CVS commit: pkgsrc/net/knot-resolver

["Marcin Gondek" <drixter%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   drixter
Date:           Wed Jul 22 20:38:03 UTC 2026

Modified Files:
        pkgsrc/net/knot-resolver: Makefile distinfo

Log Message:
knot-resolver: Update to 6.4.1

Knot Resolver 6.4.1 (2026-07-22)
Security:
DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us.
DNSSEC correctness issues, acting mainly through the aggressive cache:
* dealing with Labels field in RRSIGs being smaller than the signer’s
* dealing with NSEC’s next-name pointing outside of the zone
Special thanks to Qifan Zhang from Palo Alto Networks.

Improvements:
docker: upgrade to Debian 13 (!1856)
update IANA’s certificate for root trust anchor bootstrapping (!1845)

Bugfixes:
/local-data/addresses*: make multiple addresses work (#808, #954)
views: fix protocol-based matching for DoQ


To generate a diff of this commit:
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/knot-resolver/Makefile \
    pkgsrc/net/knot-resolver/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/knot-resolver/Makefile
diff -u pkgsrc/net/knot-resolver/Makefile:1.1 pkgsrc/net/knot-resolver/Makefile:1.2
--- pkgsrc/net/knot-resolver/Makefile:1.1       Sat Jun 27 20:39:03 2026
+++ pkgsrc/net/knot-resolver/Makefile   Wed Jul 22 20:38:03 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.1 2026/06/27 20:39:03 drixter Exp $
+# $NetBSD: Makefile,v 1.2 2026/07/22 20:38:03 drixter Exp $
 
-DISTNAME=      knot-resolver-6.4.0
+DISTNAME=      knot-resolver-6.4.1
 CATEGORIES=    net
 MASTER_SITES=  https://secure.nic.cz/files/knot-resolver/
 EXTRACT_SUFX=  .tar.xz
Index: pkgsrc/net/knot-resolver/distinfo
diff -u pkgsrc/net/knot-resolver/distinfo:1.1 pkgsrc/net/knot-resolver/distinfo:1.2
--- pkgsrc/net/knot-resolver/distinfo:1.1       Sat Jun 27 20:39:04 2026
+++ pkgsrc/net/knot-resolver/distinfo   Wed Jul 22 20:38:03 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.1 2026/06/27 20:39:04 drixter Exp $
+$NetBSD: distinfo,v 1.2 2026/07/22 20:38:03 drixter Exp $
 
-BLAKE2s (knot-resolver-6.4.0.tar.xz) = 29437878e674cdb80ee4d23b4521aee7fdf1014f3edf68ac5d49d6973a5cf177
-SHA512 (knot-resolver-6.4.0.tar.xz) = 3992a014e64899c1867773714d5505b44f714bab511af2b7657456c79706b75eae0ba1f9f93017dd5648793fbbf32baf48208a5789422d2e42a1a361b0d91311
-Size (knot-resolver-6.4.0.tar.xz) = 2367316 bytes
+BLAKE2s (knot-resolver-6.4.1.tar.xz) = 912279deedfb71338d400ea5dabb69388f5251f85603e22497ec86fab093fcdb
+SHA512 (knot-resolver-6.4.1.tar.xz) = efd45cacdbf3dc4ef3260dc5163ac6ee224517d0b371fd940d57a9fa814c9c7171a61280bb1464481688dcf9b41d95a0311206b871e3ea8889efe3cbb2d77e12
+Size (knot-resolver-6.4.1.tar.xz) = 2372020 bytes