knot (3.4.5-1) unstable; urgency=medium
[ Daniel Salzman ]
* Mute lintian error empty-manual-page for kxdpgun if XDP not available
[ Jakub Ružička ]
* Update d/copyright from upstream
-- Jakub Ružička <jru@debian.org> Wed, 19 Mar 2025 15:42:14 +0100
knot (3.4.4-1) unstable; urgency=medium
* New upstream version 3.4.4
* Add new symbols for 3.4.4
-- Jakub Ružička <jru@debian.org> Thu, 23 Jan 2025 12:09:18 +0100
knot (3.4.3-1) unstable; urgency=medium
* New upstream version 3.4.3
* Add new symbol for 3.4.3
-- Jakub Ružička <jru@debian.org> Fri, 06 Dec 2024 16:39:20 +0100
knot (3.4.2-1) unstable; urgency=medium
* New upstream version 3.4.2 (Closes: #1085663, #1085349)
* Enable ARM builds on salsa CI
* Remove patch included upstream
-- Jakub Ružička <jru@debian.org> Thu, 31 Oct 2024 12:59:15 +0100
knot (3.4.1-2) unstable; urgency=medium
* Add missing #include <stddef.h>
-- Jakub Ružička <jru@debian.org> Mon, 14 Oct 2024 20:43:35 +0200
knot (3.4.1-1) unstable; urgency=medium
* New upstream version 3.4.1
* Add new libknot15 symbols introduced in 3.4.1
-- Jakub Ružička <jru@debian.org> Mon, 14 Oct 2024 14:20:00 +0200
knot (3.4.0-4) unstable; urgency=medium
[ Daniel Salzman ]
* Remove knot_quic_* symbols for non-well supported architectures
-- Jakub Ružička <jru@debian.org> Mon, 09 Sep 2024 12:48:18 +0200
knot (3.4.0-3) unstable; urgency=medium
[ Daniel Salzman ]
* Fix maint mode (disabled fast parser)
* Enable extra modules and features only for well supported architectures
* Tiny rules cleanup
* Remove timeout for tests on well supported architectures
* Remove ufw configuration
* Add missing dependency for test libdnssec/test_keystore_pkcs11
[ Jakub Ružička ]
* Remove unwanted /usr/sbin/knot-exporter dir (Closes: #1081191)
-- Jakub Ružička <jru@debian.org> Mon, 09 Sep 2024 10:49:08 +0200
knot (3.4.0-2) unstable; urgency=medium
[ Jakub Ružička ]
* Drop t64 suffix from libknot15 after soname bump (Closes: #1080499)
[ Daniel Salzman ]
* Update -latomic usage (Closes: #1080514)
* Disable DNSTAP on hurd-amd64 and hurd-i386
* Disable GEOIP on hurd-amd64 and hurd-i386
* Unification of architecture-dependent exceptions
* Disable RRL on hurd-amd64 and hurd-i386
-- Jakub Ružička <jru@debian.org> Thu, 05 Sep 2024 15:15:17 +0200
knot (3.4.0-1) unstable; urgency=medium
* New upstream version 3.4.0
* d/gbp.conf: Use upstream/3.4 branch for 3.4.x
* SONAME bump: libknot 14 -> 15
* Move Build-Depends-Indep to Build-Depends
* Remove unused lintian-overrides
-- Jakub Ružička <jru@debian.org> Tue, 03 Sep 2024 12:47:35 +0200
knot (3.3.9-1) unstable; urgency=medium
* New upstream version 3.3.9 (Closes: #1078625)
* Add libknot to python3-libknot Depends
* Update Build-Depends: pkg-config => pkgconf
-- Jakub Ružička <jru@debian.org> Mon, 26 Aug 2024 13:07:53 +0200
knot (3.3.8-1) unstable; urgency=medium
* New upstream version 3.3.8
* Update Standards-Version to 4.7.0 (no changes)
* Update my email in Uploaders to jru@debian.org
-- Jakub Ružička <jru@debian.org> Mon, 22 Jul 2024 15:32:31 +0200
knot (3.3.7-1) unstable; urgency=medium
* New upstream version 3.3.7
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 25 Jun 2024 17:47:02 +0200
knot (3.3.6-3) unstable; urgency=medium
[ Daniel Salzman ]
* Add new knot_ctl_bind2 symbol to libknot14t64.symbols.hurd-i386
-- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 17 Jun 2024 12:24:24 +0200
knot (3.3.6-2) unstable; urgency=medium
* Include 64-bit time_t patch in Salsa
-- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 14 Jun 2024 14:10:44 +0200
knot (3.3.6-1) unstable; urgency=medium
* New upstream version 3.3.6
* Add new knot_ctl_bind2 symbol to libknot14.symbols
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 13 Jun 2024 21:56:14 +0200
knot (3.3.5-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Restoring rename of libraries for 64-bit time_t transition
(Closes: #1062491).
-- Daniel Baumann <daniel.baumann@progress-linux.org> Fri, 08 Mar 2024 22:56:33 +0100
knot (3.3.5-1) unstable; urgency=medium
* New upstream version 3.3.5
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 07 Mar 2024 15:01:44 +0100
knot (3.3.4-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062491
-- Lukas Märdian <slyon@debian.org> Thu, 29 Feb 2024 14:10:52 +0000
knot (3.3.4-1) unstable; urgency=medium
* New upstream version 3.3.4
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 24 Jan 2024 14:12:36 +0100
knot (3.3.3-2) unstable; urgency=medium
[ Daniel Salzman ]
* debian: synchronize settings for hurd-amd64 with hurd-i386
* debian/control: disable XDP on loong64 (Closes: #1060123)
-- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 08 Jan 2024 13:34:35 +0100
knot (3.3.3-1) unstable; urgency=medium
* New upstream version 3.3.3
* Add new symbols for 3.3.3
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 13 Dec 2023 13:55:57 +0100
knot (3.3.2-1) unstable; urgency=medium
* New upstream version 3.3.2
* Remove ${shlibs:Depends} from libknot-dev Depends
-- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 20 Oct 2023 14:21:35 +0200
knot (3.3.1-1) unstable; urgency=medium
* New upstream version 3.3.1 (Closes: #1051067)
-- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 11 Sep 2023 14:14:22 +0200
knot (3.3.0-2) unstable; urgency=medium
[ Daniel Salzman ]
* Update d/libknot14.symbols.hurd-i386: add missing knot_quic_* symbols
* Update d/libknot14.symbols.loong64: add symlink to
libknot14.symbols.hurd-i386
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 30 Aug 2023 16:39:24 +0200
knot (3.3.0-1) unstable; urgency=medium
* d/gbp.conf: Use upstream/3.3 branch
* SONAME bump: libknot 13 -> 14
* knot-doc: Add new BR python3-sphinx-panels
* knot-doc: Drop broken info docs
* knot-exporter: New python subpackage
* Update d/copyright for 3.3.0
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 29 Aug 2023 13:42:48 +0200
knot (3.2.9-1) unstable; urgency=medium
* New upstream version 3.2.9
[ Daniel Salzman ]
* Update d/control: remove exceptions for kfreebsd-amd64 and kfreebsd-i386
* Update d/libknot13: remove symbols files for kfreebsd-amd64 and kfreebsd-i386
-- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 28 Jul 2023 09:58:53 +0200
knot (3.2.6-1) unstable; urgency=medium
* New upstream version 3.2.6
* Remove patch included upstream
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 04 Apr 2023 13:54:46 +0200
knot (3.2.5-2) unstable; urgency=medium
[ Daniel Salzman ]
* Update d/changelog: wrap long lines and fix typos
* Update d/*NEWS: remove outdated files
* Update d/knot.install: install D-Bus config to /usr/share/dbus-1/system.d/
* Update d/control: remove inconsistent 'Multi-Arch: same' hinters
* Update d/copyright: update some years
[ Jakub Ružička ]
* Add upstream patch fixing errors on modules load
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 28 Feb 2023 18:05:42 +0100
knot (3.2.5-1) unstable; urgency=medium
* New upstream version 3.2.5
[ Daniel Salzman ]
* Update d/control: remove dependencies linux-libc-dev and libelf-dev
* Update d/control: update and unify xdp-dependent architecture exceptions
* Update d/libknot.symbols: update symbols files for non-xdp architectures
* Update d/control,rules: switch to external libngtcp2
* Update d/control: switch from obsolete lsb-base to sysvinit-utils
* Update d/knot.init: fix RUNDIR creation without knot.tmpfiles
* Update d/knot.init: remove explicit knotd configuration specification
to be consistent with knotc
* Update d/knot.postinst: change ownership and permissions for /var/lib/knot,
/etc/knot, and /etc/knot/knot.conf
* Update d/knot.postrm: add missing directories to purge list in postrm script
* Update d/*.symbols: add Build-Depends-Package to libknot and libdnssec
[ Jakub Ružička ]
* Update Standards-Version to 4.6.2 (no changes)
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 02 Feb 2023 13:37:42 +0100
knot (3.2.4-1) unstable; urgency=medium
* New upstream version 3.2.4
-- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 12 Dec 2022 11:52:06 +0100
knot (3.2.3-1) unstable; urgency=medium
* New upstream version 3.2.3
-- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 21 Nov 2022 14:31:59 +0100
knot (3.2.2-1) unstable; urgency=medium
* New upstream version 3.2.2
* Update libknot13.symbols
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 01 Nov 2022 12:40:19 +0000
knot (3.2.1-1) unstable; urgency=medium
* New upstream version 3.2.1
- Compatible with libbpf 1.0 (Closes: #1018911)
* Add Build-Depends: libxdp-dev where available
* Remove patch included upstream
* Update libknot13.symbols
* Update knot.service from upstream (Closes: #1019583)
-- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 12 Sep 2022 16:06:27 +0000
knot (3.2.0-3) unstable; urgency=medium
* Add Breaks+Replaces for knot-dnssecutils (Closes: #1018944)
-- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 02 Sep 2022 13:31:57 +0000
knot (3.2.0-2) unstable; urgency=medium
* Update libknot13 symbols for arches without XDP
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 01 Sep 2022 15:11:32 +0000
knot (3.2.0-1) unstable; urgency=medium
[ Debian Janitor ]
* Avoid explicitly specifying -Wl,--as-needed linker flag.
