Changelog for
knot-doc-2.4.1-2.9.noarch.rpm :
Mon Mar 13 13:00:00 2017 Petr Spacek
- 2.4.1-2
- configuration checking was fixed to be compatible with Knot 2.4.x
Mon Feb 27 13:00:00 2017 Petr Spacek - 2.4.1-1
- new upstream release 2.4.1 replaces old 1.6.x series which is not supported
- configuration should be upgraded automatically using knot1to2 tool
- make sure you reviewed the new configuration in /etc/knot directory!
Tue Aug 9 14:00:00 2016 Jan Vcelak - 1.6.8-1
- new upstream release:
+ feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)
Wed Feb 10 13:00:00 2016 Jan Vcelak 1.6.7-1
- new upstream release:
+ improvement: Log change of the zone serial number after IXFR transfer
+ improvement: Document operational impact of various RRL settings
+ improvement: Add support for rate-limit-slip zero
+ improvement: Add \'timer-db\' configuration option
Wed Nov 25 13:00:00 2015 Jan Vcelak 1.6.6-1
- new upstream release:
+ security fix: out-of-bound read in packet parser for malformed NAPTR record
+ fix: systemd startup notifications
Wed Sep 2 14:00:00 2015 Jan Vcelak 1.6.5-1
- new upstream release:
+ fix: don\'t load expired zones on reload and startup
+ fix: remove race condition in scheduling causing delaying of events
+ fix: NSEC proof construction in zones with many delegations
+ fix: TC flag setting in RRL slipped answers
+ fix: disable domain name compression for root label
+ fix: check if executed under systemd before using journald log sink
+ feature: write persistent timers on server shutdown for better performance
+ feature: support time unit specification for \'max-conn-idle\',
\'max-conn-handshake\', \'max-conn-reply\', and \'notify-timeout\' config options
+ feature: add \'request-edns-config\' config option
Thu Jun 18 14:00:00 2015 Jan Vcelak 1.6.4-1
- new upstream release:
+ fix: lost NOTIFY message if received during zone transfer
+ fix: kdig, record correct dnstap SocketProtocol when retrying over TCP
+ fix: kdig, hide TSIG section with +noall
+ fix: do not set AA flag for AXFR/IXFR queries
+ feature: zone scanner, split long TXT/SPF strings into multiple strings
+ feature: kdig, add +generic dump style option
+ feature: try all servers on failure in multi-master environment
+ improvement: zone dump, do not print class for SOA record for consistency
Wed Apr 8 14:00:00 2015 Jan Vcelak 1.6.3-1
- new upstream release:
+ fix: performance drop for NSEC-signed zones
+ fix: proper handling of TCP short-writes
+ fix: possible out-of-bound reads in zone parser and packet parser
+ feature: CDS and CDNSKEY support in zone parser
+ improvement: add defaults for TCP config options into documentation
+ improvement: detailed error message if zone reload fails
Thu Feb 19 13:00:00 2015 Jan Vcelak 1.6.2-1
- new upstream release:
+ new config option \'max-tcp-clients\'
+ fix possible resource leak when terminating inactive TCP clients
Tue Jan 20 13:00:00 2015 Jan Vcelak 1.6.1-3
- service file changes:
+ remove dependency on network.target
+ remove bounding capabilities (breaks reload)
Sat Dec 13 13:00:00 2014 Jan Vcelak 1.6.1-2
- new upstream release:
+ DNSSEC: support for Single-Type Signing Scheme
+ fix: journal file growing over configured limit
- service file changes:
+ run as \'knot\' user and group
+ set security bounding capabilities
+ change Type to \'notify\'
Thu Oct 30 13:00:00 2014 Jan Vcelak 1.6.0-2
- default config: run server as unprivileged user
- service file: remove useless startup dependencies
- service file: add bounding capabilities
Thu Oct 23 14:00:00 2014 Jan Vcelak 1.6.0-1
- new upstream release:
+ support for persistent zone timers (expire, refresh, and flush)
+ DNSSEC: RFC-compliant processing of letter case in RDATA domain names
