The NetBSD Project

CVS log for pkgsrc/net/powerdns-recursor/Makefile

[BACK] Up to [cvs.NetBSD.org] / pkgsrc / net / powerdns-recursor

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.32 / (download) - annotate - [select for diffs], Wed Feb 20 12:19:44 2019 UTC (8 weeks, 2 days ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base, pkgsrc-2019Q1, HEAD
Changes since 1.31: +5 -2 lines
Diff to previous 1.31 (colored)

powerdns-recursor: updated to 4.1.11

4.1.11
Since Spectre/Meltdown, system calls have become more expensive. This made exporting a very high number of protobuf messages costly, which is addressed in this release by reducing the number of sycalls per message.

Improvements
Add an option to export only responses over protobuf to the Lua protobufServer() directive.
Reduce systemcall usage in protobuf logging.


4.1.10
This release fixes a bug when trying to build PowerDNS Recursor with protobuf support disabled, thus this release is only relevant to people building PowerDNS Recursor from source and not if you„ŗ—”e installing it as a package from our repositories.

Bug Fixes
PowerDNS Recursor release 4.1.9 introduced a call to the Lua ipfilter() hook that required access to the DNS header, but the corresponding variable was only declared when protobuf support had been enabled.


4.1.9
This release fixes Security Advisory 2019-01 and Security Advisory 2019-02 that were recently discovered, affecting PowerDNS Recursor:
CVE-2019-3806, 2019-01: from 4.1.4 up to and including 4.1.8 ;
CVE-2019-3807, 2019-02: from 4.1.0 up to and including 4.1.8.

The issues are:
CVE-2019-3806, 2019-01: Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua ;
CVE-2019-3807, 2019-02: records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.

Improvements
Try another worker before failing if the first pipe was full

Revision 1.31 / (download) - annotate - [select for diffs], Fri Nov 30 12:57:41 2018 UTC (4 months, 2 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2018Q4-base, pkgsrc-2018Q4
Changes since 1.30: +12 -12 lines
Diff to previous 1.30 (colored)

powerdns-recursor: updated to 4.1.8

Recursor 4.1.8
Crafted query can cause a denial of service (CVE-2018-16855)


Recursor 4.1.7
Revert „ŗŌ¨eep the EDNS status of a server on FormErr with EDNS„ŗRefuse queries for all meta-types


Recursor 4.1.6
Revert „ŗ◊”ec: Authority records in AA=1 CNAME answer are authoritative„ŗ


Recursor 4.1.5

PowerDNS Security Advisory 2018-04 (CVE-2018-10851)
PowerDNS Security Advisory 2018-06 (CVE-2018-14626)
PowerDNS Security Advisory 2018-07 (CVE-2018-14644)

Improvements
Add pdnslog to lua configuration scripts (Chris Hofstaedtler)
Fix compilation with libressl 2.7.0+
Export outgoing ECS value and server ID in protobuf (if any)
Switch to devtoolset 7 for el6
Allow the signature inception to be off by a number of seconds (Kees Monshouwer)

Bug Fixes
Crafted answer can cause a denial of service (CVE-2018-10851)
Packet cache pollution via crafted query (CVE-2018-14626)
Crafted query for meta-types can cause a denial of service (CVE-2018-14644)
Delay the creation of rpz threads until we have dropped privileges
Cleanup the netmask trees used for the ecs index on removals
Make sure that the ecs scope from the auth is < to the source
Authority records in aa=1 cname answer are authoritative
Avoid a memory leak in catch-all exception handler
Don„ŗ—’ require authoritative answers for forward-recurse zones
Release memory in case of error in the openssl ecdsa constructor
Convert a few uses to toLogString to print DNSName„ŗ—‘ that may be empty in a safer manner
Avoid a crash on DEC Alpha systems
Clear all caches on (N)TA changes

Revision 1.30 / (download) - annotate - [select for diffs], Tue Sep 4 10:22:38 2018 UTC (7 months, 2 weeks ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base, pkgsrc-2018Q3
Changes since 1.29: +2 -2 lines
Diff to previous 1.29 (colored)

net/powerdns-recursor: Update to 4.1.4.