* Remove constraints unnecessary since buster
[ Jakub Ružička ]
* gbp: use upstream/3.2 branch
* Bump SONAMEs: libknot13, libdnssec9
* New knot-dnssecutils subpackage
* Enable QUIC
* Update debian/copyright
* Sync descriptions with upstream package
* Bump Standards-Version to 4.6.1
* Add d/patches/0001-tests-xdp-tcp-fix-under-32bit-platform.patch
* Update debian/tests
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 24 Aug 2022 11:22:33 +0000
knot (3.1.8-1) unstable; urgency=medium
* new upstream version 3.1.8
[ Daniel Salzman ]
* d/tests/kdig: make the test more stable by using 1.1.1.1 resolver
* d/tests/kdig: skip the test if no internet access detected
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 28 Apr 2022 11:40:38 +0000
knot (3.1.7-1) unstable; urgency=medium
* new upstream version 3.1.7
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 30 Mar 2022 15:09:49 +0000
knot (3.1.6-1) unstable; urgency=medium
* new upstream version 3.1.6
* d/knot.install: add dbus config file
* d/copyright: update copyright for 2022
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 10 Feb 2022 16:20:00 +0000
knot (3.1.5-1) unstable; urgency=medium
* new upstream version 3.1.5
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 04 Jan 2022 14:59:07 +0000
knot (3.1.4-1) unstable; urgency=medium
* new upstream version 3.1.4
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 04 Nov 2021 11:27:41 +0000
knot (3.1.3-2) unstable; urgency=medium
* d/tests: add sleep to ensure the server is reloaded
-- Daniel Salzman <daniel.salzman@nic.cz> Thu, 21 Oct 2021 13:31:44 +0000
knot (3.1.3-1) unstable; urgency=medium
* new upstream version 3.1.3
[ Daniel Salzman ]
* tests: remove obsolete test for kasp_json2lmdb
* knot.postinst: fix lintian warning 'maintainer-script-supports-ancient-package-version'
* kasp_json2lmdb: remove unused and obsolete script
* get_kaspdb: remove unused and obsolete script
* get_user: remove unused and obsolete script
* control: remove no-longer-needed python dependencies
* TODO: update
* doc: fix lintian warnings 'embedded-javascript-library'
[ Libor Peltan ]
* tests: add simple test of DNSSEC and keymgr
[ Jakub Ružička ]
* d/copyright: add url-parser copyright
* d/control: add Multi-Arch: same to libknot-dev
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 19 Oct 2021 12:02:30 +0000
knot (3.1.2-1) unstable; urgency=medium
* new upstream version 3.1.2
* d/copyright: sync with upstream
* d/knot.maintscript: remove obsolete maintscript
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 08 Sep 2021 15:41:04 +0000
knot (3.1.1-6) unstable; urgency=medium
* Source-only upload (try #2)
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 01 Sep 2021 22:44:55 +0000
knot (3.1.1-5) unstable; urgency=medium
* Source-only upload to allow migration
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 01 Sep 2021 11:22:33 +0000
knot (3.1.1-4) unstable; urgency=medium
* Upload to unstable
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 31 Aug 2021 13:13:13 +0000
knot (3.1.1-3) experimental; urgency=medium
* Bump min symbol versions to 3.1.1
* d/control: bump Standards-Version to 4.6.0
* d/control: don't require libmnl-dev on archs without XDP
-- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 25 Aug 2021 10:42:42 +0000
knot (3.1.1-2) experimental; urgency=medium
* Remove XDP-specific symbols from unsupported archs
* d/control: improve Multi-Arch hints
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 24 Aug 2021 11:11:11 +0000
knot (3.1.1-1) experimental; urgency=medium
* new upstream version 3.1.1
* d/tests: replace `which` with `command -v`
* d/knot.service: sync upstream improvements
* d/control: update Build-Depends
* Bump SONAMEs: libknot12, libzscanner4
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 17 Aug 2021 16:20:00 +0000
knot (3.0.5-1) unstable; urgency=medium
* new upstream version 3.0.5
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 25 Mar 2021 13:37:00 +0100
knot (3.0.4-2) unstable; urgency=medium
* Team upload.
* Source-only upload to allow migration.
-- Santiago Ruano Rincón <santiago@debian.org> Thu, 04 Feb 2021 10:40:06 +0100
knot (3.0.4-1) unstable; urgency=medium
* new upstream version 3.0.4
- Fix segfault when generating new DNSSEC keys on duplicated zones
(Closes: #977101)
* move dnstap module to subpackage
* move geoip module to subpackage
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 21 Jan 2021 15:51:41 +0000
knot (3.0.3-1) unstable; urgency=medium
[ Jakub Ružička ]
* new upstream version 3.0.3
* d/patches: remove makefile patch included upstream
[ Daniel Salzman ]
* Improve XDP mode activation
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 15 Dec 2020 07:08:10 -0500
knot (3.0.2-3) unstable; urgency=medium
* Team upload.
* Disable xdp on armel. Create d/libknot11.symbols.armel accordingly.
* Disable fastparser on sh4.
* Add d/patches/0001-xdp-rework-Makefile.am-to-avoid-make-distcheck-issue.patch
(Closes: #973815)
* Remove build-deps not available on hurd and kfreebsds: libbpf-dev,
libelf-dev linux-libc-dev. Create symbols files accordingly.
-- Santiago Ruano Rincón <santiago@debian.org> Thu, 10 Dec 2020 21:59:10 +0100
knot (3.0.2-2) unstable; urgency=low
* Team upload.
* Add debian/salsa-ci.yml.
* d/tests/kdig: Add a fallback option to query on port 443 when 853 is
unreachable.
