head 1.77; access; symbols pkgsrc-2023Q4:1.75.0.2 pkgsrc-2023Q4-base:1.75 pkgsrc-2023Q3:1.73.0.4 pkgsrc-2023Q3-base:1.73 pkgsrc-2023Q2:1.73.0.2 pkgsrc-2023Q2-base:1.73 pkgsrc-2023Q1:1.71.0.2 pkgsrc-2023Q1-base:1.71 pkgsrc-2022Q4:1.69.0.2 pkgsrc-2022Q4-base:1.69 pkgsrc-2022Q3:1.66.0.4 pkgsrc-2022Q3-base:1.66 pkgsrc-2022Q2:1.66.0.2 pkgsrc-2022Q2-base:1.66 pkgsrc-2022Q1:1.64.0.2 pkgsrc-2022Q1-base:1.64 pkgsrc-2021Q4:1.63.0.2 pkgsrc-2021Q4-base:1.63 pkgsrc-2021Q3:1.61.0.4 pkgsrc-2021Q3-base:1.61 pkgsrc-2021Q2:1.61.0.2 pkgsrc-2021Q2-base:1.61 pkgsrc-2021Q1:1.59.0.2 pkgsrc-2021Q1-base:1.59 pkgsrc-2020Q4:1.57.0.2 pkgsrc-2020Q4-base:1.57 pkgsrc-2020Q3:1.55.0.4 pkgsrc-2020Q3-base:1.55 pkgsrc-2020Q2:1.55.0.2 pkgsrc-2020Q2-base:1.55 pkgsrc-2020Q1:1.49.0.2 pkgsrc-2020Q1-base:1.49 pkgsrc-2019Q4:1.46.0.6 pkgsrc-2019Q4-base:1.46 pkgsrc-2019Q3:1.46.0.2 pkgsrc-2019Q3-base:1.46 pkgsrc-2019Q2:1.44.0.2 pkgsrc-2019Q2-base:1.44 pkgsrc-2019Q1:1.42.0.2 pkgsrc-2019Q1-base:1.42 pkgsrc-2018Q4:1.41.0.2 pkgsrc-2018Q4-base:1.41 pkgsrc-2018Q3:1.39.0.2 pkgsrc-2018Q3-base:1.39 pkgsrc-2018Q2:1.35.0.2 pkgsrc-2018Q2-base:1.35 pkgsrc-2018Q1:1.32.0.2 pkgsrc-2018Q1-base:1.32 pkgsrc-2017Q4:1.30.0.2 pkgsrc-2017Q4-base:1.30 pkgsrc-2017Q3:1.29.0.4 pkgsrc-2017Q3-base:1.29 pkgsrc-2017Q2:1.27.0.2 pkgsrc-2017Q2-base:1.27 pkgsrc-2017Q1:1.24.0.2 pkgsrc-2017Q1-base:1.24 pkgsrc-2016Q4:1.21.0.2 pkgsrc-2016Q4-base:1.21 pkgsrc-2016Q3:1.19.0.4 pkgsrc-2016Q3-base:1.19 pkgsrc-2016Q2:1.19.0.2 pkgsrc-2016Q2-base:1.19 pkgsrc-2016Q1:1.16.0.4 pkgsrc-2016Q1-base:1.16 pkgsrc-2015Q4:1.16.0.2 pkgsrc-2015Q4-base:1.16 pkgsrc-2015Q3:1.14.0.4 pkgsrc-2015Q3-base:1.14 pkgsrc-2015Q2:1.14.0.2 pkgsrc-2015Q2-base:1.14 pkgsrc-2015Q1:1.10.0.4 pkgsrc-2015Q1-base:1.10 pkgsrc-2014Q4:1.10.0.2 pkgsrc-2014Q4-base:1.10 pkgsrc-2014Q3:1.9.0.16 pkgsrc-2014Q3-base:1.9 pkgsrc-2014Q2:1.9.0.14 pkgsrc-2014Q2-base:1.9 pkgsrc-2014Q1:1.9.0.12 pkgsrc-2014Q1-base:1.9 pkgsrc-2013Q4:1.9.0.10 pkgsrc-2013Q4-base:1.9 pkgsrc-2013Q3:1.9.0.8 pkgsrc-2013Q3-base:1.9 pkgsrc-2013Q2:1.9.0.6 pkgsrc-2013Q2-base:1.9 pkgsrc-2013Q1:1.9.0.4 pkgsrc-2013Q1-base:1.9 pkgsrc-2012Q4:1.9.0.2 pkgsrc-2012Q4-base:1.9 pkgsrc-2012Q3:1.7.0.6 pkgsrc-2012Q3-base:1.7 pkgsrc-2012Q2:1.7.0.4 pkgsrc-2012Q2-base:1.7 pkgsrc-2012Q1:1.7.0.2 pkgsrc-2012Q1-base:1.7 pkgsrc-2011Q4:1.5.0.30 pkgsrc-2011Q4-base:1.5 pkgsrc-2011Q3:1.5.0.28 pkgsrc-2011Q3-base:1.5 pkgsrc-2011Q2:1.5.0.26 pkgsrc-2011Q2-base:1.5 pkgsrc-2011Q1:1.5.0.24 pkgsrc-2011Q1-base:1.5 pkgsrc-2010Q4:1.5.0.22 pkgsrc-2010Q4-base:1.5 pkgsrc-2010Q3:1.5.0.20 pkgsrc-2010Q3-base:1.5 pkgsrc-2010Q2:1.5.0.18 pkgsrc-2010Q2-base:1.5 pkgsrc-2010Q1:1.5.0.16 pkgsrc-2010Q1-base:1.5 pkgsrc-2009Q4:1.5.0.14 pkgsrc-2009Q4-base:1.5 pkgsrc-2009Q3:1.5.0.12 pkgsrc-2009Q3-base:1.5 pkgsrc-2009Q2:1.5.0.10 pkgsrc-2009Q2-base:1.5 pkgsrc-2009Q1:1.5.0.8 pkgsrc-2009Q1-base:1.5 pkgsrc-2008Q4:1.5.0.6 pkgsrc-2008Q4-base:1.5 pkgsrc-2008Q3:1.5.0.4 pkgsrc-2008Q3-base:1.5 cube-native-xorg:1.5.0.2 cube-native-xorg-base:1.5 