pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/net/nsd
Module Name: pkgsrc
Committed By: he
Date: Sat Sep 5 09:43:49 UTC 2026
Modified Files:
pkgsrc/net/nsd: Makefile distinfo
Log Message:
net/nsd: update to version 4.15.2.
Pkgsrc changes:
* Version & checksum changes.
Upstream changes:
4.15.2
================
FEATURES:
- Merge #494: RFC 7830 EDNS0 padding option support with DoT
With padding suggestions from RFC 8467 for responses
Thanks kdrenard for the suggestion
- Merge #498: Support for the HHIT and BRID RR types
- Merge #499: Support for the "docpath" and "pvd"
SVCB Service Parameter Keys
- Merge #500: Support for the "oots" SVCB Service Parameter Key
- An `allow-proxy` configuration file option to specify allow access
control list for the PROXYv2 protocol port.
Thanks to Qifan Zhang, Palo Alto Networks, for the suggestion.
- Merge #502: An `udp-padding-port` configuration file option to enable
responding to the padding option on UDP, but on specific ports only.
This is convenient for setups where NSD is behind a frontend handling
the DNS over TLS.
- `--enable-multiple-catalog-zones` option to configure to enable
experimental support for multiple catalog consumer zones.
BUG FIXES:
- Merge #495 from ruuda: Include inttypes.h from metrics.c.
- Merge #496 from maertsen: Fix allow-query syntax in catalog
documentation.
- Fix that IXFR queries with overly large SOA records do not cause an
assertion failure in the server child process. The malformed SOA
record is rejected with FORMERR.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix that notify ahead of the zone serial does not cause perpetual
retransfer. After one round, and after another retry, it gives up,
and forgets the notified serial number. This allows the primary a
moment to retrieve the new zone version.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix that AXFR out for a zone with an oversize record does not loop.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix that IXFR out for a zone with an oversize record does not loop.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix serve childs crashing when queried for a very long CNAME chain
on ASAN builds. The maximum CNAME chain in responses is set to 18.
The value can be configured with the --with-max-cname-chain=number
option to configure.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix to have failed zone transfers retry after a time, instead of in a
loop, for transfers with failed contents.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix that an increase verbosity level is needed to warn about unfound
RRs to be deleted (from IXFR). Verbosity 2 for unfound RRsets and
unfound RDATA. Verbosity 3 to log which RR in the existing set does
not match.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix to ignore NSEC3s with wrong non-base32hex chars in owner label.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix Y2038 bug, where the server process would fail with undefined
behaviour, if it was built with address sanitizer undefined checks
enabled, for the timestamp in EDNS cookies.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix to not let `nsd-control zonestatus` crash the xfrd processes
when configured with multiple catalog consumers.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix to prevent a configured primary from hampering loading its own
zone by providing a transfer with the OPT RR in the answer section
and the UDP Payload size (i.e. class) of the OPT RR set to something
else than 1 (IN).
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix to ignore NSEC3 records with malformed owner name. In depth fix
to clear key for NSEC3 tree collisions. And a fix to limit the
reenactment of failed reloads, that ordinarily marks transfers as
corrupt, so that for crashes it waits with that zone for retry. This
allows other zones to update in the meantime.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix nsd-control reconfig so that change of a secondary zone while it
is on the udp or tcp waiting list does not crash after that.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix to reset the length of the incoming packet buffer after a failed
PROXYv2 header on UDP. It can cause an assertion failure on the next
packet.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix XoT transfer authentication to not fall back to the common name
if a DNS name is present in the certificate. This fixes the RFC6125
conformance.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix dnstap over TLS certificate check for reconnection. Also clean up
file descriptor and SSL state on connection failures.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
- Fix client certificate checking by linking the tls-auth-name
requirement on an access control list item, to the other requirements
(IP address and/or TSIG key) on the same list item.
Thanks to voguemerry for the report
To generate a diff of this commit:
cvs rdiff -u -r1.139 -r1.140 pkgsrc/net/nsd/Makefile
cvs rdiff -u -r1.96 -r1.97 pkgsrc/net/nsd/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: pkgsrc/net/nsd/Makefile
diff -u pkgsrc/net/nsd/Makefile:1.139 pkgsrc/net/nsd/Makefile:1.140
--- pkgsrc/net/nsd/Makefile:1.139 Thu Aug 27 11:53:45 2026
+++ pkgsrc/net/nsd/Makefile Sat Sep 5 09:43:49 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.139 2026/08/27 11:53:45 he Exp $
+# $NetBSD: Makefile,v 1.140 2026/09/05 09:43:49 he Exp $
-DISTNAME= nsd-4.15.1
+DISTNAME= nsd-4.15.2
CATEGORIES= net
MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/
Index: pkgsrc/net/nsd/distinfo
diff -u pkgsrc/net/nsd/distinfo:1.96 pkgsrc/net/nsd/distinfo:1.97
--- pkgsrc/net/nsd/distinfo:1.96 Thu Aug 27 11:53:45 2026
+++ pkgsrc/net/nsd/distinfo Sat Sep 5 09:43:49 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.96 2026/08/27 11:53:45 he Exp $
+$NetBSD: distinfo,v 1.97 2026/09/05 09:43:49 he Exp $
-BLAKE2s (nsd-4.15.1.tar.gz) = f262fbfdb10a1a898dee08f74750fc5ec5c8565599dde8522d4a2c6f6f64967b
-SHA512 (nsd-4.15.1.tar.gz) = adc5cce24cdcd5c50a51adbeabc05727e962ebe9f68b7678bbfcef80ad042d19b805bb1d4f4d4504043158d43c94086f09e333a123b3ae9edade26a6a17cafa8
-Size (nsd-4.15.1.tar.gz) = 1625741 bytes
+BLAKE2s (nsd-4.15.2.tar.gz) = c8aecdc2849d51ea3b993b5aa417fc78560fcb8e36ea495bc5b26011d4739b63
+SHA512 (nsd-4.15.2.tar.gz) = e543425438402ca1f4c61ea9f54bcb6ea3ca802b1d645aa76d56bbc82aefedaa6080a757b0e7bd4051c4cd0177a09fd55473eaf9cd641d1021eec94f143df6ea
+Size (nsd-4.15.2.tar.gz) = 1634936 bytes
SHA1 (patch-Makefile.in) = 93f77704ee6730aef41955511807ce2f4b6cfc90
Home |
Main Index |
Thread Index |
Old Index