Changelog for pdns-backend-mysql-3.4.1-52.1.i586.rpm :
Thu Oct 30 13:00:00 2014 michaelAATTstroeder.com
- update to version 3.4.1
Changes since 3.4.0:

* commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now
polls the security status of a release at startup and periodically. More
detail on this feature, and how to turn it off, can be found in Section 2,
“Security polling”.

* commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header
(X-API-Key)

* commit 4a95ab4: Use transaction for pdnssec increase-serial

* commit 6e82a23: Don\'t empty ordername during pdnssec increase-serial

* commit 535f4e3: honor SOA-EDIT while considering \"empty IXFR\" fallback, fixes
ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD
or BIND.

Tue Oct 28 13:00:00 2014 mrueckertAATTsuse.de
- only enable geoip backend on distros newer than 12.3
before the package lacks the pkg-config file and there is no
fallback to finding geoip without it.

Tue Oct 28 13:00:00 2014 mrueckertAATTsuse.de
- fix permissions of the home directory

Tue Oct 28 13:00:00 2014 mrueckertAATTsuse.de
- enable some backends that we had forgotten:
- pipe (main package)
- random (main package)
- geoip (new subpackage)
- new BR: yaml-cpp-devel and GeoIP-devel

Wed Oct 1 14:00:00 2014 mrueckertAATTsuse.de
- enable sqlite3 support also on sle11

Wed Oct 1 14:00:00 2014 mrueckertAATTsuse.de
- also drop asciidoc and ragel buildrequires:
- asciidoc seems unused
- ragel is only needed when we patch pdns/dnslabeltext.rl

Wed Oct 1 14:00:00 2014 mrueckertAATTsuse.de
- drop xmlto buildrequires

Wed Oct 1 14:00:00 2014 mrueckertAATTsuse.de
- only enable pkcs11 and zeromq support on distros newer than
11.1/SLE11

Wed Oct 1 14:00:00 2014 mrueckertAATTsuse.de
- convert all conditionals in the spec file to bcond_with(out)

Tue Sep 30 14:00:00 2014 mrueckertAATTsuse.de
- update to version 3.4.0
upgrade notes: http://doc.powerdns.com/html/from3.3.1to3.4.0.html
This is a performance, feature, bugfix and conformity update to
3.3.1 and any earlier version. It contains a huge amount of work
by various contributors, to whom we are very grateful.
For all the details see
http://doc.powerdns.com/html/changelog.html#changelog-auth-3.4.0
- use system polarssl on 13.2 and newer
new buildrequires polarssl-devel >= 1.1
- enable lmdb backend on 13.2 and newer (new subpackage)
new buildrequires: lmdb-devel
- enable zeromq backend (new subpackage)
new buildrequires: zeromq-devel
- enable pkcs11 support
new buildrequires: pkgconfig(p11-kit-1)
- drop docbook tools from buildrequires
- no longer extend the libdir with the pkg_name, configure does
that automatically now.
- drop remotebackend-http again. it got removed.
- refreshed the date/time patch:
new name: pdns-3.4.0-no_date_time.patch
- drop pdns-3.2_polarssl.patch: no longer needed. the intree copy
is integrated into the normal build system.
- package newly provided sql files in each subpackage.

Mon Sep 29 14:00:00 2014 crrodriguezAATTopensuse.org
- fix build in distros that do not have %_tmpfilesdir macro.

Mon Sep 29 14:00:00 2014 crrodriguezAATTopensuse.org
- Use lua-devel, current versions now support lua 5.2
- Use /run/pdns as _localstatedir in distros with systemd
this also requires using --with-socketdir even when
no systemd otherwise the path is overriden by the build
system.
- pdns-no-date-time.patch : Do not use __DATE__ or __TIME__
in source code and/or build system to make build-compare happy.

Sun Jul 20 14:00:00 2014 p.drouandAATTgmail.com
- Use systemd instead of sysvinit for openSUSE > 12.2
- Remove redundant %clean section

Tue Jun 10 14:00:00 2014 mrueckertAATTsuse.de
- forgot to remove the --enable-tools at the top.