Improvements

- Split pdns_enable_unit_tests.
- Add a new max-udp-queries-per-round setting.
- Fix warnings reported by gcc 8.1.0.
- Tests: replace awk command by perl.
- Allow the snmp thread to retrieve statistics.

Bug Fixes

- Don„ŗ—’ account chained queries more than once.
- Make rec_control respect include-dir.
- Load lua scripts only in worker threads.
- Purge all auth/forward zone data including subtree.

Revision 1.29 / (download) - annotate - [select for diffs], Wed May 23 10:34:58 2018 UTC (10 months, 3 weeks ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base, pkgsrc-2018Q2
Changes since 1.28: +2 -2 lines
Diff to previous 1.28 (colored)

net/powerdns-recursor: Update to 4.1.3.

Improvements
- Add a subtree option to the API cache flush endpoint.
- Use a separate, non-blocking pipe to distribute queries.
- Move carbon/webserver/control/stats handling to a separate thread.
- Add _raw versions for QName / ComboAddresses to the FFI API.
- Update copyright years to 2018
- Fix a warning on botan >= 2.5.0.

Bug Fixes
- Count a lookup into an internal auth zone as a cache miss.
- Don„ŗ—’ increase the DNSSEC validations counters when running with
  process-no-validate.
- Respect the AXFR timeout while connecting to the RPZ server.
- Increase MTasker stacksize to avoid crash in exception unwinding
- Use the SyncRes time in our unit tests when checking cache validity
- Add -rdynamic to C{,XX}FLAGS when we build with LuaJIT.
- Delay the loading of RPZ zones until the parsing is done, fixing a
  race condition.
- Reorder includes to avoid boost L conflict.

Revision 1.28 / (download) - annotate - [select for diffs], Thu Apr 5 08:15:02 2018 UTC (12 months, 2 weeks ago) by fhajny
Branch: MAIN
Changes since 1.27: +2 -2 lines
Diff to previous 1.27 (colored)

net/powerdns-recursor: Update to 4.1.2.

New Features
- Add FFI version of gettag().

Improvements
- Add the option to set the AXFR timeout for RPZs.
- IXFR: correct behavior of dealing with DNS Name with multiple
  records and speed up IXFR transaction.
- Add RPZ statistics endpoint to the API.

Bug Fixes
- Retry loading RPZ zones from server when they fail initially.
- Fix ECS-based cache entry refresh code.
- Fix ECS-specific NS AAAA not being returned from the cache.

Revision 1.27 / (download) - annotate - [select for diffs], Mon Jan 22 19:21:46 2018 UTC (14 months, 3 weeks ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base, pkgsrc-2018Q1
Changes since 1.26: +2 -2 lines
Diff to previous 1.26 (colored)

Update net/powerdns-recursor to 4.1.1.

Improvements
- Don't process records for another class than IN

Bug Fixes
- Correctly handle ancestor delegation NSEC{,3} for children.
  (CVE-2018-1000003)
- Fix the computation of the closest encloser for positive answers.
- Pass the correct buffer size to arecvfrom().
- Fix to make primeHints threadsafe, otherwise there's a small chance
  on startup that the root-server IPs will be incorrect.
- Don't validate signature for "glue" CNAME, since anything else than
  the initial CNAME can't be considered authoritative.

Revision 1.26 / (download) - annotate - [select for diffs], Tue Jan 2 12:23:55 2018 UTC (15 months, 2 weeks ago) by fhajny
Branch: MAIN
Changes since 1.25: +3 -4 lines
Diff to previous 1.25 (colored)

Update net/powerdns-recursor to 4.1.0.
Lua support no longer optional.

