head 1.6; access; symbols pkgsrc-2019Q4:1.3.0.18 pkgsrc-2019Q4-base:1.3 pkgsrc-2019Q3:1.3.0.14 pkgsrc-2019Q3-base:1.3 pkgsrc-2019Q2:1.3.0.12 pkgsrc-2019Q2-base:1.3 pkgsrc-2019Q1:1.3.0.10 pkgsrc-2019Q1-base:1.3 pkgsrc-2018Q4:1.3.0.8 pkgsrc-2018Q4-base:1.3 pkgsrc-2018Q3:1.3.0.6 pkgsrc-2018Q3-base:1.3 pkgsrc-2018Q2:1.3.0.4 pkgsrc-2018Q2-base:1.3 pkgsrc-2018Q1:1.3.0.2 pkgsrc-2018Q1-base:1.3 pkgsrc-2017Q4:1.2.0.6 pkgsrc-2017Q4-base:1.2 pkgsrc-2017Q3:1.2.0.4 pkgsrc-2017Q3-base:1.2 pkgsrc-2017Q2:1.1.0.2; locks; strict; comment @# @; 1.6 date 2025.10.30.08.29.58; author wiz; state dead; branches; next 1.5; commitid BIKMk61SnZPBnzgG; 1.5 date 2025.10.17.13.39.21; author jperkin; state Exp; branches; next 1.4; commitid mF2BBetdfXkJvVeG; 1.4 date 2020.03.17.19.07.29; author adam; state dead; branches; next 1.3; commitid 73BzMguYLupsTM0C; 1.3 date 2018.01.02.12.23.55; author fhajny; state Exp; branches; next 1.2; commitid s2A0PlGQCmguxilA; 1.2 date 2017.08.02.20.15.42; author fhajny; state Exp; branches; next 1.1; commitid Z8bqeZhZSq0q4G1A; 1.1 date 2017.07.03.13.02.38; author joerg; state Exp; branches 1.1.2.1; next ; commitid cs7GnM3j4CutDMXz; 1.1.2.1 date 2017.07.03.13.02.38; author bsiegert; state dead; branches; next 1.1.2.2; commitid MyD0NmUpSqzNCIYz; 1.1.2.2 date 2017.07.10.19.42.10; author bsiegert; state Exp; branches; next ; commitid MyD0NmUpSqzNCIYz; desc @@ 1.6 log @powerdns-recursor: update to 5.3.1. Provided by Marcin Gondek in wip. 5.3.1 Released: 22nd of October 2025 Bug Fixes Fix PowerDNS Security Advisory 2025-06: Crafted delegations or IP fragments can poison cached delegations in Recursor. References: pull request 16339 5.3.0 Released: 28th of August 2025 Improvements Path.unlink(True) requires python 3.8, rewrite so it works on older versions. References: #16011, pull request 16027 Include proper file in bridge.hh to avoid a case of creating a smart pointer to an incomplete class. References: #16021, pull request 16026 Bug Fixes Check for pubsuffix.cc presence when building with autotools, followup to #15782. References: #16010, pull request 16028 5.3.0-rc1 Released: 21st of August 2025 Improvements Move back to a single debian control file. References: #15934, pull request 15986 Put lib.rs into dist tarball. References: #15938, pull request 15983 Recursor/auth: remove obsolete pre install files. References: #15802, pull request 15982 Bug Fixes Fix Boost system lib dependency: it is no longer available since 1.89. References: #15972, #15991, pull request 15993 Add back parent span attributes, they were lost in #15756. References: #15974, #15981, pull request 15985 If an RPZ hit has a custom CNAME record, we should try harder to follow it. References: #15893, pull request 15984 5.3.0-beta1 Released: 24th of July 2025 New Features Add Lua hooks to dump and restore measured nameserver speed table. References: pull request 15803 Improvements Add version and an alignment byte to the EDNS record for OpenTelemetry data. References: pull request 15887, pull request 15888 Bug Fixes Chain and harden ECS enabled queries. (PowerDNS Security Advisory 2025-04: A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts). References: pull request 15848 5.3.0-alpha2 Released: 9th of July 2025 Improvements Allow forcing TCP from preoutquery() (elenril). References: pull request 15759 Add el-10 target, based on rockylinux:10 for now. References: pull request 15639 Clang-tidy: replace lock_guard with scoped_lock (Rosen Penev) References: pull request 15788 Only download pub suffix list if pubsuffix.cc is not available. References: pull request 15782 Fix Coverity issues and add release() to FDWrapper. References: pull request 15756, pull request 15766 Start to listen on ::1 by default, but don�t consider it an error if that fails. References: pull request 15758 Bug Fixes Don't let rust code and handler use thread pipes simultaneously. References: pull request 15752 Fix sysconfdir in debian packages built by meson. References: #15723, pull request 15746 5.3.0-alpha1 