pkgsrc-2008Q2:1.3.0.6 pkgsrc-2008Q2-base:1.3 cwrapper:1.3.0.4 pkgsrc-2008Q1:1.3.0.2 pkgsrc-2008Q1-base:1.3 pkgsrc-2007Q4:1.1.1.1.0.12 pkgsrc-2007Q4-base:1.1.1.1 pkgsrc-2007Q3:1.1.1.1.0.10 pkgsrc-2007Q3-base:1.1.1.1 pkgsrc-2007Q2:1.1.1.1.0.8 pkgsrc-2007Q2-base:1.1.1.1 pkgsrc-2007Q1:1.1.1.1.0.6 pkgsrc-2007Q1-base:1.1.1.1 pkgsrc-2006Q4:1.1.1.1.0.4 pkgsrc-2006Q4-base:1.1.1.1 pkgsrc-2006Q3:1.1.1.1.0.2 pkgsrc-2006Q3-base:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.77 date 2024.02.26.21.37.07; author nros; state Exp; branches; next 1.76; commitid 2VXmtblIPvvqpZZE; 1.76 date 2023.12.29.18.24.56; author adam; state Exp; branches; next 1.75; commitid CbzM4kTH4d8WeoSE; 1.75 date 2023.11.08.13.20.34; author wiz; state Exp; branches; next 1.74; commitid PsuHTklAIsF4bOLE; 1.74 date 2023.10.24.22.10.30; author wiz; state Exp; branches; next 1.73; commitid MTsrqKm6aGrQAVJE; 1.73 date 2023.04.23.14.26.30; author adam; state Exp; branches; next 1.72; commitid Laj8GRA8jxylXemE; 1.72 date 2023.04.19.08.11.11; author adam; state Exp; branches; next 1.71; commitid B8gCWhWtMX9vZGlE; 1.71 date 2023.01.22.16.28.36; author ryoon; state Exp; branches; next 1.70; commitid aiP40A5zgFwvyyaE; 1.70 date 2022.12.28.18.24.53; author otis; state Exp; branches; next 1.69; commitid tbPTpdVyn5Os0m7E; 1.69 date 2022.11.23.16.20.54; author adam; state Exp; branches; next 1.68; commitid ju2K3LUYlTJKqQ2E; 1.68 date 2022.10.26.10.31.51; author wiz; state Exp; branches; next 1.67; commitid PVFjlIYUKslkpdZD; 1.67 date 2022.09.29.13.49.50; author jperkin; state Exp; branches; next 1.66; commitid YVLRR8z5t0OAmLVD; 1.66 date 2022.04.18.19.11.53; author adam; state Exp; branches; next 1.65; commitid eC9Na3jrfOOUpIAD; 1.65 date 2022.03.31.23.30.16; author wiz; state Exp; branches; next 1.64; commitid UuMglaO90XsfrqyD; 1.64 date 2022.01.10.01.46.43; author ryoon; state Exp; branches; next 1.63; commitid Cj0KeHK24VPiN1oD; 1.63 date 2021.12.08.16.06.06; author adam; state Exp; branches; next 1.62; commitid 2PyWjHx5T8rqARjD; 1.62 date 2021.09.29.19.01.10; author adam; state Exp; branches; next 1.61; commitid WsBUbBM52TSePSaD; 1.61 date 2021.04.21.13.25.12; author adam; state Exp; branches; next 1.60; commitid RAyVO2K5RkoQ8aQC; 1.60 date 2021.04.21.11.42.29; author adam; state Exp; branches; next 1.59; commitid fph0Axs0eT3az9QC; 1.59 date 2021.02.08.13.31.58; author otis; state Exp; branches; next 1.58; commitid EiqgHA8UVoZsuUGC; 1.58 date 2021.01.01.08.24.55; author ryoon; state Exp; branches; next 1.57; commitid slfyvXkOfADi10CC; 1.57 date 2020.12.21.00.26.50; author otis; state Exp; branches; next 1.56; commitid cwmWswruo8woJxAC; 1.56 date 2020.11.05.09.08.56; author ryoon; state Exp; branches; next 1.55; commitid VqGaBtHnBBcd5GuC; 1.55 date 2020.06.07.18.55.12; author otis; state Exp; branches; next 1.54; commitid OJsWpp8mSJ5c4kbC; 1.54 date 2020.06.02.08.24.34; author adam; state Exp; branches; next 1.53; commitid nisovMpvvZm3RCaC; 1.53 date 