* Bump Standards-Version to 4.5.1. No changes needed
* Bump d/watch version to 4. No changes needed, but makes lintian happier
* Bump debhelper-compat to 13
-- Santiago Ruano Rincón <santiago@debian.org> Mon, 07 Dec 2020 16:00:37 +0100
knot (3.0.2-1) experimental; urgency=medium
* New upstream version 3.0.2
* debian/libknot11.symbols: add 2 new symbols
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 12 Nov 2020 09:46:41 -0500
knot (3.0.1-1) experimental; urgency=medium
* New upstream version 3.0.1
* Bump SONAMEs: libknot11, libdnssec8
* debian/*.symbols: update symbols
* debian/*.install: add new files
* debian/docs: README is now README.md
* debian/knot.service: update from upstream
* debian/copyright: remove obsolete lmdb entry
* debian/control: update knot-dnsutils description
* debian/control: add build deps for XDP support
* debian/control: add build dep for DoH support
* debian/control: add myself to Uploaders
* debian/gbp.conf: use new upstream/3.0 branch
* debian/gbp.conf: use debian/experimental branch
-- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 22 Oct 2020 08:56:49 -0400
knot (2.9.6-1) unstable; urgency=medium
* New upstream version 2.9.6
-- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 01 Sep 2020 16:30:41 +0200
knot (2.9.5-1) unstable; urgency=medium
* New upstream version 2.9.5 (Closes: #961075)
-- Robert Edmonds <edmonds@debian.org> Mon, 25 May 2020 23:16:17 -0400
knot (2.9.3-1) unstable; urgency=medium
* new upstream version
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 05 Mar 2020 18:22:48 -0500
knot (2.9.2-5) unstable; urgency=medium
* move Vcs-Git back to debian/master, since we are not in experimental
any more
* wrap-and-sort -ast
* move kzonecheck into knot-dnsutils (Closes: #925035)
* drop unnecessary empty plugin directory (fixed upstream)
* debhelper: bump to dh 12
* include ${misc:Pre-Depends} for knot, to resolve
skip-systemd-native-flag-missing-pre-depends
* clean up .pybuild/ as well
* drop dbgsym migration
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 28 Feb 2020 17:53:33 -0500
knot (2.9.2-4) unstable; urgency=medium
[ Robert Edmonds ]
* debian/control: Add ">= 5.1" version for python3-yaml build dependency (Closes: #949931)
[ Ondřej Surý ]
* Upload to unstable
-- Ondřej Surý <ondrej@debian.org> Fri, 21 Feb 2020 11:51:46 +0100
knot (2.9.2-3) experimental; urgency=medium
* debian/rules: Run pybuild's configure step in
override_dh_auto_configure-indep
-- Robert Edmonds <edmonds@debian.org> Sun, 26 Jan 2020 16:31:16 -0500
knot (2.9.2-2) experimental; urgency=medium
* Build a python3-libknot package containing the libknot Python bindings
(Closes: #913701)
-- Robert Edmonds <edmonds@debian.org> Sat, 25 Jan 2020 15:51:36 -0500
knot (2.9.2-1) experimental; urgency=medium
* New upstream version 2.9.2
[ Daniel Kahn Gillmor ]
* d/control, d/gbp.conf: pointing to DEP-14 debian/experimental branch
(revert before releasing to unstable!)
[ Robert Edmonds ]
* debian/gbp.conf: Set "upstream-branch = upstream/2.9"
* debian/patches/0002-zonefile-Verify-mtime-against-full-precision-
timesta.patch: Remove, applied upstream
* Bump SONAMEs: libknot10, libdnssec7, libzscanner3
* debian/control: Drop Replaces/Breaks on knot-libs (<< 2.0.1-4)
* debian/control: Drop obsolete Replaces/Breaks on old library packages
* debian/rules: Set environment variable KNOT_VERSION_FORMAT=release
* debian/patches/0001-avoid-git-version-inclusion-in-debian-
packages.patch: Remove
* debian/*.symbols: Update symbol files for added/removed symbols in new
library SONAMEs
* debian/*.symbols: Bump minimum versions to 2.9.2 for all symbols
* debian/copyright: Fix path to src/contrib/vpool/* files
* debian/knot-doc.doc-base: Remove PDF registration
-- Robert Edmonds <edmonds@debian.org> Fri, 24 Jan 2020 22:36:09 -0500
knot (2.7.8-1) unstable; urgency=medium
* New upstream version 2.7.8
[ Daniel Salzman ]
* Remove resolved lintian-overrides
* Don't require libcap-ng-dev on kfreebsd-i386, kfreebsd-amd64, and
hurd-i386
* Update copyright (Closes: #925905)
* Fix typo in copyright
* Don't include pdf to doc package
* Fix unsafe usage of yaml.load() (Closes: #933917)
[ Diederik de Haas ]
* Remove knslookup from description as it is not provided.
[ Santiago Ruano Rincón ]
* Revert changes about excluding pdf files in distro/deb/rules, moving
them to debian/rules (Closes: #933285)
[ Robert Edmonds ]
* debian/gbp.conf: Set "upstream-branch = upstream/2.7"
* debian/gbp.conf: [import-orig] Also filter config.guess, config.sub
* debian/patches/0003-correct-kdig-documentation-about-no-crypto.patch:
Remove, applied upstream
* debian/control: Add myself to Uploaders
* debian/control: Bump Standards-Version to 4.5.0 (no changes)
* debian/copyright: Fix path to src/libdnssec/contrib/vpool/ files
-- Robert Edmonds <edmonds@debian.org> Fri, 24 Jan 2020 19:48:01 -0500
knot (2.7.6-2) unstable; urgency=medium
* add libsofthsm2 when testing for libdnssec/test_keystore_pkcs11
* Check fine-grained timestamps on zonefiles.
* Correct documentation about key formats
* Standards-Version: bump to 4.3.0 (no changes needed)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 22 Feb 2019 16:51:08 -0500
knot (2.7.6-1) unstable; urgency=medium
* new upstream release
-- Ondřej Surý <ondrej@debian.org> Fri, 08 Feb 2019 12:53:57 +0000
knot (2.7.4-1) unstable; urgency=medium
* new upstream release
* drop patch applied upstream
* d/upstream/signing-key.asc: minimize OpenPGP certificate
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 14 Nov 2018 01:16:27 -0500
knot (2.7.3-3) unstable; urgency=medium
* update build-deps and autopkgtest deps
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 08 Nov 2018 08:39:43 +0700
knot (2.7.3-2) unstable; urgency=medium
* postinst: use runuser instead of su for safety and simplicity
* fix get_kaspdb and test it against shipped config (Closes: #912210)
* added Build-Depends-Package: libknot-dev to symbols files
* cleaner diffs: put dh args on separate lines
* added authoritative nameserver autopkgtest
* Avoid including git version in debian packages
* fix broken python
* fix up get_user
* autopkgtest: test upgrade/conversion tooling
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 07 Nov 2018 22:55:37 +0700
knot (2.7.3-1) unstable; urgency=medium
* new upstream release
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 15 Oct 2018 17:21:51 -0400
knot (2.7.2-2) unstable; urgency=medium
* d/rules: try moving DEB_HOST_ARCH check for -latomic
* mips and powerpc both appear to build fine without -latomic
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 29 Aug 2018 16:07:02 -0400
knot (2.7.2-1) unstable; urgency=medium
* new upstream release
* try to fix up architecture selection
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 29 Aug 2018 10:34:56 -0400
knot (2.7.1-3) unstable; urgency=medium
[ Daniel Salzman ]
* remove obsolete dependency libjansson-dev
* remove obsolete --with-bash-completions
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 27 Aug 2018 19:18:20 -0400
knot (2.7.1-2) unstable; urgency=medium
* Standards-Version: bump to 4.2.1 (no changes needed)
* add -latomic to riscv64 arch as well
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 27 Aug 2018 19:06:08 -0400
knot (2.7.1-1) unstable; urgency=medium
* new upstream release
* SONAME bumps: move to libknot8, libdnssec6, and libzscanner2
* adopted pykeymgr from upstream, renaming to
/usr/lib/knot/kasp_json2lmdb
* ship manpages with dh_installman
* kjournalprint is now a shipped as a system administration utility
* avoid more autogened files on package import
* drop THANKS, no longer shipped upstream
* update symbols files
* Standards-Version: bump to 4.2.0 (no changes needed)
* clean up kdns-utils description
* added libcap-ng to build-deps
* move to libidn2
* d/copyright: correct license of TAP sources
* added build-dep on libmaxminddb-dev for GeoIP module
* Only conditionally add -latomic based on the platform
* record notes about dynamic modules instead of static modules
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 24 Aug 2018 18:02:44 -0400
knot (2.6.8-2) unstable; urgency=medium
* d/knot.NEWS: fix spelling (thanks, Lintian!)