Released: 25th of June 2025 Improvements Add facility to generate trace data in OpenTelemetry format. References: pull request 15668 Implement stop command as alias for quit(-nicely). References: #15674, pull request 15686 Avoid implicit truncating cast of inception skew. References: pull request 15715 Two Coverity issues, the truncation is meant to be. References: pull request 15700 Introduce aliases for camelCase field names in config file. References: #15059, pull request 15692 Fix negativetrustanchor.server CH TXT query processing (disabled by default). References: #15660, pull request 15661 Build el-9 package with luajit on arm64. References: pull request 15626 Rec: build packages using meson. References: pull request 15592 15628 15636 Start building packages for trixie. References: pull request 15596 Use Rust 1.87.0 when building our packages. References: pull request 15584 Upgrade to protozero 1.8.0. References: pull request 15525 Add a Lua function to get the config dir and name. References: pull request 15435 Fix a difference between record-cache hit and miss in some ServFail results. References: pull request 15396 Rec: [meson] make nod a feature instead of a boolean References: pull request 15373 When CARGO_TARGET_DIR is set the generated C++ files end up in a different location. References: pull request 15369 Fix generation of recursor config if PDNS_RECURSOR_API_KEY is set. References: #15367, pull request 15368 Meson systemd cleanup. References: pull request 15309 Add libcap feature and sync build-and-test-all options with autotools variants. References: pull request 15293 Export ffi symbols so they become available to Lua. References: pull request 15292 15307 Fix libsnmp define. References: pull request 15272 More consistency in logging statements generated in web server code. References: pull request 15273 Make sure t_tcpClientCounts is always initialized. References: pull request 15261 Fix a few gcc warnings on trixie. References: pull request 15260 Tidy of structured logging related files. References: pull request 15217 Use meson to generate docs (html + pdf) References: pull request 15169 Reload proxy settings on rec_control reload-acls. References: #14096, pull request 15167 Store thread id in info object, makes a few methods less error prone. References: pull request 15216 Switch back to serde_yaml. References: #15202, pull request 15203 Add two missing includes. References: #15179, pull request 15192 Minor Coverity issues. References: pull request 15168 15157 Add meson install target and fix meson dist issues after new way of generating man pages was merged. References: pull request 15161 Fix cxx include dir. References: pull request 15154 Move to embedded web service written in Rust supporting multiple listen addresses and TLS. References: pull request 15114 Make quit-nicely wait on actual quit and start using it for stopping by systemd. References: pull request 14976 Check bounds of rcode stats counter index (safe right now). References: pull request 15139 Clang-tidy: use std::min/max (Rosen Penev). References: pull request 14954 Tidy credentials.??. References: pull request 15066 Rec: New Coverity Variable copied when it could be moved cases References: pull request 15050 15057 EDNSSubnetOpts refactoring References: #13704, pull request 15040 Compute size estimate for record cache allocated size. References: pull request 15038 Dedup records. References: #14120, pull request 14617 Store authority recs and signatures as shared pointers to const data. References: pull request 14985 15017 If the full CNAME chain leading to the answer is cached, indicate that. References: #14918, pull request 14973 Bug Fixes When using ZoneToCache, do not store non-auth data if the name is subject to recursive forwarding. References: #15651, pull request 15652 Force some files to be regenerated when table.py changes. References: pull request 15546 Strip quotes meson adds from SYSCONFDIR (and two other config values). References: pull request 