+ EDNS: return minimal response for queries with unsupported version
+ EDNS: fix interpretation of Extended RCODE
+ transfers: fix forced zone retransfer
+ timers: properly expire zone when transfer is being refused by master
Mon Sep 15 14:00:00 2014 Jan Vcelak 1.5.3-1
- new upstream release:
+ fix crash on specific incoming IXFR message
+ fix rare synchronization error during server reload
+ fix crash in reverse record synthesis module on DNSSEC signed zones
+ fix message ID and opcode for AXFR-style IXFR responses
+ fix sending of large responses to remote control commands
Mon Sep 8 14:00:00 2014 Jan Vcelak 1.5.2-1
- new upstream release:
+ CVE-2014-0486: remote crash using crafted DNS message
+ transfers: do not refuse AXFR answers to IXFR queries
+ fix storing of hash character \'#\' in zone file
Tue Aug 19 14:00:00 2014 Jan Vcelak 1.5.1-1
- new upstream release:
+ logging: unified logging messages
+ logging: support for systemd journal
+ DDNS: processing updates in bulk
+ DDNS: fix signing of responses with TSIG
+ DDNS: fix prerequisites checking in apex node
+ DNSSEC: fix domain names conversion to canonical format before signing
+ DNSSEC: semantic checks for signing keys
+ EDNS: fix inclusion of OPT record into some packets
+ knsupdate: fix use of zone origin for deletions
Sun Aug 17 14:00:00 2014 Fedora Release Engineering - 1.5.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
Thu Jul 10 14:00:00 2014 Jan Vcelak 1.5.0-1
- update to 1.5.0
+ reimplemented DDNS forwarding
+ transfer sizes logged in bytes
+ logging of outgoing/incoming NOTIFY messages
+ zone flush planning after bootstrap
+ DDNS signing changes freeing
+ knotc key handling
- update to 1.5.0-rc2
+ edns-client-subnet support in kdig
+ optional asynchronous startup (config \'asynchronous-start\')
+ preempt task queue for faster reload
+ lazy zone file write after zone transfer (config \'zonefile-sync\')
+ close zone transfer after SERVFAIL response
+ incremental to full zone transfer fallback, wrong log message
+ zone events corner cases, reload replanning
- update to 1.5.0-rc1
+ Pluggable query processing modules
+ Synthetic IPv4/IPv6 reverse/forward records (optional module)
+ Dnstap support in both utilities & server (optional module)
+ NOTIFY message support and new TSIG section in kdig
+ Multi-master support
+ Query processing and core functionality overhaul
+ Performance and reduced memory footprint
+ Faster zone events scheduling
+ RFC compliant queries/responses in some corner cases
+ Log messages
+ New documentation (Sphinx)
- enabled dynamic linking
- removed info pages
Wed Jun 18 14:00:00 2014 Jan Vcelak 1.4.7-1
- update to 1.4.7
+ Fixed DDNS corner cases
+ Fixed zone EXPIRE timer
+ Fixed semantic checks false positives
+ Fixed sending malformed IXFR with automatic DNSSEC
+ Fixed NAPTR record serialization
Thu May 22 14:00:00 2014 Jan Vcelak 1.4.6-2
- update to 1.4.6
+ DNSSEC: fix possible signing loop when doing key rollover
+ RRL: fixed sending of malformed UDP empty responses
Mon Apr 14 14:00:00 2014 Jan Vcelak 1.4.5-1
- update to 1.4.5
+ fix weakness in TSIG digest checking
Thu Mar 27 13:00:00 2014 Jan Vcelak 1.4.4-1
- update to 1.4.4
+ server is logging remote control commands
+ \'knotc reload\' doesn\'t refresh unchanged zones
+ \'knotc -f refresh\' forces zone retransfer
+ missing notifications after DDNS/automatic resign
+ zone is rebootstrapped if the zone file is unreadable
+ progressive bootstrap retry backoff
+ zone file parser allows asterisk as part of the label
+ journal maximum entry size fixes
+ sign DNSKEYs in non-apex nodes as regular RR sets
+ various spelling and typo fixes
Tue Feb 18 13:00:00 2014 Jan Vcelak 1.4.3-1
- update to 1.4.3
+ DNSSEC: fixes in authenticated denial proofs