* refresh patches
* Standards-Version: bump to 4.1.5 (no changes needed)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 10 Jul 2018 16:14:48 -0400
knot (2.6.8-1) unstable; urgency=medium
* New upstream version 2.6.8
-- Daniel Salzman <daniel.salzman@nic.cz> Tue, 10 Jul 2018 16:23:19 +0200
knot (2.6.7-2) unstable; urgency=medium
* use knot@packages.debian.org as Maintainer (Closes: #899825)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 24 May 2018 16:00:33 -0400
knot (2.6.7-1) unstable; urgency=medium
* New upstream version 2.6.7
-- Daniel Salzman <daniel.salzman@nic.cz> Thu, 17 May 2018 13:18:22 +0200
knot (2.6.6-2) unstable; urgency=medium
[ Daniel Salzman ]
* Remove already included patches
* Add new symbol to libknot7.symbols
* Update changelog for 2.6.6-1 release
[ Daniel Kahn Gillmor ]
* standards-version: bump to 4.1.4 (no changes needed)
* clean up libknot7.symbols
* prepare debian release
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 23 Apr 2018 02:07:36 -0400
knot (2.6.5-3) unstable; urgency=medium
* accept suggestions from the Multiarch hinter
* d/tests/control: rely on ca-certificates to validate the
DNS-over-TLS cert
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sun, 25 Feb 2018 15:49:46 -0800
knot (2.6.5-2) unstable; urgency=medium
* re-ship /usr/lib/$(DEB_HOST_MULTIARCH)/knot" (Closes: #891319)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sun, 25 Feb 2018 10:17:49 -0800
knot (2.6.5-1) unstable; urgency=medium
* new upstream release
[ Daniel Salzman ]
* Update uploaders and dependencies in the control file
* Downgrade 'Recommends' to 'Suggests' for systemd
* Update upstream signing key
[ Daniel Kahn Gillmor ]
* wrap-and-sort -ast
* add myself to uploaders
* move to debhelper 11
* Standards-Version: 4.1.3 (no changes needed)
* build-depend on python3-sphinx instead of python-sphinx
* d/gbp.conf: clean up, use DEP-14
* dh11: apply --fail-missing only to dh_missing
* remove doc/modules symlink on clean
* Use python3 instead of python2 for helper functions
* use python3 for pykeymgr
* move knot from python 2 to python 3
* Move python3-lmdb to Recommends
* d/TODO: note future debian packaging work
* knot-doc: use system jquery and underscore javascript
* include upstream VCS in git history
* d/control: add Rules-Requires-Root: no
* d/changelog: strip trailing whitespace
* ship upstream ChangeLog
* d/copyright: drop hat-trie, removed upstream
* d/*.NEWS: stop using asterisks
* stop declaring unnecessary dirs
* stop shipping /usr/lib/$(DEB_HOST_MULTIARCH)/knot
* add doc-base entry for knot-doc
* d/gbp.conf: improve cleanup during import-orig
* fix spelling errors in manpages
* info: fix direntry and category
* add really simple autopkgtest
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 22 Feb 2018 23:38:33 -0800
knot (2.6.4-1) unstable; urgency=medium
* Update Vcs-* links to salsa.d.o
* New upstream version 2.6.4
-- Ondřej Surý <ondrej@debian.org> Thu, 04 Jan 2018 15:02:46 +0000
knot (2.6.3-1) unstable; urgency=medium
* New upstream version 2.6.3
-- Ondřej Surý <ondrej@debian.org> Fri, 24 Nov 2017 15:33:43 +0000
knot (2.6.1-2) unstable; urgency=medium
* Add Breaks/Replaces for libdnssec5/libknot7 to remedy botched 2.6.0-1
upload (Closes: #881638)
-- Ondřej Surý <ondrej@debian.org> Mon, 13 Nov 2017 19:58:35 +0000
knot (2.6.1-1) unstable; urgency=medium
* New upstream version 2.6.1
* Remove upstream patch for disabling TCP Fastopen
-- Ondřej Surý <ondrej@debian.org> Sun, 12 Nov 2017 03:11:26 +0000
knot (2.6.0-3) unstable; urgency=medium
* kdig: disable TCP Fastopen by default as it breaks TLS connection
(Closes: #879079)
-- Ondřej Surý <ondrej@debian.org> Thu, 19 Oct 2017 08:22:18 +0000
knot (2.6.0-2) unstable; urgency=medium
[ John Bond ]
* fix get_kasp and get_user to support unquoted ipv6 addresses
-- Ondřej Surý <ondrej@debian.org> Thu, 05 Oct 2017 13:08:26 +0000
knot (2.6.0-1) unstable; urgency=medium
* New upstream version 2.6.0
* Enable strict symbols checking
* Bump libknot 6->7 and libdnssec 4->5 SONAMEs and update symbols files
-- Ondřej Surý <ondrej@debian.org> Fri, 29 Sep 2017 19:46:41 +0200
knot (2.5.4-2) unstable; urgency=medium
* Drop conflicting links to dig, nsupdate and host (Closes: #741645)
* Build-Depend on latexmk (Closes: #872203)
-- Ondřej Surý <ondrej@debian.org> Mon, 18 Sep 2017 07:11:39 +0200
knot (2.5.4-1) unstable; urgency=medium
* New upstream version 2.5.4
-- Ondřej Surý <ondrej@debian.org> Fri, 01 Sep 2017 09:03:02 +0200
knot (2.5.3-3) unstable; urgency=medium
* Simple rebuild to make knot-doc arch:all again.
-- Ondřej Surý <ondrej@debian.org> Wed, 26 Jul 2017 14:41:26 +0200
knot (2.5.3-2) unstable; urgency=medium
* Disable dh-exec usage as #831786 breaks dh_install --fail-missing
(Closes: #869199)
-- Ondřej Surý <ondrej@debian.org> Mon, 24 Jul 2017 10:26:09 +0200
knot (2.5.3-1) unstable; urgency=medium
* New upstream version 2.5.3
-- Ondřej Surý <ondrej@debian.org> Sat, 15 Jul 2017 07:26:12 +0200
knot (2.5.2-1) unstable; urgency=medium
* New upstream version 2.5.2
* Remove all patches merged upstream
-- Ondřej Surý <ondrej@debian.org> Fri, 23 Jun 2017 11:46:34 +0200
knot (2.5.1-4) unstable; urgency=medium
* Create the modules M-A directory to workaround the bug that fails to
start knot when modules directory is missing
-- Ondřej Surý <ondrej@debian.org> Thu, 15 Jun 2017 11:32:09 +0200
knot (2.5.1-3) unstable; urgency=medium
* Enable dnstap module and set default moduledir to multiarch path
-- Ondřej Surý <ondrej@debian.org> Thu, 15 Jun 2017 08:32:34 +0200
knot (2.5.1-2) unstable; urgency=medium
* Explicitly exclude example.com.zone to support older debhelpers
* Add patch to fix duplicate section merging in the config
-- Ondřej Surý <ondrej@debian.org> Fri, 09 Jun 2017 13:47:17 +0200
knot (2.5.1-1) unstable; urgency=medium
* New upstream version 2.5.1
* Remove upstream patches released as Knot DNS 2.5.1
-- Ondřej Surý <ondrej@debian.org> Wed, 07 Jun 2017 16:04:16 +0200
knot (2.5.0-2) unstable; urgency=medium
* Add upstream patches to fix old DNSSEC installations
* Skip already converted kasp-db directories
* Install pykeymgr from upstream tarball
-- Ondřej Surý <ondrej@debian.org> Wed, 07 Jun 2017 14:20:38 +0200
knot (2.5.0-1) unstable; urgency=medium
* New upstream version 2.5.0
* Update maintscript to use dh-exec and remove obsolete cruft
* Bump the package names for libknot and libdnssec to match new
SOVERSIONs
* Simplify d/rules overrides
* Remove not-installed files from d/*.install
* Install local copy of pykeymgr (not included in the source
distribution)
* Add python-lmdb for pykeymgr migration utility
-- Ondřej Surý <ondrej@debian.org> Wed, 07 Jun 2017 11:03:22 +0200
knot (2.4.3-1) unstable; urgency=medium
* New upstream version 2.4.3
-- Ondřej Surý <ondrej@debian.org> Tue, 11 Apr 2017 21:17:47 +0200
knot (2.4.2-1) unstable; urgency=medium
* New upstream version 2.4.2
-- Ondřej Surý <ondrej@debian.org> Thu, 23 Mar 2017 11:47:52 +0100
knot (2.4.1-2) unstable; urgency=medium
* Enable dnstap module
-- Ondřej Surý <ondrej@debian.org> Mon, 27 Feb 2017 11:35:15 +0100
knot (2.4.1-1) unstable; urgency=medium
* New upstream version 2.4.1
-- Ondřej Surý <ondrej@debian.org> Fri, 10 Feb 2017 13:54:24 +0100
knot (2.4.0-3) unstable; urgency=medium
* Fix timeout call syntax in dh_auto_test invocation
-- Ondřej Surý <ondrej@debian.org> Wed, 25 Jan 2017 15:10:04 +0100
knot (2.4.0-2) unstable; urgency=medium
* Add -latomic to LDFLAGS to fix FTBFS on platforms that need it
-- Ondřej Surý <ondrej@debian.org> Mon, 23 Jan 2017 11:41:59 +0100
knot (2.4.0-1) unstable; urgency=medium
* Fix gbp.conf to be readable by git config --file debian/gbp.conf on Jessie
* New upstream version 2.4.0
* Bump libknot SONAME 4->5
* Update symbols files for 2.4.0 release
-- Ondřej Surý <ondrej@debian.org> Fri, 20 Jan 2017 12:15:30 +0100
knot (2.3.3-1) unstable; urgency=medium
[ Daniel Kahn Gillmor ]
* Use secure URLs where possible
* Clean up debian/copyright.