Tue Jun 10 14:00:00 2014 mrueckertAATTsuse.de
- only enable the tools on distros newer than sle 11:
the boost version seems to be too old.

Sun Jun 8 14:00:00 2014 mrueckertAATTsuse.de
- update to version 3.3.1
Update notes http://doc.powerdns.com/html/from3.3to3.3.1.html
- direct-dnskey is no longer experimental, thanks Kees Monshouwer
& co for extensive testing (commit e4b36a4).
- Handle signals during poll (commit 5dde2c6).
- commit 7538e56: Fix zone2{sql,json} exit codes
- commit 7593c40: geobackend: fix possible nullptr deref
- commit 3506cc6: gpsqlbackend: don\'t append empty dbname=/user=
values to connect string
- gpgsql queries were simplified through the use of casting
(commit 9a6e39c).
- commit a7aa9be: Replace hardcoded make with variable
- commit e4fe901: make sure to run PKG_PROG_PKG_CONFIG before the
first PKG_
* usage
- commit 29bf169: fix hmac-md5 TSIG key lookup
- commit c4e348b: fix 64+ character TSIG keys
- commit 00a7b25: Fix comparison between signed and unsigned by
using uint32_t for inception on INCEPTION-EPOCH
- commit d3f6432: fix building on os x 10.9, thanks Martijn
Bakker.
- We now allow building against Lua 5.2 (commit bef3000, commit
2bdd03b, commit 88d9e99).
- commit fa1f845: autodetect MySQL 5.5+ connection charset
- When misconfigured using \'right\' timezones, a bug in (g)libc
gmtime breaks our signatures. Fixed in commit e4faf74 by Kees
Monshouwer by implementing our own gmtime_r.
- When sending SERVFAIL due to a CNAME loop, don\'t uselessly
include the CNAMEs (commit dfd1b82).
- Build fixes for platforms with \'weird\' types (like s390/s390x):
commit c669f7c (details), commit 07b904e and commit 2400764.
- Support for += syntax for options, commit 98dd325 and others.
- commit f8f29f4: nproxy: Add missing chdir(\"/\") after chroot()
- commit 2e6e9ad: fix for \"missing\" libmysqlclient on RHEL/CentOS
based systems
- pdnssec check-zone improvements in commit 5205892, commit
edb255f, commit 0dde9d0, commit 07ee700, commit 79a3091, commit
08f3452, commit bcf9daf, commit c9a3dd7, commit 6ebfd08, commit
fd53bd0, commit 7eaa83a, commit e319467, ,
- NSEC/NSEC3 fixes in commit 3191709, commit f75293f, commit
cd30e94, commit 74baf86, commit 1fa8b2b
- The webserver could crash when the ring buffers were resized,
fixed in commit 3dfb45f.
- commit 213ec4a: add constraints for name to pg schema
- commit f104427: make domainmetadata queries case insensitive
- commit 78fc378: no label compression for name in TSIG records
- commit 15d6ffb: pdnssec now outputs ZSK DNSKEY records if
experimental-direct-dnskey support is enabled (renamed to
direct-dnskey before release!)
- commit ad67d0e: drop cryptopp from static build as
libcryptopp.a is broken on Debian 7, which is what we build on
- commit 7632dd8: support polarssl 1.3 externally.
- Remotebackend was fully updated in various commits.
- commit 82def39: SOA-EDIT: fix INCEPTION-INCREMENT handling
- commit a3a546c: add innodb-read-committed option to gmysql
settings.
- commit 9c56e16: actually notice timeout during AXFR retrieve,
thanks hkraal
- pass V=1 to make calls so we actually see the compiler cmdlines
- enable http support for remotebackend. new buildrequires:
curl-devel
- prepare lmdb backend for 13.2 and newer
- remove pdns-3.1_lib_lua.patch, solved differently upstream.
- enabled tools building
- removed custom hack to build pdns tools

Thu Nov 7 13:00:00 2013 jamespAATTvicidial.com
- update to version 3.3
This a stability, bugfix and conformity update to 3.2. It
improves interoperability with various validators, either through
bugfixes or by catering to their needs beyond the specifications.
Please follow the upgrate notes on
http://doc.powerdns.com/html/from3.2to3.3.html
- Removed dnsreplay and ChangeLog as it was removed in the source
- Added pdnssec and zone2ldap man pages