15437 Delete temp file on failure to dump RPZ file. References: pull request 15033 @ text @$NetBSD: patch-configure,v 1.5 2025/10/17 13:39:21 jperkin Exp $ Fix check-portability. --- configure.orig 2025-10-17 13:33:48.814563179 +0000 +++ configure @@@@ -25972,11 +25972,11 @@@@ fi if test "x$enable_fortify_source" != "xno"; then : - if test "x$enable_fortify_source" == "xauto"; then : + if test "x$enable_fortify_source" = "xauto"; then : enable_fortify_source=3 fi - if test "x$enable_fortify_source" == "x3"; then : + if test "x$enable_fortify_source" = "x3"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C++ compiler handles -D_FORTIFY_SOURCE=3" >&5 $as_echo_n "checking whether C++ compiler handles -D_FORTIFY_SOURCE=3... " >&6; } @@@@ -26021,7 +26021,7 @@@@ fi fi - if test "x$enable_fortify_source" == "x2"; then : + if test "x$enable_fortify_source" = "x2"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C++ compiler handles -D_FORTIFY_SOURCE=2" >&5 $as_echo_n "checking whether C++ compiler handles -D_FORTIFY_SOURCE=2... " >&6; } @@@@ -26066,7 +26066,7 @@@@ fi fi - if test "x$enable_fortify_source" == "x1"; then : + if test "x$enable_fortify_source" = "x1"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C++ compiler handles -D_FORTIFY_SOURCE=1" >&5 $as_echo_n "checking whether C++ compiler handles -D_FORTIFY_SOURCE=1... " >&6; } @@@@ -26725,7 +26725,7 @@@@ fi if test "x$enable_lto" != "xno"; then : - if test "x$enable_lto" == "xthin"; then : + if test "x$enable_lto" = "xthin"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C++ compiler handles -flto=thin" >&5 $as_echo_n "checking whether C++ compiler handles -flto=thin... " >&6; } @@@@ -26771,7 +26771,7 @@@@ fi fi - if test "x$enable_lto" == "xauto"; then : + if test "x$enable_lto" = "xauto"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C++ compiler handles -flto=auto" >&5 $as_echo_n "checking whether C++ compiler handles -flto=auto... " >&6; } @@@@ -26817,7 +26817,7 @@@@ fi fi - if test "x$enable_lto" == "xyes"; then : + if test "x$enable_lto" = "xyes"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C++ compiler handles -flto" >&5 $as_echo_n "checking whether C++ compiler handles -flto... " >&6; } @ 1.5 log @powerdns-recursor: Fix check-portability. @ text @d1 1 a1 1 $NetBSD$ @ 1.4 log @powerdns-recursor: updated to 4.3.0 4.3.0 Improvements Only log qname parsing errors when ‘log-common-errors’ is set. Update copyright year. 4.2.1 Improvements Add CentOS 8 as builder target Update boost.m4 Add deviceName field to protobuf messages Test improvements Builder: add raspbian-buster target Bug Fixes Purge map of failed auths periodically by keeping a last changed timestamp. Prime NS records of root-servers.net parent (.net) Issue with “zz” abbreviation for IPv6 RPZ triggers Basic validation of $GENERATE parameters Fix inverse handler registration logic for SNMP. 4.2.0 Improvements Clear CMSG_SPACE(sizeof(data)) in cmsghdr to appease valgrind Bug Fixes Make sure we always compile with BOOST_CB_ENABLE_DEBUG set to 0 Limit compression pointers to 14 bits misc Fix the export of only outgoing queries or incoming responses @ text @d1 1 a1 1 $NetBSD: patch-configure,v 1.3 2018/01/02 12:23:55 fhajny Exp $ d3 1 a3 1 Regen after excluding -latomic test on NetBSD. d5 1 a5 1 --- configure.orig 2017-12-04 12:51:13.000000000 +0000 d7 25 a31 1 @@@@ -15944,9 +15944,14 @@@@ else d34 8 d43 6 a48 15 - case "$host" in - mips* | powerpc-* ) - { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -latomic" >&5 + case "$host_os" in + netbsd*) + : # no -latomic + ;; + *) + case "$host" in + mips* | powerpc-* ) + { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -latomic" >&5 $as_echo_n "checking whether the linker accepts -latomic... " >&6; } LDFLAGS="-latomic $LDFLAGS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@@@ -15968,7 +15973,9 @@@@ else a50 7 rm -f core conftest.err conftest.$ac_objext \ - conftest$ac_exeext conftest.$ac_ext + conftest$ac_exeext conftest.