PowerDNS Recursor 4.1.0
===========================================================

- Improved DNSSEC support
- Improved documentation
- Improved RPZ support
- Improved EDNS Client Subnet support
- Support for Botan 2.x (and removal of support for Botan 1.10)
- SNMP support
- Lua engine has gained access to more parts of the recursor
- CPU affinity can now be specified
- TCP Fast Open support
- New performance metrics

Full changelog:

  https://doc.powerdns.com/recursor/changelog/4.1.html


PowerDNS Recursor 4.0.7
===========================================================

- Insufficient validation of DNSSEC signatures (CVE-2017-15090)
- Cross-Site Scripting in the web interface (CVE-2017-15092)
- Configuration file injection in the API (CVE-2017-15093)
- Memory leak in DNSSEC parsing (CVE-2017-15094)

Bug fixes
- Update rec_control manpage
- Check in the detected OpenSSL/libcrypto for ECDSA
- Make more specific Netmasks < to less specific ones
- Fix validation at the exact RRSIG inception or expiration time
- Lowercase all outgoing qnames when lowercase-outgoing is set
- Fix libatomic detection on ppc64
- Edit configname definition to include the 'config-name' argument

Improvements
- Extract nested exception from Luawrapper
- Use explicit yes for default-enabled settings
- Throw an error when lua-conf-file can't be loaded
- get-remote-ring's "other" report should only have two items.
- PowerDNS sdig does not truncate trailing bits of EDNS Client Subnet
  mask
- Only increase no-packet-error on the first read
- Add support for Botan 2.x
- Add more information to recursor cache dumps
- Fix typo in two log messages
- Add help text on autodetecting systemd support
- Be more resilient with broken auths
- Remove pdns.PASS and pdns.TRUNCATE
- Improve dnsbulktest experience in travis for more robustness
- Create socket-dir from init-script
- b.root renumbering, effective 2017-10-24
- Don't retry security polling too often when it fails

Revision 1.25 / (download) - annotate - [select for diffs], Sun Sep 3 08:53:13 2017 UTC (19 months, 2 weeks ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2017Q4-base, pkgsrc-2017Q4, pkgsrc-2017Q3-base, pkgsrc-2017Q3, pkgsrc-
Changes since 1.24: +2 -2 lines
Diff to previous 1.24 (colored)

Follow some redirects.

Revision 1.24 / (download) - annotate - [select for diffs], Wed Aug 2 20:15:42 2017 UTC (20 months, 2 weeks ago) by fhajny
Branch: MAIN
Changes since 1.23: +2 -2 lines
Diff to previous 1.23 (colored)

Update net/powerdns-recursor to 4.0.6

Bug fixes
- Use the incoming ECS for cache lookup if use-incoming-edns-subnet is
  set
- when making a netmask from a comboaddress, we neglected to zero the
  port. This could lead to a proliferation of netmasks.
- Don't take the initial ECS source for a scope one if EDNS is off
- also set d_requestor without Lua: the ECS logic needs it
- Fix IXFR skipping the additions part of the last sequence
- Treat requestor's payload size lower than 512 as equal to 512
- make URI integers 16 bits, fixes ticket #5443
- unbreak quoting

Improvements
- EDNS Client Subnet becomes compatible with the packet cache, using
  the existing variable answer facility.
- Remove just enough entries from the cache, not one more than asked
- Move expired cache entries to the front so they are expunged
- changed IPv6 addr of b.root-servers.net
- e.root-servers.net has IPv6 now
- hello decaf signers (ED25519 and ED448)
- don't use the libdecaf ed25519 signer when libsodium is enabled
  (Kees Monshouwer)
- do not hash the message in the ed25519 signer (Kees Monshouwer)
- Disable use-incoming-edns-subnet by default

Revision 1.23 / (download) - annotate - [select for diffs], Thu Jun 15 07:15:57 2017 UTC (22 months ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base, pkgsrc-2017Q2
Changes since 1.22: +2 -3 lines
Diff to previous 1.22 (colored)

Update net/powerdns-recursor to 4.0.5.

Enhancements
- Add the 2017 DNSSEC root key
- Add support for RPZ wildcarded target names.
- Speed up RPZ zone loading and add a zoneSizeHint parameter to
  rpzFile and rpzMaster for faster reloads
- Make the RPZ summary consistent and log additions/removals at debug
  level, not info
- Update Ed25519 algorithm number and mnemonic and hook up to the
  Recursor
- Add use-incoming-edns-subnet option to process and pass along ECS
  and fix some ECS bugs in the process
- Refuse to start with chroot set in a systemd env
- Handle exceptions raised by closesocket() to prevent process
  termination
- Document missing top-pub-queries and top-pub-servfail-queries
  commands for rec_control
- IPv6 address for g.root-servers.net added
- Log outgoing queries / incoming responses via protobuf