Mon Jan 21 13:00:00 2013 mrueckertAATTsuse.de
- update to version 3.2
This is a stability and conformity update to 3.1. It mostly makes
our DNSSEC implementation more robust, and improves
interoperability with various validators. 3.2 has received very
extensive testing on a lot of edge cases, verifying output both
against common validators and compared against other
authoritative servers.
Please follow the upgrate notes on
http://doc.powerdns.com/from3.1to3.2.html
For the details see:
http://rtfm.powerdns.com/changelog.html#changelog-auth-3-2
- dropped qsqlite backend. dropped upstream dropped the sqlite2
support.
- fixed building of the sqlite3 backend.
- use system botan if possible.
- refreshed polarssl patch
old name: pdns-3.0.rc1_polarssl.patch
new name: pdns-3.2_polarssl.patch

Mon Nov 19 13:00:00 2012 dimstarAATTopensuse.org
- Fix useradd invocation: -o is useless without -u and newer
versions of pwdutils/shadowutils fail on this now.

Thu Sep 27 14:00:00 2012 idonmezAATTsuse.com
- Fix the SLES check so we correctly use sqlite3 for newer distros

Mon May 21 14:00:00 2012 mrueckertAATTsuse.de
- set license to GPLv2 Only (bnc#762986)

Fri May 4 14:00:00 2012 mrueckertAATTsuse.de
- update to 3.1
Warning:
Version 3.1 of the PowerDNS Authoritative Server is a
major upgrade if you are coming from 2.9.x. There are also some
important changes if you are coming from 3.0. Please refer to
Section 1, “From PowerDNS Authoritative Server 2.9.x to 3.0” and
Section 2, “From PowerDNS Authoritative Server 3.0 to 3.1” for
important information on correct and stable operation, as well as
notes on performance and memory use.
For the details see:
http://rtfm.powerdns.com/changelog.html#changelog-auth-3-1
- added pdns-3.1_lib_lua.patch:
instead of using an hardcoded -llua5.1 use the LUA_LIBS variable.
- refreshed pdns-3.0.rc1_polarssl.patch
- added 2 new subpackages:
pdns-backend-mydns
pdns-backend-lua (new dependency 5.2 > lua >= 5.1)

Wed Apr 18 14:00:00 2012 mrueckertAATTsuse.de
- use %{_sysconfdir}/init.d/ instead of %{_initddir} to fix build
on older distros

Wed Apr 18 14:00:00 2012 mrueckertAATTsuse.de
- update to 3.0.1
This is 3.0 + the fix for CVE-2012-0206
Warning:
Version 3.0 of the PowerDNS Authoritative Server is a major
upgrade. Please refer to Section 1, “From PowerDNS Authoritative
Server 2.9.x to 3.0” for important information on correct and
stable operation, as well as notes on performance and memory use.
For the details see:
http://rtfm.powerdns.com/changelog.html#changelog-auth-3-0-1
- build all binaries with as PIE (bnc#743152)

Tue Mar 6 13:00:00 2012 mhruseckyAATTsuse.cz
- fixed lua dependency (fixed build on Factory)

Mon Feb 13 13:00:00 2012 cooloAATTsuse.com
- patch license to follow spdx.org standard

Sun Nov 20 13:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to avoid implicit dependency

Mon Oct 3 14:00:00 2011 mhruseckyAATTsuse.cz
- fixed build on factory

Thu Aug 18 14:00:00 2011 mhruseckyAATTsuse.cz
- update to 3.0

* main feature is DNSSEC support

* for full changelog see
http://doc.powerdns.com/changelog.html#changelog-auth-3-0

Wed Apr 28 14:00:00 2010 mrueckertAATTsuse.de
- create /var/run/pdns directory in the init script and package it
as ghost.

