From 69acff8396e61ba0c149f93452b47faed7010afd8050e23078cac6354f98b059 Mon Sep 17 00:00:00 2001 From: Sebastian Wagner Date: Tue, 22 Aug 2023 08:36:47 +0000 Subject: [PATCH] - update to version 2.4.2: * Async queries could wait forever instead of respecting the timeout if the timeout was 0 and a packet was lost. The timeout is now respected. * Restore HTTP/2 support which was accidentally broken during the https refactoring done as part of 2.4.0. * When an inception time and lifetime are specified, the signer now sets the expiration to the inception time plus lifetime, instead of the current time plus the lifetime. - update to version 2.4.1: * Importing dns.dnssecalgs without the cryptography module installed no longer causes an ImportError. * A number of timeout bugs with the asyncio backend have been fixed. * DNS-over-QUIC for the asyncio backend now works for IPv6. * Dnspython now enforces that the candidate DNSKEYs for DNSSEC signatures have protocol 3 and have the ZONE flag set. This is a standards compliance issue more than a security issue as the legitimate authority would have to have published the non-compliant keys as well as updated their DS record in order for the records to validate (the DS digest includes both flags and protocol). Dnspython will not make invalid keys by default, but does allow them to be created and used for testing purposes. * Dependency specifications for optional features in the package metadata have been improved. - update to version 2.4.0: * Python 3.8 or newer is required. * The stub resolver now uses instances of ``dns.nameserver.Nameserver`` to represent remote recursive resolvers, and can communicate using DNS over UDP/TCP, HTTPS, TLS, and QUIC. In additional to being able to specify an IPv4, IPv6, or HTTPS URL as a nameserver, instances of ``dns.nameserver.Nameserver`` are now permitted. * The DNS-over-HTTPS bootstrap address no longer causes URL rewriting. * DNS-over-HTTPS now only uses httpx; support for requests has been dropped. A source OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-dnspython?expand=0&rev=72 --- dnspython-2.3.0.tar.gz | 3 --- dnspython-2.4.2.tar.gz | 3 +++ python-dnspython.changes | 46 ++++++++++++++++++++++++++++++++++++++++ python-dnspython.spec | 12 ++--------- 4 files changed, 51 insertions(+), 13 deletions(-) delete mode 100644 dnspython-2.3.0.tar.gz create mode 100644 dnspython-2.4.2.tar.gz diff --git a/dnspython-2.3.0.tar.gz b/dnspython-2.3.0.tar.gz deleted file mode 100644 index a21ecbc..0000000 --- a/dnspython-2.3.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:224e32b03eb46be70e12ef6d64e0be123a64e621ab4c0822ff6d450d52a540b9 -size 312313 diff --git a/dnspython-2.4.2.tar.gz b/dnspython-2.4.2.tar.gz new file mode 100644 index 0000000..b9529d6 --- /dev/null +++ b/dnspython-2.4.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8dcfae8c7460a2f84b4072e26f1c9f4101ca20c071649cb7c34e8b6a93d58984 +size 328126 diff --git a/python-dnspython.changes b/python-dnspython.changes index 9a17814..79826d0 100644 --- a/python-dnspython.changes +++ b/python-dnspython.changes @@ -1,3 +1,49 @@ +------------------------------------------------------------------- +Tue Aug 22 08:30:36 UTC 2023 - Sebastian Wagner + +- update to version 2.4.2: + * Async queries could wait forever instead of respecting the timeout if the timeout was + 0 and a packet was lost. The timeout is now respected. + * Restore HTTP/2 support which was accidentally broken during the https refactoring done + as part of 2.4.0. + * When an inception time and lifetime are specified, the signer now sets the expiration + to the inception time plus lifetime, instead of the current time plus the lifetime. +- update to version 2.4.1: + * Importing dns.dnssecalgs without the cryptography module installed no longer causes + an ImportError. + * A number of timeout bugs with the asyncio backend have been fixed. + * DNS-over-QUIC for the asyncio backend now works for IPv6. + * Dnspython now enforces that the candidate DNSKEYs for DNSSEC signatures + have protocol 3 and have the ZONE flag set. This is a standards compliance issue more + than a security issue as the legitimate authority would have to have published + the non-compliant keys as well as updated their DS record in order for the records + to validate (the DS digest includes both flags and protocol). Dnspython will not + make invalid keys by default, but does allow them to be created and used + for testing purposes. + * Dependency specifications for optional features in the package metadata have been + improved. +- update to version 2.4.0: + * Python 3.8 or newer is required. + * The stub resolver now uses instances of ``dns.nameserver.Nameserver`` to represent + remote recursive resolvers, and can communicate using + DNS over UDP/TCP, HTTPS, TLS, and QUIC. In additional to being able to specify + an IPv4, IPv6, or HTTPS URL as a nameserver, instances of ``dns.nameserver.Nameserver`` + are now permitted. + * The DNS-over-HTTPS bootstrap address no longer causes URL rewriting. + * DNS-over-HTTPS now only uses httpx; support for requests has been dropped. A source + port may now be supplied when using httpx. + * DNSSEC zone signing with NSEC records is now supported. Thank you + very much (again!) Jakob Schlyter! + * The resolver and async resolver now have the ``try_ddr()`` method, which will try to + use Discovery of Designated Resolvers (DDR) to upgrade the connection from the stub + resolver to the recursive server so that it uses DNS-over-HTTPS, DNS-over-TLS, or + DNS-over-QUIC. This feature is currently experimental as the standard is still in + draft stage. + * The resolver and async resolver now have the ``make_resolver_at()`` and + ``resolve_at()`` functions, as a convenience for making queries to specific + recursive servers. + * Curio support has been removed. + ------------------------------------------------------------------- Fri Apr 21 12:24:20 UTC 2023 - Dirk Müller diff --git a/python-dnspython.spec b/python-dnspython.spec index 8e217ec..38c6fb7 100644 --- a/python-dnspython.spec +++ b/python-dnspython.spec @@ -27,14 +27,14 @@ %define skip_python2 1 %{?sle15_python_module_pythons} Name: python-dnspython%{psuffix} -Version: 2.3.0 +Version: 2.4.2 Release: 0 Summary: A DNS toolkit for Python License: ISC Group: Development/Languages/Python URL: https://github.com/rthalley/dnspython Source: https://files.pythonhosted.org/packages/source/d/dnspython/dnspython-%{version}.tar.gz -BuildRequires: %{python_module base >= 3.6} +BuildRequires: %{python_module base >= 3.8} BuildRequires: %{python_module pip} BuildRequires: %{python_module poetry-core} BuildRequires: fdupes @@ -44,15 +44,8 @@ Requires: python-cryptography Requires: python-httpx # idna Requires: python-idna >= 2.1 -# Requires despite optional: see description -# doh -Requires: python-requests -Requires: python-requests-toolbelt # HTTP/2 support in httpx Recommends: python-h2 -Suggests: python-curio >= 1.2 -# curio -Suggests: python-sniffio >= 1.1 # trio Suggests: python-trio >= 0.14.0 BuildArch: noarch @@ -97,7 +90,6 @@ The package requires dependencies necessary for these optional features: - DNSSEC and suggest dependencies necessary for these optional features: - trio -- curio This optional feature is not available due to missing dependencies: - wmi