head 1.3; access; symbols; locks; strict; comment @# @; 1.3 date 2026.08.05.15.59.30; author drixter; state Exp; branches; next 1.2; commitid 8ke7K5ar8HkTTsQG; 1.2 date 2026.07.22.20.38.03; author drixter; state Exp; branches; next 1.1; commitid SqpNVJyLibhhTGOG; 1.1 date 2026.06.27.20.39.04; author drixter; state Exp; branches; next ; commitid GtM266J3CFajHtLG; desc @@ 1.3 log @knot-resolver: Update to 6.4.2 Bugfixes cache: avoid excessive logging introduced in the last release (!1869) /options/serve-stale: avoid SIGSEGV from a LuaJIT bug (#957) Improvements DoH: add unencrypted mode for reverese proxies (alpha, !1877) deal with LMDB 1.0.0 switching format (!1880) @ text @$NetBSD: distinfo,v 1.1 2026/06/27 20:39:04 drixter Exp $ BLAKE2s (knot-resolver-6.4.2.tar.xz) = 943cfb77cc50b484bdc2a75b7434c2a8414a329d23bea7ac1a6b4e92df961a22 SHA512 (knot-resolver-6.4.2.tar.xz) = c4fec8d9a4b95fcc2ab4bc920e355861e7c2ac0faee3601a14352e9de1ec6ed034c978af8133b0f3100d7b8a1cada959d8b03c852415adaced9777bc43fd4057 Size (knot-resolver-6.4.2.tar.xz) = 2372660 bytes @ 1.2 log @knot-resolver: Update to 6.4.1 Knot Resolver 6.4.1 (2026-07-22) Security: DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us. DNSSEC correctness issues, acting mainly through the aggressive cache: * dealing with Labels field in RRSIGs being smaller than the signer’s * dealing with NSEC’s next-name pointing outside of the zone Special thanks to Qifan Zhang from Palo Alto Networks. Improvements: docker: upgrade to Debian 13 (!1856) update IANA’s certificate for root trust anchor bootstrapping (!1845) Bugfixes: /local-data/addresses*: make multiple addresses work (#808, #954) views: fix protocol-based matching for DoQ @ text @d3 3 a5 3 BLAKE2s (knot-resolver-6.4.1.tar.xz) = 912279deedfb71338d400ea5dabb69388f5251f85603e22497ec86fab093fcdb SHA512 (knot-resolver-6.4.1.tar.xz) = efd45cacdbf3dc4ef3260dc5163ac6ee224517d0b371fd940d57a9fa814c9c7171a61280bb1464481688dcf9b41d95a0311206b871e3ea8889efe3cbb2d77e12 Size (knot-resolver-6.4.1.tar.xz) = 2372020 bytes @ 1.1 log @knot-resolver: Adding version 6.4.0 Knot Resolver 6.4.0 (2026-06-17) Improvements packaging: rpm: require python3-setuptools (!1830, #952) packaging: rpm: provide user/group (!1837) controller: improved error handling when sending commands to workers (!1834) Bugfixes dns64: fix CNAME problems again (#797, !1840) @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (knot-resolver-6.4.0.tar.xz) = 29437878e674cdb80ee4d23b4521aee7fdf1014f3edf68ac5d49d6973a5cf177 SHA512 (knot-resolver-6.4.0.tar.xz) = 3992a014e64899c1867773714d5505b44f714bab511af2b7657456c79706b75eae0ba1f9f93017dd5648793fbbf32baf48208a5789422d2e42a1a361b0d91311 Size (knot-resolver-6.4.0.tar.xz) = 2367316 bytes @