org/request/show/121662
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pdns?expand=0&rev=20
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