Bug fixes
- Correctly lowercase the TSIG algorithm name in hash computation
- Clear the RPZ NS IP table when clearing the policy, this prevents
  false positives
- Fix cache-only queries against a forward-zone
- Only delegate if NSes are below apex in auth-zones
- Remove hardcoding of port 53 for TCP/IP forwarded zones in recursor
- Make sure labelsToAdd is not empty in getZoneCuts()
- Wait until after daemonizing to start the outgoing protobuf thread,
  prevents hangs when the protobuf server is not available
- Ensure (re)priming the root never fails
- Don't age the root, fixes a regression from 3.x
- Fix exception when sending a protobuf message for an empty question
- LuaWrapper: Allow embedded NULs in strings received from Lua
- Fix coredumps on illumos/SmartOS
- StateHolder: Allocate (and copy if needed) before taking the lock
- SuffixMatchNode: Fix insertion issue for an existing node
- Fix negative port detection for IPv6 addresses on 32-bit systems

Revision 1.22 / (download) - annotate - [select for diffs], Wed May 3 08:38:44 2017 UTC (23 months, 2 weeks ago) by jperkin
Branch: MAIN
Changes since 1.21: +3 -3 lines
Diff to previous 1.21 (colored)

Convert CXXFLAGS setting C++ standard to USE_LANGUAGES.

Revision 1.21 / (download) - annotate - [select for diffs], Fri Mar 31 19:41:13 2017 UTC (2 years ago) by fhajny
Branch: MAIN
Changes since 1.20: +2 -1 lines
Diff to previous 1.20 (colored)

powerdns-recursor also needs the segfault fix for SunOS. PKGREVISION++

Revision 1.20 / (download) - annotate - [select for diffs], Fri Mar 24 18:45:44 2017 UTC (2 years ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base, pkgsrc-2017Q1
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

Requires pkg-config to build properly

Revision 1.19 / (download) - annotate - [select for diffs], Thu Mar 9 13:43:49 2017 UTC (2 years, 1 month ago) by fhajny
Branch: MAIN
Changes since 1.18: +7 -13 lines
Diff to previous 1.18 (colored)

Update net/powerdns-recursor to 4.0.4.

PowerDNS Recursor 4.0.4
=======================

Change highlights include:

- Check TSIG signature on IXFR (Security Advisory 2016-04)
- Don't parse spurious RRs in queries when we don't need them
  (Security Advisory 2016-02)
- Add 'max-recursion-depth' to limit the number of internal recursion
- Wait until after daemonizing to start the RPZ and protobuf threads
- On RPZ customPolicy, follow the resulting CNAME
- Make the negcache forwarded zones aware
- Cache records for zones that were delegated to from a forwarded zone
- DNSSEC: don't go bogus on zero configured DSs
- DNSSEC: NSEC3 optout and Bogus insecure forward fixes
- DNSSEC: Handle CNAMEs at the apex of secure zones to other secure
  zones

PowerDNS Recursor 4.0.3
=======================

Bug fixes
- Call gettag() for TCP queries
- Fix the use of an uninitialized filtering policy
- Parse query-local-address before lua-config-file
- Fix accessing an empty policyCustom, policyName from Lua
- ComboAddress: don't allow invalid ports
- Fix RPZ default policy not being applied over IXFR
- DNSSEC: Actually follow RFC 7646 §2.1
- Add boost context ldflags so freebsd builds can find the libs
- Ignore NS records in a RPZ zone received over IXFR
- Fix build with OpenSSL 1.1.0 final
- Don't validate when a Lua hook took the query
- Fix a protobuf regression (requestor/responder mix-up)

Additions and Enhancements
- Support Boost 1.61+ fcontext
- Add Lua binding for DNSRecord::d_place

PowerDNS Recursor 4.0.2
=======================

Bug fixes
- Set dq.rcode before calling postresolve
- Honor PIE flags.
- Fix build with LibreSSL, for which OPENSSL_VERSION_NUMBER is
  irrelevant
- Don't shuffle CNAME records. (thanks to Gert van Dijk for the
  extensive bug report!)
- Fix delegation-only