Wed Apr 28 14:00:00 2010 mrueckertAATTsuse.de
- fix feature guards

Tue Apr 27 14:00:00 2010 mrueckertAATTsuse.de
- add pdns-2.9.22_missing_includes.patch:
add missing includes

Tue Jun 9 14:00:00 2009 cooloAATTnovell.com
- fix build with gcc 4.4

Wed Jan 28 13:00:00 2009 mrueckertAATTsuse.de
- updated to version 2.9.22
\"This is a huge release, spanning almost 20 months of
development. Besides fixing a lot of bugs, of note is the
addition of the so called \'Notification Proxy\', which allows
PowerDNS to function as a master server behind a firewall, plus
the huge performance improvement of the internal caches.\"
http://doc.powerdns.com/changelog.html#CHANGELOG-AUTH-2-9-22
- updated pdns-2.9.21.1-wrong-pgsql.patch
new name: pdns-2.9.22_wrong_pgsql.patch
- updated pdns-2.9.21.1_new_boost_exceptions.patch:
most fixes went into 2.9.22. Just the LDAP chunk got lost
somehow. Additional the new patch also fixes the odbc backend
(we do not build this one, but the patch got also send upstream)
new name pdns-2.9.22_new_boost_exceptions.patch
- dropped patches after upstream included them:
pdns-2.9.21.1_gcc43.patch
pdns-2.9.21.1_unversioned_modules.patch
- added pdns-2.9.22_warnings.patch:
fix 2 small compiler warnings

Tue Nov 18 13:00:00 2008 mrueckertAATTsuse.de
- update to version 2.9.21.2: (bnc#445568)
do not crash with HINFO CHAOS requests when configured with
\'distributor-threads=1\'
- make default config more sane
- remove guardian commandline parameter. it was hiding the startup
errors. If you want to use the guardian reenable it in the
configuration file.
- mark init script as config

Fri Nov 14 13:00:00 2008 mrueckertAATTsuse.de
- make conditionals use suse_version instead of sles_version

Thu Nov 6 13:00:00 2008 mrueckertAATTsuse.de
- added pdns-2.9.21.1_new_boost_exceptions.patch:
clearify the referenced exception class

Fri Oct 17 14:00:00 2008 roAATTsuse.de
- last change does not work yet, disable forcefully

Thu Aug 21 14:00:00 2008 mrueckertAATTsuse.de
- replaced conditional on #{opensuse_bs} with:
[#]if #(echo \"%distribution\" | grep -Ec \'^server:dns\')

Mon Aug 11 14:00:00 2008 anosekAATTsuse.cz
- updated to version 2.9.21.1
- fixes security issue CVE-2008-3337 (bnc#415369)

Wed Apr 23 14:00:00 2008 crrodriguezAATTsuse.de
- fix build, wrong pq library detection.

Sun Oct 28 13:00:00 2007 mrueckertAATTsuse.de
- added pdns-2.9.21_gcc43.patch:
fix nearly all warnings (patch is upstream)
- removed pdns-2.9.20-warnings.patch:
better version included in pdns-2.9.21_gcc43.patch
- added README.opendbx:
include documentation for the opendbx backend (buildservice only)

Tue Sep 25 14:00:00 2007 mrueckertAATTsuse.de
- added pdns-2.9.21_unversioned_modules.patch:
the plugins dont need versioning

Tue Sep 25 14:00:00 2007 mrueckertAATTsuse.de
- reorder %package list to work around a bug in prepare_spec
which breaks debuginfo packages

Wed Apr 25 14:00:00 2007 mrueckertAATTsuse.de
- disable the patch again. i think it breaks for me on 64bit.

Tue Apr 24 14:00:00 2007 mrueckertAATTsuse.de
- readd pdns-2.9.20-warnings.patch [#232489]

Tue Apr 24 14:00:00 2007 mrueckertAATTsuse.de
- more tight permissions for the config dir as the config file can
contain passwords

Sat Apr 21 14:00:00 2007 mrueckertAATTsuse.de
- fix build on 64bit hosts
- sync with pdns-snapshot (pkg_name)