* Drop duplicate Source: lines (clears lintian binary-control-field-duplicates-source)
* Avoid using asterisk in NEWS (clears lintian debian-news-entry-uses-asterisk)
* Knot needs a dependency on lsb-base (clears lintian init.d-script-needs-depends-on-lsb-base)
* Filter auto-reconfed files out during future gbp import-orig operations
* debian/control: clean up Description: lines
* Added Documentation= to knot.service
[ Ondřej Surý ]
* Imported Upstream version 2.3.3
* Add kjournalprint to knot package
-- Ondřej Surý <ondrej@debian.org> Thu, 08 Dec 2016 14:49:31 +0100
knot (2.3.2-1) unstable; urgency=medium
* Imported Upstream version 2.3.2
* Add new symbols to libknot4.symbols
-- Ondřej Surý <ondrej@debian.org> Fri, 04 Nov 2016 11:31:33 +0100
knot (2.3.1-1) unstable; urgency=medium
* Imported Upstream version 2.3.1
* Bump libknot3 to libknot4
* kzonecheck was moved to /usr/bin
-- Ondřej Surý <ondrej@debian.org> Mon, 10 Oct 2016 12:01:41 +0200
knot (2.3.0-4) unstable; urgency=medium
* Don't fail if there's no knot user defined
* Don't list explicit -c or -C path and let daemon figure it out
-- Ondřej Surý <ondrej@debian.org> Thu, 15 Sep 2016 12:44:57 +0200
knot (2.3.0-3) unstable; urgency=medium
* Ignore the test results if they don't finish within 5 minutes
* Correctly break/replace libzscanner0 that contained libzscanner.so.1
-- Ondřej Surý <ondrej@debian.org> Thu, 11 Aug 2016 08:49:25 +0200
knot (2.3.0-2) unstable; urgency=medium
* Move examples to knot-doc package (fix arch-only FTBFS)
-- Ondřej Surý <ondrej@debian.org> Wed, 10 Aug 2016 10:17:17 +0200
knot (2.3.0-1) unstable; urgency=medium
* Imported Upstream version 2.3.0
+ Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)
(Closes: #830809)
* Restructure d/rules so dh_install --fail-missing works again
* Upstream bumped SOVERSION to libknot3, libdnssec2 and libzscanner1
-- Ondřej Surý <ondrej@debian.org> Wed, 10 Aug 2016 09:16:35 +0200
knot (2.2.1-2) unstable; urgency=high
* Add texlive-generic-extra to B-D for missing iftex.sty
(Closes: #829428)
-- Ondřej Surý <ondrej@debian.org> Mon, 11 Jul 2016 11:47:34 +0200
knot (2.2.1-1) unstable; urgency=medium
* Imported Upstream version 2.2.1
-- Ondřej Surý <ondrej@debian.org> Tue, 24 May 2016 17:48:16 +0200
knot (2.2.0-3) unstable; urgency=medium
* knotc checkconf is not knotc conf-check (Closes: #823574)
-- Ondřej Surý <ondrej@debian.org> Fri, 20 May 2016 14:22:11 +0200
knot (2.2.0-2) unstable; urgency=medium
* Do dbgsym migration of debug symbols
-- Ondřej Surý <ondrej@debian.org> Wed, 27 Apr 2016 17:43:59 +0200
knot (2.2.0-1) unstable; urgency=medium
* confdb should be in /var/lib/knot/ by default
* Imported Upstream version 2.2.0
* Add libedit-dev to Build-Depends
-- Ondřej Surý <ondrej@debian.org> Wed, 27 Apr 2016 10:10:10 +0200
knot (2.1.1-2) unstable; urgency=medium
* Add python to Depends and run wrap-and-sort -a
* Parse correct /etc/default/knot instead of /etc/default/knotd
-- Ondřej Surý <ondrej@debian.org> Fri, 15 Apr 2016 17:18:02 +0200
knot (2.1.1-1) unstable; urgency=medium
* Imported Upstream version 2.1.1
-- Ondřej Surý <ondrej@debian.org> Wed, 10 Feb 2016 20:01:44 +0100
knot (2.1.0-3) unstable; urgency=medium
* Add small python helper programs to get values from knot.conf
-- Ondřej Surý <ondrej@debian.org> Mon, 25 Jan 2016 12:44:00 +0100
knot (2.1.0-2) unstable; urgency=medium
* Revert "Run keymgr init on every upgrade (just to be sure it happens)"
* Add support for relative directories in kasp-db
-- Ondřej Surý <ondrej@debian.org> Thu, 14 Jan 2016 11:46:35 +0100
knot (2.1.0-1) unstable; urgency=medium
* Set knot user home directory to /var/lib/knot
* Imported Upstream version 2.1.0
* Run keymgr init on every upgrade (just to be sure it happens)
-- Ondřej Surý <ondrej@debian.org> Thu, 14 Jan 2016 10:55:26 +0100
knot (2.1.0~rc1-55-gf227348-1) unstable; urgency=medium
* Add libgnutls28-dev and libjansson-dev as dependencies to libknot-dev
to satisfy pkg-config requirements
* Imported Upstream version 2.1.0~rc1-55-gf227348
* Automatically upgrade all KASP databases found in the configuration
and restart the server afterwards when upgrading from 2.0.x to 2.1.x
-- Ondřej Surý <ondrej@debian.org> Wed, 13 Jan 2016 14:03:17 +0100
knot (2.1.0~rc1-52-gd80ce77-1) unstable; urgency=medium
* Imported Upstream version 2.1.0~rc1-52-gd80ce77
-- Ondřej Surý <ondrej@debian.org> Tue, 12 Jan 2016 16:56:12 +0100
knot (2.0.2-1) unstable; urgency=medium
* Imported Upstream version 2.0.2
* Delete d/p/series as we carry no patches
-- Ondřej Surý <ondrej@debian.org> Tue, 24 Nov 2015 19:59:56 +0100
knot (2.0.1-4) unstable; urgency=medium
* Split knot-libs into individual library packages
* Add knot.default file and use it from systemd and init.d scripts
-- Ondřej Surý <ondrej@debian.org> Mon, 05 Oct 2015 20:34:02 +0200
knot (2.0.1-3) unstable; urgency=medium
* The upstart conffile ends with .conf, fix the stale conffile removal
-- Ondřej Surý <ondrej@debian.org> Mon, 21 Sep 2015 13:54:42 +0200
knot (2.0.1-2) unstable; urgency=medium
* Compile the production version with NDEBUG
* Remove stale upstart init script via dpkg-maintscript-helper rm_config
-- Ondřej Surý <ondrej@debian.org> Mon, 14 Sep 2015 13:41:29 +0200
knot (2.0.1-1) unstable; urgency=medium
* Imported Upstream version 2.0.1
* Fix the do_tmpfiles() in sysvrc script (Courtesy of Daniel Baumann)
(Closes: #796921)
* Disable -pedantic as it causes errors to be thrown in the tests
-- Ondřej Surý <ondrej@debian.org> Thu, 03 Sep 2015 10:56:16 +0200
knot (2.0.0-1+0) unstable; urgency=medium
* Bump the version to workaround ~exp* higher than ~bpo*
-- Ondřej Surý <ondrej@debian.org> Mon, 17 Aug 2015 15:05:37 +0200
knot (2.0.0-1) unstable; urgency=medium
* New upstream version 2.0.0
+ Bugfixes:
- Fix lost NOTIFY message if received during zone transfer
- Disable fast zone parser when compiled in Clang (workaround for Clang bug)
- kdig: Record correct dnstap SocketProtocol when retrying over TCP
- kdig: Hide TSIG section with +noall
- Do not set AA flag for AXFR/IXFR queries
+ Features:
- DNSSEC: separate library, switch to GnuTLS, new utilities
- DNSSEC: basic KASP support (generate initial keys, ZSK rollover)
- Configuration: New text format in YAML, binary store in LMDB
- Zone parser: Split long TXT/SPF strings into multiple strings
- kdig: Add generic dump style option (+generic)
- Try all master servers in multi-master environment
- Improved remotes and ACLs (multiple addresses, multiple keys)
- Basic support for zone file patterns (%s to substitute zone name)
- Disable zone file synchronization by setting 'zonefile_sync' to '-1'
- knsupdate: Add input prompt in interactive mode and 'quit' command
- knsupdate: Allow TSIG algorithm specification in interactive prompt
+ Improvements:
- Zone dump: Do not write class for SOA record (unified with other RR types)
- Zone dump: Do not write master server address into the zone file
- Documentation: Manual pages are included in HTML and PDF
* Install knot1to2 configuration file conversion tool
* Automatically convert knot.conf with some safety-checks
* Add note about the conversion to debian/knot.NEWS
* Make the build libsystem-{daemon,journal}-dev friendly to allow Ubuntu
and backported builds
-- Ondřej Surý <ondrej@debian.org> Mon, 17 Aug 2015 11:56:43 +0200
knot (2.0.0-1~exp2) experimental; urgency=medium
* Update prepare-environment to match the new config file syntax