Additions and enhancements
- Respect the timeout when connecting to a protobuf server
- allow newDN to take a DNSName in; document missing methods
- expose SMN toString to lua
- Anonymize the protobuf ECS value as well (thanks to Kai Storbeck of
  XS4All for finding this)
- Allow Lua access to the result of the Policy Engine decision, skip
  RPZ, finish RPZ implementation
- Remove unused DNSPacket::d_qlen
- RPZ: Use query-local-address(6) by default (thanks to Oli Schacher
  of switch.ch for the feature request)
- Move the root DNSSEC data to a header file

PowerDNS Recursor 4.0.1
=======================

Bug fixes
- Improve DNSSEC record skipping for non dnssec queries (Kees
  Monshouwer)
- Don't validate zones from the local auth store, go one level down
  while validating when there is a CNAME
- Don't go bogus on islands of security
- Check all possible chains for Insecures
- Don't go Bogus on a CNAME at the apex
- RPZ: default policy should also override local data RRs
- Fix a crash when the next name in a chained query is empty and
  rec_control current-queries is invoked

Improvements
- OpenSSL 1.1.0 support (Christian Hofstaedtler)
- Fix warnings with gcc on musl-libc (James Taylor)
- Also validate on +DO
- Fail to start when the lua-dns-script does not exist
- Add more Netmask methods for Lua (Aki Tuomi)
- Validate DNSSEC for security polling
- Turn on root-nx-trust by default and log-common-errors=off
- Allow for multiple trust anchors per zone
- Fix compilation warning when building without Protobuf

PowerDNS Recursor 4.0.0
=======================

- Moved to C++ 2011, a cleaner more powerful version of C++ that has
  allowed us to improve the quality of implementation in many places.
- Implemented dedicated infrastructure for dealing with DNS names that
  is fully "DNS Native" and needs less escaping and unescaping.
- Switched to binary storage of DNS records in all places.
- Moved ACLs to a dedicated Netmask Tree.
- Implemented a version of RCU for configuration changes
- Instrumented our use of the memory allocator, reduced number of
  malloc calls substantially.
- The Lua hook infrastructure was redone using LuaWrapper; old scripts
  will no longer work, but new scripts are easier to write under the
  new interface.
- DNSSEC processing: if you ask for DNSSEC records, you will get them.
- DNSSEC validation: if so configured, PowerDNS perform DNSSEC
  validation of your answers.
- Completely revamped Lua scripting API that is "DNSName" native and
  therefore far less error prone, and likely faster for most commonly
  used scenarios.
- New asynchronous per-domain, per-ip address, query engine.
- RPZ (from file, over AXFR or IXFR) support.
- All caches can now be wiped on suffixes, because of canonical
  ordering.
- Many, many more relevant performance metrics, including upstream
  authoritative performance measurements.
- EDNS Client Subnet support, including cache awareness of
  subnet-varying answers.

Revision 1.18 / (download) - annotate - [select for diffs], Wed Jun 10 14:40:07 2015 UTC (3 years, 10 months ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2016Q4-base, pkgsrc-2016Q4, pkgsrc-2016Q3-base, pkgsrc-2016Q3, pkgsrc-2016Q2-base, pkgsrc-2016Q2, pkgsrc-2016Q1-base, pkgsrc-2016Q1, pkgsrc-2015Q4-base, pkgsrc-2015Q4, pkgsrc-2015Q3-base, pkgsrc-2015Q3, pkgsrc-2015Q2-base, pkgsrc-2015Q2
Changes since 1.17: +7 -5 lines
Diff to previous 1.17 (colored)

Update net/powerdns-recursor to 3.7.3 (previous commit was 3.7.2).

PowerDNS Recursor 3.7.3
- Limit the maximum length of a qname
- pdnssec: check for glue and delegations in parent zones

Revision 1.17 / (download) - annotate - [select for diffs], Wed Jun 10 14:22:29 2015 UTC (3 years, 10 months ago) by fhajny
Branch: MAIN
Changes since 1.16: +7 -18 lines
Diff to previous 1.16 (colored)

Update net/powerdns-recursor to 3.7.3.
Add SMF support.
Defuzz patches.