$ac_ext + ;; + esac ;; esac d52 14 @ 1.3 log @Update net/powerdns-recursor to 4.1.0. Lua support no longer optional. PowerDNS Recursor 4.1.0 =========================================================== - Improved DNSSEC support - Improved documentation - Improved RPZ support - Improved EDNS Client Subnet support - Support for Botan 2.x (and removal of support for Botan 1.10) - SNMP support - Lua engine has gained access to more parts of the recursor - CPU affinity can now be specified - TCP Fast Open support - New performance metrics Full changelog: https://doc.powerdns.com/recursor/changelog/4.1.html PowerDNS Recursor 4.0.7 =========================================================== - Insufficient validation of DNSSEC signatures (CVE-2017-15090) - Cross-Site Scripting in the web interface (CVE-2017-15092) - Configuration file injection in the API (CVE-2017-15093) - Memory leak in DNSSEC parsing (CVE-2017-15094) Bug fixes - Update rec_control manpage - Check in the detected OpenSSL/libcrypto for ECDSA - Make more specific Netmasks < to less specific ones - Fix validation at the exact RRSIG inception or expiration time - Lowercase all outgoing qnames when lowercase-outgoing is set - Fix libatomic detection on ppc64 - Edit configname definition to include the 'config-name' argument Improvements - Extract nested exception from Luawrapper - Use explicit yes for default-enabled settings - Throw an error when lua-conf-file can't be loaded - get-remote-ring's "other" report should only have two items. - PowerDNS sdig does not truncate trailing bits of EDNS Client Subnet mask - Only increase no-packet-error on the first read - Add support for Botan 2.x - Add more information to recursor cache dumps - Fix typo in two log messages - Add help text on autodetecting systemd support - Be more resilient with broken auths - Remove pdns.PASS and pdns.TRUNCATE - Improve dnsbulktest experience in travis for more robustness - Create socket-dir from init-script - b.root renumbering, effective 2017-10-24 - Don't retry security polling too often when it fails @ text @d1 1 a1 1 $NetBSD: patch-configure,v 1.6 2017/08/24 20:59:22 he Exp $ @ 1.2 log @Update net/powerdns-recursor to 4.0.6 Bug fixes - Use the incoming ECS for cache lookup if use-incoming-edns-subnet is set - when making a netmask from a comboaddress, we neglected to zero the port. This could lead to a proliferation of netmasks. - Don't take the initial ECS source for a scope one if EDNS is off - also set d_requestor without Lua: the ECS logic needs it - Fix IXFR skipping the additions part of the last sequence - Treat requestor's payload size lower than 512 as equal to 512 - make URI integers 16 bits, fixes ticket #5443 - unbreak quoting Improvements - EDNS Client Subnet becomes compatible with the packet cache, using the existing variable answer facility. - Remove just enough entries from the cache, not one more than asked - Move expired cache entries to the front so they are expunged - changed IPv6 addr of b.root-servers.net - e.root-servers.net has IPv6 now - hello decaf signers (ED25519 and ED448) - don't use the libdecaf ed25519 signer when libsodium is enabled (Kees Monshouwer) - do not hash the message in the ed25519 signer (Kees Monshouwer) - Disable use-incoming-edns-subnet by default @ text @d1 1 a1 1 $NetBSD: patch-configure,v 1.1 2017/07/03 13:02:38 joerg Exp $ d3 1 a3 1 Regenerate for PDNS_CHECK_OS fix. d5 1 a5 1 --- configure.orig 2017-07-04 15:43:19.000000000 +0000 d7 1 a7 11 @@@@ -15921,13 +15921,12 @@@@ fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___latomic" >&5 $as_echo "$ax_cv_check_ldflags___latomic" >&6; } if test "x$ax_cv_check_ldflags___latomic" = xyes; then : - : + LDFLAGS="-latomic $LDFLAGS" + as_fn_error $? "Unable to link against libatomic, cannot continue" "$LINENO" 5 else - as_fn_error $? "Unable to link against libatomic, cannot continue" "$LINENO" 5 - + : d10 23 a32 1 - LDFLAGS="-latomic $LDFLAGS" @ 1.1 log @Make Bart write "I will not ignore autoconf warnings" a thousand times. While here, don't