-- Ondřej Surý <ondrej@debian.org> Thu, 30 Jul 2015 09:26:52 +0200
knot (2.0.0-1~exp1) experimental; urgency=medium
* New upstream version 2.0.0
+ Bugfixes:
- Fix lost NOTIFY message if received during zone transfer
- Disable fast zone parser when compiled in Clang (workaround for Clang bug)
- kdig: Record correct dnstap SocketProtocol when retrying over TCP
- kdig: Hide TSIG section with +noall
- Do not set AA flag for AXFR/IXFR queries
+ Features:
- DNSSEC: separate library, switch to GnuTLS, new utilities
- DNSSEC: basic KASP support (generate initial keys, ZSK rollover)
- Configuration: New text format in YAML, binary store in LMDB
- Zone parser: Split long TXT/SPF strings into multiple strings
- kdig: Add generic dump style option (+generic)
- Try all master servers in multi-master environment
- Improved remotes and ACLs (multiple addresses, multiple keys)
- Basic support for zone file patterns (%s to substitute zone name)
- Disable zone file synchronization by setting 'zonefile_sync' to '-1'
- knsupdate: Add input prompt in interactive mode and 'quit' command
- knsupdate: Allow TSIG algorithm specification in interactive prompt
+ Improvements:
- Zone dump: Do not write class for SOA record (unified with other RR types)
- Zone dump: Do not write master server address into the zone file
- Documentation: Manual pages are included in HTML and PDF
* Install knot1to2 configuration file conversion tool
* Automatically convert knot.conf with some safety-checks
* Add note about the conversion to debian/knot.NEWS
* Make the build libsystem-{daemon,journal}-dev friendly to allow Ubuntu
and backported builds
-- Ondřej Surý <ondrej@debian.org> Mon, 29 Jun 2015 10:40:45 +0200
knot (1.6.1-1) unstable; urgency=medium
* New upstream version 1.6.1
-- Ondřej Surý <ondrej@debian.org> Tue, 30 Dec 2014 09:50:54 +0100
knot (1.6.0-1) unstable; urgency=medium
* New upstream version 1.6.0
* Switch to network-online.target to mitigate some network not-yet-ready races
* Recommend systemd due journald enabled logging (Closes: #766596)
-- Ondřej Surý <ondrej@debian.org> Fri, 24 Oct 2014 12:41:32 +0200
knot (1.6.0~rc2-1) unstable; urgency=medium
* New upstream version 1.6.0~rc2
* Update patches for 1.6.0~rc2 release
-- Ondřej Surý <ondrej@debian.org> Fri, 17 Oct 2014 17:32:30 +0200
knot (1.6.0~rc1-1) unstable; urgency=medium
* New upstream version 1.6.0~rc1
* Knot needs lmdb for persistent timers
-- Ondřej Surý <ondrej@debian.org> Mon, 13 Oct 2014 23:06:56 +0200
knot (1.5.3-1) unstable; urgency=medium
* Move knot-libs to Section: net (Closes: #760795)
* New upstream version 1.5.3
-- Ondřej Surý <ondrej@debian.org> Mon, 15 Sep 2014 17:00:08 +0200
knot (1.5.2-1) unstable; urgency=high
* Update Vcs-Urls to point to anonscm.debian.org
* New upstream version 1.5.2
+ [CVE-2014-0486]: Fixed remote crash with crafted DNS message
* Update patches for 1.5.2 release
-- Ondřej Surý <ondrej@debian.org> Mon, 08 Sep 2014 11:11:56 +0200
knot (1.5.1-3) unstable; urgency=high
* More arch/indep build rules splitting to fix binary-arch-only builds
* Add lintian override to override warning about internal libraries in
knot-libs
-- Ondřej Surý <ondrej@debian.org> Tue, 26 Aug 2014 09:43:05 +0200
knot (1.5.1-2) unstable; urgency=medium
* Enable full hardening via debhelper >= 9
* Enable IDN in knot-dnsutils and knot-host packages
* Enable systemd libraries only on linux-any
* Split arch and indep builds to build the documentation just once
* Drop ragel from build depends to allow arm64 builds
-- Ondřej Surý <ondrej@debian.org> Mon, 25 Aug 2014 15:54:34 +0200
knot (1.5.1-1) unstable; urgency=medium
* New upstream version 1.5.1
* Enable systemd notification mechanism
* Enable systemd journal enhanced logging
-- Ondřej Surý <ondrej@debian.org> Wed, 20 Aug 2014 10:45:18 +0200
knot (1.5.0-1) unstable; urgency=medium
* New upstream version 1.5.0
+ Features:
- Pluggable query processing modules
- Synthetic IPv4/IPv6 reverse/forward records (optional module)
- dnstap support in both utilities & server (optional module)
- NOTIFY message support and new TSIG section in kdig
- Multi-master support
- edns-client-subnet support in kdig
- Optional asynchronous startup (config "asynchronous-start")
- DDNS forwarding reimplemented
+ Improvements:
- Query processing and core functionality overhaul
- Performance and reduced memory footprint
- Faster zone events scheduling
- RFC compliant queries/responses in some corner cases
- Log messages
- New documentation (Sphinx)
- Transfer sizes logged in bytes if needed
- Logging outgoing NOTIFY messages
- Logging unauthorized incoming NOTIFYs
- Preempt task queue for faster reload
- Lazy zone file write after zone transfer (governed by "zonefile-sync")
+ Bugfixes:
- Close zone transfer after SERVFAIL response
- Incremental to full zone transfer fallback, wrong log message
- Zone events corner cases, reload replanning
- Zone flush planning after bootstrap
- Incorrect incoming AXFR message sizes
- DDNS signing changes were freed too soon, posibility of stale data
- knotc remote control key handling
* Debian packaging:
+ d/control: New documentation is using sphinx
+ d/control: New knot-libs package containing internal shared libraries
-- Ondřej Surý <ondrej@debian.org> Wed, 09 Jul 2014 13:08:26 +0200
knot (1.4.6+hotfix-1) unstable; urgency=medium
* New upstream version 1.4.6+hotfix
-- Ondřej Surý <ondrej@debian.org> Thu, 22 May 2014 15:39:07 +0200
knot (1.4.6-1) unstable; urgency=medium
* New upstream version 1.4.6
* Update patches for 1.4.6 release
-- Ondřej Surý <ondrej@debian.org> Thu, 22 May 2014 13:15:14 +0200
knot (1.4.5-2) unstable; urgency=high
* Re-upload to fix botched amd64 upload in 1.4.5-1
-- Ondřej Surý <ondrej@debian.org> Tue, 22 Apr 2014 14:58:30 +0200
knot (1.4.5-1) unstable; urgency=high
* New upstream version 1.4.5
+ Fix possible weakness in TSIG signature checking
* Refresh patches for 1.4.5 release
* Use dh-autoreconf to regenerate autotools files
-- Ondřej Surý <ondrej@debian.org> Mon, 14 Apr 2014 15:11:12 +0200
knot (1.4.4-1) unstable; urgency=medium
* New upstream version 1.4.4
+ Server is logging remote control commands
+ 'knotc reload' doesn't refresh unchanged zones
+ 'knotc -f refresh' forces zone retransfer
+ Fixed missing notifications after DDNS/automatic resign
+ Zone is rebootstrapped if the zone file is unreadable
+ Progressive bootstrap retry backoff
+ Zone file parser now allows asterisk as part of the label
+ Fix journal maximum entry size
+ Sign DNSKEYs in non-apex nodes as regular RR sets
+ Various spelling and typo fixes (Courtesy of Robert Edmonds)
-- Ondřej Surý <ondrej@debian.org> Thu, 27 Mar 2014 15:49:54 +0100
knot (1.4.3-2) unstable; urgency=medium
* Add support for autotools-dev and dh-systemd
* Enable parallel builds in dh invocation
-- Ondřej Surý <ondrej@debian.org> Tue, 18 Feb 2014 13:44:13 +0100
knot (1.4.3-1) unstable; urgency=low
* New upstream version 1.4.3
-- Ondřej Surý <ondrej@debian.org> Tue, 18 Feb 2014 13:03:42 +0100
knot (1.4.2-1) unstable; urgency=low
* New upstream version 1.4.2
* Update OpenSSL << 1.0.0 compatibility patch
-- Ondřej Surý <ondrej@debian.org> Mon, 27 Jan 2014 16:14:33 +0100
knot (1.4.1-2) unstable; urgency=low
* Add patch to remove the requirement for OpenSSL 1.0.0 to build on
Debian squeeze, be warned though that the OpenSSL before 1.0.0 might
manifest some threading errors and crashes, so you really should
upgrade your system to Debian wheezy.