PowerDNS Recursor 3.7.3
- Limit the maximum length of a qname
- pdnssec: check for glue and delegations in parent zones

PowerDNS Recursor 3.7.2
- Fix handling of forward references in label compressed packets;
  fixes CVE-2015-1868.
- Minor improvements and bugfixes.

PowerDNS Recursor 3.7.1
- New root-nx-trust flag makes PowerDNS generalize NXDOMAIN responses
  from the root-servers
- getregisteredname() for Lua, which turns 'www.bbc.co.uk' into 'bbc.co.uk'
- Lua preoutquery filter
- Lua IP-based filter (ipfilter) before parsing packets
- iputils class for Lua, to quickly process IP addresses and netmasks
  in their native format
- getregisteredname function for Lua, to find the registered domain
  for a given name
- Various new ringbuffers: top-servfail-remotes, top-largeanswer-remotes,
  top-servfail-queries
- Minor improvements and bugfixes.

PowerDNS Recursor 3.6.2
- Minor improvements and bugfixes.

PowerDNS Recursor 3.6.1
- Fix for a crash under a specific sequence of packets.

PowerDNS Recursor 3.6.0
- Implement minimum-ttl-override config setting, plus runtime configurability
  via 'rec_control set-minimum-ttl'.
- Lots of work on the JSON API, which is exposed via Aki Tuomi's 'yahttp'.
- Lua modules can now use 'pdnslog(INFO..')
- Adopt any-to-tcp feature to the recursor.
- Implement built-in statistics dumper using the 'carbon' protocol, which
  is also understood by metronome (our mini-graphite). Use 'carbon-server',
  'carbon-ourname' and 'carbon-interval' settings.
- New setting 'udp-truncation-threshold' to configure from how many bytes
  we should truncate. commit a09a8ce.
- Proper support for CHaos class for CHAOS TXT queries.
- Added support for Lua scripts to drop queries w/o further processing.
- Kevin Holly added qtype statistics to recursor and rec_control.
- Add support for include-files in configuration, also reload ACLs and zones
  defined in them.
- Paulo Anes contributed server-down-max-fails which helps combat
  Recursive DNS based amplification attacks.
- Implement "followCNAMERecords" feature in the Lua hooks.
- Minor improvements and bugfixes.

PowerDNS Recursor 3.5.3
- This is a bugfix and performance update to 3.5.2. It brings serious
  performance improvements for dual stack users.

PowerDNS Recursor 3.5.2
- This is a stability and bugfix update to 3.5.1. It contains important
  fixes that improve operation for certain domains.

PowerDNS Recursor 3.5.1
- This is a stability and bugfix update to 3.5.

PowerDNS Recursor 3.5
- The local zone server now understands wildcards.
- The Lua postresolve and nodata hooks.
- A new feature, rec_control trace-regex allows the tracing of lookups
  for specific names
- A new setting, export-etc-hosts-search-suffix, adds a configurable
  suffix to names imported from /etc/hosts
- Minor improvements & bugfixes

PowerDNS Recursor 3.3.1
- Small number of important fixes, adds some memory usage statistics,
  but no new features

Revision 1.14.4.1 / (download) - annotate - [select for diffs], Tue Dec 16 23:23:22 2014 UTC (4 years, 4 months ago) by tron
Branch: pkgsrc-2014Q3
Changes since 1.14: +3 -3 lines
Diff to previous 1.14 (colored) next main 1.15 (colored)

Pullup ticket #4573 - requested by roy
net/powerdns-recursor: security patch

Revisions pulled up:
- net/powerdns-recursor/Makefile                                1.16
- net/powerdns-recursor/distinfo                                1.12
- net/powerdns-recursor/patches/patch-CVE-2014-8601             1.1

---
   Module Name:    pkgsrc
   Committed By:   roy
   Date:           Thu Dec 11 20:18:17 UTC 2014

   Modified Files:
           pkgsrc/net/powerdns-recursor: Makefile distinfo
   Added Files:
           pkgsrc/net/powerdns-recursor/patches: patch-CVE-2014-8601

   Log Message:
   Add upstream patch to fix CVE-2014-8601.
   Remove myself as maintainer.