Sat Apr 21 14:00:00 2007 mrueckertAATTsuse.de
- update to 2.9.21:
- Bugs:
- Multi-part TXT records weren\'t supported. This has been
fixed, and regression tests have been added. Code in commits
1016, 996, 994.
- Email addresses with embedded dots in SOA records were not
parsed correctly, nor were other embedded dots. Noted by
\'Bastiaan\', fixed in commit 1026.
- BIND backend treated the \'m\' TTL modifier as \'months\' and not
\'minutes\'. Closes Debian bug 406462. Addressed in commit
1026.
- Our snapshots were built against a static version of
PosgreSQL that was incompatible with many Linux
distributions, leading to instant crashes on startup. Fixed
in 1022 and 1023.
- CNAME referrals to child zones gave improper responses. Noted
by Augie Schwer in ticket 123, fixed in commit 992.
- When passing a port number with the recursor setting, this
would sometimes generate errors during additional processing.
Switched off overly helpful additional processing for
recursive queries to remove this problem. Implemented in
commit 1031, spotted by Ralf van der Enden.
- NS to a nameserver with the name of the zone itself generated
problems. Spotted by Augie Schwer, fixed in commit 947.
- Multi-line records in the BIND backend were not always parsed
correctly. Fixed in commit 1014.
- The LOC-record had problems operating outside of the eastern
hemisphere of the northern part of the world! Fixed in commit
1011.
- Backends were compiled without multithreading preprocessor
flags. As far as we can determine, this would only cause
problems for the BIND backend, but we cannot rule out this
caused instability in other backends. Fixed in commit 1001.
- The BIND backend was highly unstable under reloads, and
leaked memory and file descriptors. Thanks to Mark Bergsma
and Massimo Bandinelli for respectively pointing this out to
us and testing large amounts of patches to fix the problem.
The fixes have resulted in better performance, less code, and
a remarkable simplification of this backend. Commits 1039,
1034, 1035, 1006, 999, 905 and previous.
- BIND backend gave convincing NXDOMAINS on unloaded zones in
some cases. Spotted and fixed by Daniel Bilik in commit 984.
- SOA records in zone transfers sometimes contained the wrong
SOA TTL. Spotted by Christian Kuehn, fixed in commit 902.
- PowerDNS could get confused by very high SOA serial numbers.
Spotted and fixed by Dan Billik, fixed in commit 626.
- Some versions of FreeBSD perform very strict checks on socket
address sizes passed to \'connect\', which could lead to
problems retrieving zones over AXFR. Fixed in commit 891.
- Some versions of FreeBSD perform very strict checks on IPv6
socket addresses, leading to problems. Discovered by Sten
Spans, fixed in commit 885 and commit 886.
- IXFR requests were not logged properly. Noted by Ralf van der
Enden, fixed in commit 990.
- Some NAPTR records needed an additional space character to
encode correctly. Spotted by Heinrich Ruthensteiner, fixed in
commit 1029.
- Many bugs in the TCP nameserver, leading to a PowerDNS
process that did not respond to TCP queries over time. Many
fixes provided by Dan Bilik, other problems were fixed by
rewriting our TCP handling code. Commits 982 and 980, 950,
924, 889, 874, 869, 685, 684.
- Fix crashes on the ARM processor due to alignment errors.
Thanks to Sjoerd Simons. Closes Debian bug 397031.
- Missing data in generic SQL backends would sometimes lead to
faked SOA serial data. Spotted by Leander Lakkas from True.
Fix in commit 866.
- When receiving two quick notifications in succession, the
packet cache would sometimes \"process\" the second one,
leading PowerDNS to ignore it. Spotted by Dan Bilik, fixed in
commit 686.
- Geobackend (by Mark Bergsma) did not properly override the
getSOA method, breaking non-overlay operation of this fine
backend. The geobackend now also skips \'.hidden\'
configuration files, and now properly disregards empty
configuration files. Additionally, the overlapping abilities
were improved. Details available in commit 876, by Mark.
- Features:
- Thanks to EasyDNS, PowerDNS now supports multiple masters per
domain. For configuration details, see Section 13.2.
Implemented in commit 1018, commit 1017.
- Thanks to EasyDNS, PowerDNS now supports the KEY record type,
as well the SPF record. In commit 976.
- Added support for CERT, SSHFP, DNSKEY, DS, NSEC, RRSIG record
types, as part of the move to the new DNS parsing/generating
code.
- Support for the AFSDB record type, as requested by \'Bastian\'.
Implemented in commit 978, closing ticket 129.
- Support for the MR record type. Implemented in commit 941 and
commit 1019.
- Gsqlite3 backend was added by Antony Lesuisse in commit 942;
- Added the ability to send out light-weight root-referrals
that save bandwidth yet still placate mediocre resolver
implementations. Implemented in commit 912, enable with
\'root-referral=lean\'.
- Improvements:
- Miscellaneous OpenDBX and LDAP backend improvements by
Norbert Sendetzky. Applied in commit 977 and commit 1040.
- SGML source of the documentation was cleaned up by Ruben
Kerkhof in commit 936.
- Speedups in core DNS label processing code. Implemented in
commit 928, commit 654, commit 1020.
- When communicating with master servers and encountering
errors, more useful details are logged. Reported by Stefan
Arentz in ticket 137, closed by commit 1015.
- Database errors are now logged with more details. Addressed
in commit 1004.
- pdns_control problems are now logged more verbosely. Change
in commit 910.
- Erroneous address configuration was logged unclearly. Spotted
by River Tarnell, fixed in commit 888.
- Example configuration shipped with PowerDNS was very old.
Noted by Leen Besselink, fixed in commit 946.
- PowerDNS neglected to chdir to the root when chrooted. This
closes ticket 110, fixed in commit 944.
- Microsoft resolver had problems with responses we generated
for CNAMEs pointing out of our bailiwick. Fixed in commit 983
and expedited by Locaweb.com.br.
- Built-in webserver logs errors more verbosely. Closes ticket
82, gixed in commit 991.
- Queries containing \'AATT\' no longer flood the logs. Addressed in
commit 1014.
- The build process now looks for PostgreSQL in more places.
Implemented in commit 998, closes ticket 90.
- Speedups in the BIND backend now mean large installations
enjoy startup times up to 30 times faster than with the
original BIND nameserver. Many thanks to Massimo Bandinelli.
- BIND backend now offers full support for query logging,
implemented in commit 1026, commit 1029.
- BIND backend named.conf parsing is now fully case-insensitive
for domain names. This closes Debian bug 406461, fixed in
commit 1027.
- IPv6 and IPv4 address parsing routines have been replaced,
which should result in prettier output in some cases. commit
962, commit 1012 and others.
- 5 new regression tests have been added to insure old bugs do
not return.
- Fix small issues with very modern compilers and BOOST
snapshots. Noted by Marcus Rueckert, addressed in commit 954,
commit 964 commit 965, commit 1003.
- removed patches as they are included upstream:
opendbxbackend_2.9.20-5.diff
pdns-2.9.17_cve-2006-4251.patch
pdns-2.9.19-CVE-2006-2069.patch
pdns-2.9.20_2006-02.patch
- added sqlite3 backend
- the spec file should now build on sles9 aswell.

Thu Mar 29 14:00:00 2007 mrueckertAATTsuse.de
- update opendbxbackend_2.9.20-3.diff to
opendbxbackend_2.9.20-5.diff
- added pwdutil and gdbm-devel

Tue Jan 9 13:00:00 2007 anosekAATTsuse.cz
- fixed compiler warning: integer operation result is out of range
[#232489] (warnings.patch)

Mon Nov 13 13:00:00 2006 mrueckertAATTsuse.de
- added pdns-2.9.20_2006-02.patch:
fix an endless recursion in CNAME handling [#219355]

Sat Nov 11 13:00:00 2006 mrueckertAATTsuse.de
- added pdns-2.9.17_cve-2006-4251.patch:
fix a stack corruption with malformed packages [#219355]

Thu Oct 19 14:00:00 2006 mrueckertAATTsuse.de
- this is a sync to the buildservice package in server:dns:
- remove .la files

Fri Oct 13 14:00:00 2006 mrueckertAATTsuse.de
- added opendbxbackend_2.9.20-3.diff:
updates the opendbx backend to the latest version