-- Ondřej Surý <ondrej@debian.org> Thu, 23 Jan 2014 16:53:03 +0100
knot (1.4.1-1) unstable; urgency=low
* New upstream version 1.4.1
+ Empty APL record support
+ 'zonestatus' when using immediate zone syncing
+ Immediate zone syncing after reload
+ Race condition writing time values to zone file
+ Require OpenSSL >= 1.0.0
* Don't use dh-autoreconf, upstream uses recent enough autotools
* Bump standards version to 3.9.5
* Run the tests on every arch without the condition, but don't fail
anywhere
-- Ondřej Surý <ondrej@debian.org> Mon, 13 Jan 2014 18:00:18 +0100
knot (1.4.0-1) unstable; urgency=low
* New major upstream version 1.4.0
+ Experimental automatic DNSSEC signing
+ Fastest ragel parser enabled by default
+ Reduced memory usage
+ Zone SOA SERIAL policies (INCREMENT, UNIXTIME) for DDNS and
automatic DNSSEC signing
+ IDN support in Knot utilities (kdig, knsupdate, ...)
+ DNSSEC: support for GOST algorithm
+ Support for DNSSEC key pre-publication
* Remove PATH_MAX patch, it's already included in upstream
* Run the tests on all archs, but don't fail the build if the tests fail
on broken archs
* Update watch file to match (alpha|beta|rc)\d* versions
-- Ondřej Surý <ondrej@debian.org> Mon, 06 Jan 2014 11:00:07 +0100
knot (1.4.0~rc2-1) experimental; urgency=low
* New upstream version 1.4.0~rc2
-- Ondřej Surý <ondrej@debian.org> Fri, 13 Dec 2013 17:53:26 +0100
knot (1.4.0~rc1-1) experimental; urgency=low
* Disable tests on GNU Hurd
* New upstream version 1.4.0~rc1
-- Ondřej Surý <ondrej@debian.org> Mon, 25 Nov 2013 16:19:27 +0100
knot (1.4.0~beta-1) experimental; urgency=low
* New upstream version 1.4.0~beta
* Update patches for 1.4.0~beta release
* Disable fastparser since the ragel is broken in one test
* Add knsec3hash to knot package
-- Ondřej Surý <ondrej@debian.org> Tue, 29 Oct 2013 12:25:49 +0100
knot (1.3.4-1) unstable; urgency=low
* Disable tests on GNU Hurd
* New upstream version 1.3.4
-- Ondřej Surý <ondrej@debian.org> Fri, 13 Dec 2013 17:23:52 +0100
knot (1.3.3-1) unstable; urgency=low
* New upstream version 1.3.3
-- Ondřej Surý <ondrej@debian.org> Mon, 28 Oct 2013 11:40:13 +0100
knot (1.3.2-3) unstable; urgency=low
* Add ufw applications.d rule for Knot DNS
* Disable recvmmsg on GNU Hurd (since recvmmsg is not implemented on GNU
Hurd and will always fail)
* Enable fastparser (requires Ragel)
-- Ondřej Surý <ondrej@debian.org> Fri, 11 Oct 2013 17:23:35 +0200
knot (1.3.2-2) unstable; urgency=low
* Define #PATH_MAX to make GNU Hurd happy
* Don't enable LTO, it doesn't play well with debugging symbols
-- Ondřej Surý <ondrej@debian.org> Sun, 06 Oct 2013 01:57:13 +0200
knot (1.3.2-1) unstable; urgency=low
* New upstream version 1.3.2
* Enable link-time-optimizations by default
-- Ondřej Surý <ondrej@debian.org> Mon, 30 Sep 2013 15:04:01 +0200
knot (1.3.1-1) unstable; urgency=low
* New upstream version 1.3.1
* Add new debian/watch file (Courtesy of Debian QA)
* Bump standards to 3.9.4
* Stop using /lib/init/vars.sh, we don't use $VERBOSE anymore anyway
* Drop syslog.target as it is not needed anymore
* Remove SSE detection patch as it was merged upstream
-- Ondřej Surý <ondrej@debian.org> Tue, 27 Aug 2013 14:27:44 +0200
knot (1.3.0-2) unstable; urgency=low
* Disable SSE detection in the packaged version of Knot DNS
-- Ondřej Surý <ondrej@debian.org> Fri, 16 Aug 2013 13:04:39 +0200
knot (1.3.0-1) unstable; urgency=low
* New upstream version 1.3.0
* Remove upstream patch from 1.3.0~rc5-2 as it is included in
this release.
-- Ondřej Surý <ondrej@debian.org> Mon, 05 Aug 2013 17:01:23 +0200
knot (1.3.0~rc5-2) unstable; urgency=low
* Pull some pre 1.3.0 patches (mainly to test before release):
+ Initialize secondary groups for user <user>.<group>.
+ Reworked CH TXT records support (RFC 4892).
+ Fixed inactive xfers may be disconnected depending on the previous
result.
+ Add server starting information to log.
-- Ondřej Surý <ondrej@debian.org> Mon, 05 Aug 2013 10:39:48 +0200
knot (1.3.0~rc5-1) unstable; urgency=low
* New upstream version 1.3.0~rc5
* Remove last upstream patch, all our changes have been merged. Yay\!
-- Ondřej Surý <ondrej@debian.org> Mon, 29 Jul 2013 17:15:56 +0200
knot (1.3.0~rc4-2) unstable; urgency=low
* Disable tests on big endian architectures (but the code still needs to
be fixed)
-- Ondřej Surý <ondrej@debian.org> Tue, 23 Jul 2013 14:07:39 +0200
knot (1.3.0~rc4-1) unstable; urgency=low
* New upstream version 1.3.0~rc4
* Add upstream patch to honour CONFIG_DIR
* Remove now obsolete patch to run as knot:knot
* The knot/ is now added by upstream to @sysconfdir@
-- Ondřej Surý <ondrej@debian.org> Mon, 15 Jul 2013 15:15:05 +0200
knot (1.3.0~rc3-2) unstable; urgency=low
* Add proper support for upstart and systemd along with sysvinit
* Add /usr/lib/knot/prepare-environment script which will parse
knot configuration file and properly create rundir and set
correct permissions to configured values in /etc/knot/knot.conf
* Remove /etc/default/knot since the values are now parsed
directly from the configuration file
* Add /var/lib/knot to knot.dirs, so it gets created on package
install
* Drop checking for $VERBOSE variable and properly log start/stop from
sysvinit script
-- Ondřej Surý <ondrej@debian.org> Tue, 02 Jul 2013 13:08:33 +0200
knot (1.3.0~rc3-1) unstable; urgency=low
* New upstream version 1.3.0~rc3
* Packaging changes:
+ Use --fail-missing to check for all new files
+ Remove obsolete patches and update installed conffile with latest
options
+ Don't install knot-zcompile as it is no more
+ Install minimal example configuration file as /etc/knot/knot.conf
+ Add --disable-silent-rules to configure invocation
+ Add patch to fix missing $(DESTDIR) in src/Makefile.am
+ Set --with-rundir and --with-storage to correct locations
+ Run under knot:knot by default (create and delete knot user)
+ Add knot-dnsutils and knot-host packages
+ Add patch to move knot-{host,dnsutils} manpages to correct location
+ Add samples/knot.{full,keys}.conf and example zone to examples.
* Add knot-doc package with generated documentation (PDF and HTML)
-- Ondřej Surý <ondrej@debian.org> Fri, 28 Jun 2013 12:59:55 +0200
knot (1.2.0-2) unstable; urgency=low
* /etc/init.d/knot now sources /etc/default/knot instead of
/etc/init.d/knotd (Closes: #707683)
* Pull upstream fix for pidfile creation before dropping priviledges
(Closes: #707685)
* Enable SSE2 support again (we will simply not support anything older
than Pentium M)
-- Ondřej Surý <ondrej@debian.org> Wed, 26 Jun 2013 14:41:04 +0200
knot (1.2.0-1) unstable; urgency=low
* Imported Upstream version 1.2.0
+ Final release.
+ Some small memory leaks fixes.