Revision 1.16 / (download) - annotate - [select for diffs], Thu Dec 11 20:18:17 2014 UTC (4 years, 4 months ago) by roy
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base, pkgsrc-2015Q1, pkgsrc-2014Q4-base, pkgsrc-2014Q4
Changes since 1.15: +3 -3 lines
Diff to previous 1.15 (colored)

Add upstream patch to fix CVE-2014-8601.
Remove myself as maintainer.

Revision 1.15 / (download) - annotate - [select for diffs], Sun Oct 19 22:27:47 2014 UTC (4 years, 6 months ago) by alnsn
Branch: MAIN
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored)

Revbump after lang/lua51 update.

Revision 1.14 / (download) - annotate - [select for diffs], Sat May 3 13:01:24 2014 UTC (4 years, 11 months ago) by alnsn
Branch: MAIN
CVS Tags: pkgsrc-2014Q3-base, pkgsrc-2014Q2-base, pkgsrc-2014Q2
Branch point for: pkgsrc-2014Q3
Changes since 1.13: +2 -2 lines
Diff to previous 1.13 (colored)

Adapt to Lua multiversion support.

Revision 1.13 / (download) - annotate - [select for diffs], Wed Oct 30 06:49:54 2013 UTC (5 years, 5 months ago) by dholland
Branch: MAIN
CVS Tags: pkgsrc-2014Q1-base, pkgsrc-2014Q1, pkgsrc-2013Q4-base, pkgsrc-2013Q4
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)

Bump PKGREVISION of packages whose Lua depends changed form, but whose
own PKGNAME is unchanged.

Revision 1.12 / (download) - annotate - [select for diffs], Thu Jul 4 21:27:58 2013 UTC (5 years, 9 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2013Q3-base, pkgsrc-2013Q3
Changes since 1.11: +2 -1 lines
Diff to previous 1.11 (colored)

Revbump after updating lang/lua to 5.2.2.

Revision 1.11 / (download) - annotate - [select for diffs], Fri Jun 14 22:13:03 2013 UTC (5 years, 10 months ago) by dholland
Branch: MAIN
CVS Tags: pkgsrc-2013Q2-base, pkgsrc-2013Q2
Changes since 1.10: +7 -1 lines
Diff to previous 1.10 (colored)

Patch up C++ semantic whitespace.

Revision 1.10 / (download) - annotate - [select for diffs], Mon Jun 10 18:59:09 2013 UTC (5 years, 10 months ago) by joerg
Branch: MAIN
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (colored)

Be more explicit of what version of tuple and shared_ptr is meant.
Disable warnings for narrowing with C++11.

Revision 1.9 / (download) - annotate - [select for diffs], Tue Feb 19 22:35:15 2013 UTC (6 years, 1 month ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2013Q1-base, pkgsrc-2013Q1
Changes since 1.8: +6 -2 lines
Diff to previous 1.8 (colored)

Request C++11 when building with clang.

Revision 1.8 / (download) - annotate - [select for diffs], Tue Oct 23 17:19:00 2012 UTC (6 years, 5 months ago) by asau
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base, pkgsrc-2012Q4
Changes since 1.7: +1 -2 lines
Diff to previous 1.7 (colored)

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Revision 1.7 / (download) - annotate - [select for diffs], Tue Feb 28 10:49:27 2012 UTC (7 years, 1 month ago) by roy
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base, pkgsrc-2012Q3, pkgsrc-2012Q2-base, pkgsrc-2012Q2, pkgsrc-2012Q1-base, pkgsrc-2012Q1
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

Bump to 3.3, changes include:
* Many threading changes for greater perfomance
* Can now make TCP/IP queries to remote IPv6 addresses
* Domains can be forwarded to IPv6 addresses

Revision 1.5.2.1 / (download) - annotate - [select for diffs], Sat Jan 30 12:52:53 2010 UTC (9 years, 2 months ago) by tron
Branch: pkgsrc-2009Q4
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (colored) next main 1.6 (colored)

Pullup ticket #2981 - requested by roy
powerdns-recursor: security update

Revisions pulled up:
- net/powerdns-recursor/Makefile			1.6
- net/powerdns-recursor/distinfo			1.4
- net/powerdns-recursor/patches/patch-ac		delete
- net/powerdns-recursor/patches/patch-ad		delete
- net/powerdns-recursor/patches/patch-ae		1.2
- net/powerdns-recursor/patches/patch-af		1.2
---
Module Name:    pkgsrc
Committed By:   roy
Date:           Fri Jan 29 13:26:45 UTC 2010