+ zone parser: case insensitive comparison of $ORIGIN
+ journal: fix corruption if zone loading fails
+ config: add support for includes of directories
Wed Feb 12 13:00:00 2014 Jan Vcelak 1.4.2-3
- rebuild with new userspace-rcu
Mon Jan 27 13:00:00 2014 Jan Vcelak 1.4.2-2
- enable IDN support in domain names
Mon Jan 27 13:00:00 2014 Jan Vcelak 1.4.2-1
- update to 1.4.2
Mon Jan 13 13:00:00 2014 Jan Vcelak 1.4.1-1
- update to 1.4.1
Mon Jan 6 13:00:00 2014 Jan Vcelak 1.4.0-1
- update to 1.4.0
Fri Dec 13 13:00:00 2013 Jan Vcelak 1.4.0-0.2.rc2
- update to 1.4.0-rc2
Tue Nov 26 13:00:00 2013 Jan Vcelak 1.4.0-0.1.rc1
- update to 1.4.0-rc1
Tue Oct 8 14:00:00 2013 Jan Vcelak 1.3.2-2
- fix failing wire reading/writing tests on big endian (#1015976)
Tue Oct 1 14:00:00 2013 Jan Vcelak 1.3.2-1
- update to 1.3.2
+ possibility to set max UDP payload in EDNS0
+ fixed bug limiting payload size in some TCP responses
+ fixed closing of file descriptors for included files in config
Sun Sep 1 14:00:00 2013 Jan Vcelak 1.3.1-1
- update to 1.3.1
Mon Jul 29 14:00:00 2013 Jan Vcelak 1.3.0-0.4.rc5
- update to 1.3.0-rc5
Mon Jul 15 14:00:00 2013 Paul Wouters - 1.3.0-0.3.rc4
- Added Alias=knotd.service alias to service file
- Added ExecStartPre=/usr/sbin/knotc checkconf to service file
Mon Jul 15 14:00:00 2013 Jan Vcelak 1.3.0-0.2.rc4
- update to 1.3.0-rc4
Wed Jul 3 14:00:00 2013 Jan Vcelak 1.3.0-0.1.rc3
- update to 1.3.0-rc3
- update configuration
- disable assertions in the code (define NDEBUG)
- enable unit tests as a part of RPM build process
- enable fast zone parser
- fix wrong dates in changelog
Fri Apr 5 14:00:00 2013 Paul Wouters - 1.2.0-1
- Updated to 1.2.0-1
- Enabled hardening/relro/pie protection
Thu Feb 14 13:00:00 2013 Fedora Release Engineering - 1.1.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
Thu Dec 20 13:00:00 2012 Paul Wouters - 1.1.3-2
- Use new systemd macros
Thu Dec 20 13:00:00 2012 Paul Wouters - 1.1.3-1
- Initial build for Fedora
Thu Nov 22 13:00:00 2012 Ondřej Surý - 1.1.2-1
- Update to 1.1.2
Wed Nov 7 13:00:00 2012 Stanislav Petr - 1.1.1-1
- Fixed build problem
- Update to 1.1.1
- Add man5 directory
- Add knot.info.gz to infodir
Mon Aug 27 14:00:00 2012 Stanislav Petr - 1.1.0-1
- Update to 1.1.0-rc2
- Fix default knot.conf
- Add build dependency to texinfo
Tue May 15 14:00:00 2012 Stanislav Petr - 1.0.6-2
- Try to fix compilation problem on some systems - force add -lgcc_eh to gcc flags
Sun May 13 14:00:00 2012 Stanislav Petr - 1.0.6-1
- Update to versio 1.0.6
- Change attrs to 750 on /etc/knot - only for root (knot configuration can contain DNS keys for zone updates)
- Clean content in /etc/knot
Tue May 1 14:00:00 2012 Stanislav Petr - 1.0.5-1
- Update to version 1.0.5
Wed Apr 18 14:00:00 2012 Stanislav Petr - 1.0.3-1
- Fixed knot directory ownership.
- Update to version 1.0.3
- Merget changes from Paul Wouters
- Removed unnecessary commands pro %post script
- Add knot user
- More configuration samples in /usr/share/doc/knot
Thu Mar 1 13:00:00 2012 Stanislav Petr - 1.0.0-4
- Update to upstream version 1.0.0
- Fix %{_sharedstatedir} usage in .spec.
- Fix file and directories ownership
- Fix service upgrade in postun in rpm.
- Do not install unittests.
Wed Jan 25 13:00:00 2012 Stanislav Petr - 0.9.1-3
- Update to upstream version 0.9.1
Mon Dec 12 13:00:00 2011 Stanislav Petr - 0.8.1-3
- Add docs (COPYING AUTHORS RELNOTES KNOWN_ISSUES)
- Update rpm building options.
Use %{_sharedstatedir} instead of %{_var}/lib,
dafault value for %{buildroot} path
- Remove ldconfig from post and postun in rpm.
- Update licence to GPLv3+
Wed Dec 7 13:00:00 2011 Stanislav Petr - 0.8.1-2
- RPM build fix
Mon Dec 5 13:00:00 2011 Stanislav Petr - 0.8.1-1
- Create