-- Ondřej Surý <ondrej@debian.org> Wed, 03 Apr 2013 09:16:25 +0200
knot (1.2.0~rc4-1) unstable; urgency=low
* Imported Upstream version 1.2.0~rc4
+ knotc 'zonestatus' command
+ Changing logfile ownership before dropping privileges
+ knotc respects 'control' section from configuration
+ RRL: resolved bucket collisions
+ RRL: updated bucket mapping to conform RRL technical memo
-- Ondřej Surý <ondrej@debian.org> Fri, 22 Mar 2013 15:35:50 +0100
knot (1.2.0~rc3-1) unstable; urgency=low
* Imported Upstream version 1.2.0~rc3
+ New functionality: Response Rate Limiting as a response to
reflection DNS DDoS attacks in the wild
+ Add missing RRSIG in ANY queries
-- Ondřej Surý <ondrej@debian.org> Fri, 01 Mar 2013 13:24:28 +0100
knot (1.2~rc2-1) unstable; urgency=low
* Imported Upstream version 1.2~rc2
* Fix git location
* Update patches for 1.2 release
-- Ondřej Surý <ondrej@debian.org> Mon, 18 Feb 2013 12:40:01 +0100
knot (1.1.3-1) unstable; urgency=low
* Imported Upstream version 1.1.3
-- Ondřej Surý <ondrej@debian.org> Thu, 20 Dec 2012 10:50:41 +0100
knot (1.1.3~rc1-1) unstable; urgency=low
* Imported Upstream version 1.1.3~rc1
+ Fixed answering DS queries (RRSIGs not together with DS, AA bit
missing).
+ Fixed setting ARCOUNT in some error responses with EDNS enabled.
+ Fixed crash when compiling zone zone with NSEC3PARAM but no NSEC3
and semantic checks enabled.
-- Ondřej Surý <ondrej@debian.org> Fri, 07 Dec 2012 11:19:35 +0100
knot (1.1.2-1) unstable; urgency=low
* Imported Upstream version 1.1.2
-- Ondřej Surý <ondrej@debian.org> Wed, 21 Nov 2012 14:45:34 +0100
knot (1.1.2~rc1-1) unstable; urgency=low
* Imported Upstream version 1.1.2~rc1
* Update patches for new release
-- Ondřej Surý <ondrej@debian.org> Wed, 14 Nov 2012 14:04:17 +0100
knot (1.1.1-1) unstable; urgency=low
* Imported Upstream version 1.1.1
* Update and remove obsolete patches for new release
-- Ondřej Surý <ondrej@debian.org> Wed, 31 Oct 2012 10:42:09 +0100
knot (1.1.0-5) unstable; urgency=low
* Disable SSE2 instruction set, might solve some strange crashes.
-- Ondřej Surý <ondrej@debian.org> Wed, 10 Oct 2012 13:09:54 +0200
knot (1.1.0-4) unstable; urgency=low
* Disable extra hardening via dpkg-buildflags, which is not needed
by debhelper 9, but breaks builds on squeeze
* Install man5 and knot.info documentation
-- Ondřej Surý <ondrej@debian.org> Mon, 03 Sep 2012 16:43:26 +0200
knot (1.1.0-3) unstable; urgency=low
* Bump dependency on debhelper >= 9
* Bump standards version to 3.9.3
* Fix installation of manpages to correct directories
-- Ondřej Surý <ondrej@debian.org> Mon, 03 Sep 2012 16:02:11 +0200
knot (1.1.0-2) unstable; urgency=low
* Disable AM_MAINTAINER_MODE and re-run autoreconf -fi
* Enable hardening build by default
* Update pidfile patch to 1.1.0
* Cope with default MultiArch in dh_compat==9 and don't install
unittests* binaries
-- Ondřej Surý <ondrej@debian.org> Mon, 03 Sep 2012 15:32:53 +0200
knot (1.1.0-1) unstable; urgency=low
* Imported Upstream version 1.1.0
- User manual now available.
- Optionally disable ANY queries for authoritative answers.
- Dropping identical records in zone and incoming transfers.
- Support for '/' in zone names.
- Generating journal from reloaded zone (EXPERIMENTAL).
- Outgoing-only interfaces in configuration file.
- Following DNAME if the synthetized name is in the same zone.
- IXFR-in optimized.
- Many zones loading optimized.
- Signing SOA with TSIG queries when checking zone version with master.
* Enable maintainer mode to generate version.texi as a workaround.
-- Ondřej Surý <ondrej@debian.org> Fri, 31 Aug 2012 16:27:07 +0200
knot (1.0.6-1) unstable; urgency=low
* Imported Upstream version 1.0.6
- Add NSEC/NSEC3 for all wildcard CNAMEs in the response.
- Fixed potential problems with RCU synchronization.
-- Ondřej Surý <ondrej@debian.org> Wed, 13 Jun 2012 15:31:52 +0200
knot (1.0.5-1) unstable; urgency=low
* Imported Upstream version 1.0.5
- Fixed bug with creating journal files which didn't get merged
by accident
-- Ondřej Surý <ondrej@debian.org> Thu, 17 May 2012 12:25:27 +0200
knot (1.0.4-1) unstable; urgency=low
* Imported Upstream version 1.0.4
- Speed-up loading of many zones due parallelization
- Support for TLSA resource record (Type 52)
- New commands knotc checkzone and knotc refresh (forced update)
- Fixed responses to CNAME queries if the canonical name was also
an alias
- Fixed crash when NS or MX points to an alias
- Fixed crash when bootstraping/compiling a lot of zones
- Significant speed-up and memory usage reduction of IXFR-in
-- Ondřej Surý <ondrej@debian.org> Wed, 16 May 2012 09:33:26 +0200
knot (1.0.3-1) unstable; urgency=low
* Imported Upstream version 1.0.3
- Fixed bug in non-EDNS0 queries over TCP
- Zone compilation time regression fixed
-- Ondřej Surý <ondrej@debian.org> Wed, 18 Apr 2012 09:06:57 +0200
knot (1.0.2-1) unstable; urgency=low
* Imported Upstream version 1.0.2
- Bugfix release
-- Ondřej Surý <ondrej@debian.org> Fri, 13 Apr 2012 16:09:11 +0200
knot (1.0.1-1) unstable; urgency=low
* Imported Upstream version 1.0.1
- Implemented jitter to REFRESH/RETRY timers
- Fixed problem with creating IXFR journal for bootstrapped zone
- Fixed race condition in processing NOTIFY/SOA queries
- Fixed improper assignment of TSIG algorithm type
-- Ondřej Surý <ondrej@debian.org> Fri, 09 Mar 2012 20:18:37 +0100
knot (1.0.0-1) unstable; urgency=low
* Imported Upstream version 1.0.0
* Update pidfile patch
-- Ondřej Surý <ondrej@debian.org> Wed, 29 Feb 2012 18:46:13 +0100
knot (1.0~rc1-1) unstable; urgency=low
* Imported Upstream version 1.0~rc1
* Move knotd.pid to /var/run where it belongs
-- Ondřej Surý <ondrej@debian.org> Wed, 15 Feb 2012 21:12:56 +0100
knot (0.9.1-3) unstable; urgency=low
* Install files into knot package (broken build after added debug
package)
-- Ondřej Surý <ondrej@debian.org> Mon, 23 Jan 2012 15:01:42 +0100
knot (0.9.1-2) unstable; urgency=low
* Build knot-dbg package with debug symbols
-- Ondřej Surý <ondrej@debian.org> Mon, 23 Jan 2012 13:27:20 +0100
knot (0.9.1-1) unstable; urgency=low
* Imported Upstream version 0.9.1
+ RRSet rotation functionality added
+ New pseudo-random number generator (new BSD licensed)
+ Fixed build on BSD
+ Fixes in parsing and dumping of some RR types
* Add correct git-buildpackage configuration
* Update copyright for new PRNG
-- Ondřej Surý <ondrej@debian.org> Sat, 21 Jan 2012 15:47:30 +0100
knot (0.9-1) unstable; urgency=low
* Imported Upstream version 0.9
+ Add TSIG support
+ Several smaller bugfixes
* Add correct git-buildpackage configuration
* Imported Upstream version 0.9.1
* Update copyright for new PRNG
-- Ondřej Surý <ondrej@debian.org> Sat, 21 Jan 2012 15:46:54 +0100
knot (0.8.1-1) unstable; urgency=low
* Imported Upstream version 0.8.1
+ Correctly handle SPF resource records
+ Fix wrong text dumping of unknown records.
-- Ondřej Surý <ondrej@debian.org> Thu, 01 Dec 2011 16:27:44 +0100
knot (0.8-1) unstable; urgency=low
* Initial release (Closes: #647461)
* Add some dependencies in the init.d script
* Add flex and bison to b-d
* Add versioned dependency on liburcu
* Daemonize on the start
* Update copyright file to include all licenses
-- Ondřej Surý <ondrej@debian.org> Wed, 16 Nov 2011 07:14:55 +0100