include the configure arguments in the binary to avoid the wrkdir references. @ text @d1 1 a1 1 $NetBSD$ d5 1 a5 1 --- configure.orig 2017-07-02 23:26:02.024754888 +0000 d7 4 a10 39 @@@@ -15885,17 +15885,14 @@@@ fi case "$host" in mips* | powerpc* ) - as_CACHEVAR=`$as_echo "ax_cv_check_ldflags_cannot continue" "$LINENO" 5 - _-latomic" | $as_tr_sh` -{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -latomic" >&5 + { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -latomic" >&5 $as_echo_n "checking whether the linker accepts -latomic... " >&6; } -if eval \${$as_CACHEVAR+:} false; then : +if ${ax_cv_check_ldflags___latomic+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS - LDFLAGS="$LDFLAGS cannot continue" "$LINENO" 5 - -latomic" + LDFLAGS="$LDFLAGS -latomic" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@@@ -15908,24 +15905,23 @@@@ main () } _ACEOF if ac_fn_cxx_try_link "$LINENO"; then : - eval "$as_CACHEVAR=yes" + ax_cv_check_ldflags___latomic=yes else - eval "$as_CACHEVAR=no" + ax_cv_check_ldflags___latomic=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi -eval ac_res=\$$as_CACHEVAR - { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 -$as_echo "$ac_res" >&6; } -if eval test \"x\$"$as_CACHEVAR"\" = x"yes"; then : a11 3 +{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___latomic" >&5 +$as_echo "$ax_cv_check_ldflags___latomic" >&6; } +if test "x$ax_cv_check_ldflags___latomic" = xyes; then : d15 2 a16 1 - as_fn_error $? "Unable to link against libatomic @ 1.1.2.1 log @file patch-configure was added on branch pkgsrc-2017Q2 on 2017-07-10 19:42:10 +0000 @ text @d1 60 @ 1.1.2.2 log @Pullup ticket #5500 - requested by joerg net/powerdns-recursor: build fix Revisions pulled up: - net/powerdns-recursor/distinfo 1.20 - net/powerdns-recursor/patches/patch-configure 1.1 - net/powerdns-recursor/patches/patch-m4_pdns__check__os.m4 1.1 - net/powerdns-recursor/patches/patch-version.cc 1.1 --- Module Name: pkgsrc Committed By: joerg Date: Mon Jul 3 13:02:38 UTC 2017 Modified Files: pkgsrc/net/powerdns-recursor: distinfo Added Files: pkgsrc/net/powerdns-recursor/patches: patch-configure patch-m4_pdns__check__os.m4 patch-version.cc Log Message: Make Bart write "I will not ignore autoconf warnings" a thousand times. While here, don't include the configure arguments in the binary to avoid the wrkdir references. @ text @a0 60 $NetBSD: patch-configure,v 1.1 2017/07/03 13:02:38 joerg Exp $ Regenerate for PDNS_CHECK_OS fix. --- configure.orig 2017-07-02 23:26:02.024754888 +0000 +++ configure @@@@ -15885,17 +15885,14 @@@@ fi case "$host" in mips* | powerpc* ) - as_CACHEVAR=`$as_echo "ax_cv_check_ldflags_cannot continue" "$LINENO" 5 - _-latomic" | $as_tr_sh` -{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -latomic" >&5 + { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -latomic" >&5 $as_echo_n "checking whether the linker accepts -latomic... " >&6; } -if eval \${$as_CACHEVAR+:} false; then : +if ${ax_cv_check_ldflags___latomic+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS - LDFLAGS="$LDFLAGS cannot continue" "$LINENO" 5 - -latomic" + LDFLAGS="$LDFLAGS -latomic" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@@@ -15908,24 +15905,23 @@@@ main () } _ACEOF if ac_fn_cxx_try_link "$LINENO"; then : - eval "$as_CACHEVAR=yes" + ax_cv_check_ldflags___latomic=yes else - eval "$as_CACHEVAR=no" + ax_cv_check_ldflags___latomic=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi -eval ac_res=\$$as_CACHEVAR - { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 -$as_echo "$ac_res" >&6; } -if eval test \"x\$"$as_CACHEVAR"\" = x"yes"; then : - : +{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___latomic" >&5 +$as_echo "$ax_cv_check_ldflags___latomic" >&6; } +if test "x$ax_cv_check_ldflags___latomic" = xyes; then : + LDFLAGS="-latomic $LDFLAGS" + as_fn_error $? "Unable to link against libatomic, cannot continue" "$LINENO" 5 else - as_fn_error $? "Unable to link against libatomic + : fi - LDFLAGS="-latomic $LDFLAGS" ;; esac @