Modified Files:
        pkgsrc/net/powerdns-recursor: Makefile distinfo
        pkgsrc/net/powerdns-recursor/patches: patch-ae patch-af
Removed Files:
        pkgsrc/net/powerdns-recursor/patches: patch-ac

Log Message:
Update to recursor-3.1.7.2
Changes from 3.1.7 include:
* Fixed CVE-2009-4009 and CVE-2009-4010
* Improved error messages when parsing zones
* Resilience against whitespace in configuration
* Performance increase
---
Module Name:    pkgsrc
Committed By:   roy
Date:           Fri Jan 29 13:27:54 UTC 2010

Removed Files:
        pkgsrc/net/powerdns-recursor/patches: patch-ad

Log Message:
Punt stale file

Revision 1.6 / (download) - annotate - [select for diffs], Fri Jan 29 13:26:45 2010 UTC (9 years, 2 months ago) by roy
Branch: MAIN
CVS Tags: pkgsrc-2011Q4-base, pkgsrc-2011Q4, pkgsrc-2011Q3-base, pkgsrc-2011Q3, pkgsrc-2011Q2-base, pkgsrc-2011Q2, pkgsrc-2011Q1-base, pkgsrc-2011Q1, pkgsrc-2010Q4-base, pkgsrc-2010Q4, pkgsrc-2010Q3-base, pkgsrc-2010Q3, pkgsrc-2010Q2-base, pkgsrc-2010Q2, pkgsrc-2010Q1-base, pkgsrc-2010Q1
Changes since 1.5: +2 -2 lines
Diff to previous 1.5 (colored)

Update to recursor-3.1.7.2
Changes from 3.1.7 include:
* Fixed CVE-2009-4009 and CVE-2009-4010
* Improved error messages when parsing zones
* Resilience against whitespace in configuration
* Performance increase

Revision 1.5 / (download) - annotate - [select for diffs], Wed Dec 23 13:00:41 2009 UTC (9 years, 3 months ago) by ghen
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base
Branch point for: pkgsrc-2009Q4
Changes since 1.4: +4 -1 lines
Diff to previous 1.4 (colored)

Add option for Lua scripting support in pdns_recursor,
see http://doc.powerdns.com/recursor-scripting.html

Disabled by default, so no revbump.

Revision 1.4 / (download) - annotate - [select for diffs], Tue Jun 30 00:07:21 2009 UTC (9 years, 9 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2009Q3-base, pkgsrc-2009Q3, pkgsrc-2009Q2-base, pkgsrc-2009Q2
Changes since 1.3: +3 -1 lines
Diff to previous 1.3 (colored)

Mark packages as MAKE_JOBS_SAFE=no that failed in a bulk build with
MAKE_JOBS=2 and worked without.

Revision 1.3 / (download) - annotate - [select for diffs], Tue May 19 08:59:28 2009 UTC (9 years, 11 months ago) by wiz
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)

Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENT
block). Uncomment some commented out LICENSE lines while here.

Revision 1.2 / (download) - annotate - [select for diffs], Tue Apr 21 22:52:37 2009 UTC (9 years, 11 months ago) by roy
Branch: MAIN
Changes since 1.1: +2 -3 lines
Diff to previous 1.1 (colored)

Get kqueue support working

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Tue Apr 21 14:16:47 2009 UTC (10 years ago) by roy
Branch: TNF
CVS Tags: pkgsrc-base
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

Import pdns_recursor-3.1.7
Based on the WIP version by pkgsrc@blackmouse.biz

The PowerDNS recursor is part of the source tarball of the main PowerDNS
distribution, but it is released separately. Starting from the version 3.0
pre-releases, there are zero known bugs or issues with the recursor. It is
known to power the resolving needs of over 2 million internet connections.

PowerDNS recursor can gets names from /etc/hosts.

Revision 1.1 / (download) - annotate - [select for diffs], Tue Apr 21 14:16:47 2009 UTC (10 years ago) by roy
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>