2020.05.22.10.56.30; author adam; state Exp; branches; next 1.52; commitid m1Z0QPvTTTWz3e9C; 1.52 date 2020.05.13.04.27.55; author rillig; state Exp; branches; next 1.51; commitid CD2a8pcFQfpuc28C; 1.51 date 2020.05.06.14.04.57; author adam; state Exp; branches; next 1.50; commitid dLR3o37Fk2B5Cb7C; 1.50 date 2020.04.12.08.29.06; author adam; state Exp; branches; next 1.49; commitid 7jZFLCnc3RCww44C; 1.49 date 2020.03.17.19.04.49; author adam; state Exp; branches; next 1.48; commitid vfW5cr5w5GcoSM0C; 1.48 date 2020.01.18.21.50.23; author jperkin; state Exp; branches; next 1.47; commitid JW4hJgY8ZdoTFdTB; 1.47 date 2020.01.12.20.20.39; author ryoon; state Exp; branches; next 1.46; commitid 5tyaDUwPevcZnrSB; 1.46 date 2019.08.22.12.23.41; author ryoon; state Exp; branches; next 1.45; commitid UuiyQ10Dn9Rtl1AB; 1.45 date 2019.07.01.04.08.42; author ryoon; state Exp; branches; next 1.44; commitid qsMjwmrvOSh6hitB; 1.44 date 2019.04.25.18.42.41; author adam; state Exp; branches; next 1.43; commitid dUHQBF2JOHLHgLkB; 1.43 date 2019.04.03.00.33.01; author ryoon; state Exp; branches; next 1.42; commitid pkuNrSZ2MZiLWPhB; 1.42 date 2019.02.20.12.21.05; author adam; state Exp; branches; next 1.41; commitid hDlZISf6bnEsdvcB; 1.41 date 2018.12.13.19.52.17; author adam; state Exp; branches; next 1.40; commitid XjJhLcEnCzYFVF3B; 1.40 date 2018.12.09.18.52.41; author adam; state Exp; branches; next 1.39; commitid Pdg91emznUBdJ93B; 1.39 date 2018.08.16.19.01.15; author adam; state Exp; branches; next 1.38; commitid 4oFv5gtFeJzBtnOA; 1.38 date 2018.08.16.18.55.08; author adam; state Exp; branches; next 1.37; commitid myXuojHMA7ifrnOA; 1.37 date 2018.08.16.16.08.45; author adam; state Exp; branches; next 1.36; commitid LhtgufOzr6ULvmOA; 1.36 date 2018.07.20.03.34.24; author ryoon; state Exp; branches; next 1.35; commitid 09Go9qhjDl36dPKA; 1.35 date 2018.05.14.15.40.08; author fhajny; state Exp; branches; next 1.34; commitid bPEKdEUUpmkKnhCA; 1.34 date 2018.04.29.21.32.00; author adam; state Exp; branches; next 1.33; commitid QKwzJtFzAE0cOnAA; 1.33 date 2018.04.14.07.34.36; author adam; state Exp; branches; next 1.32; commitid OW5IgFIaJWdTEnyA; 1.32 date 2018.01.02.12.18.15; author fhajny; state Exp; branches; next 1.31; commitid DQ8C1d5ccbIAvilA; 1.31 date 2018.01.01.21.18.49; author adam; state Exp; branches; next 1.30; commitid VDVceOVT4khVwdlA; 1.30 date 2017.11.30.16.45.35; author adam; state Exp; branches; next 1.29; commitid 2LNaDKcCKaKZ25hA; 1.29 date 2017.09.18.09.53.31; author maya; state Exp; branches; next 1.28; commitid BMfpJecGogsW6F7A; 1.28 date 2017.08.24.20.03.36; author adam; state Exp; branches; next 1.27; commitid SAladHuASDqXhv4A; 1.27 date 2017.06.23.17.12.54; author fhajny; state Exp; branches; next 1.26; commitid 85l6ykAaw20ikwWz; 1.26 date 2017.04.30.01.21.57; author ryoon; state Exp; branches; next 1.25; commitid 1A40BlmMDYkiOuPz; 1.25 date 2017.04.22.21.03.51; author adam; state Exp; branches; next 1.24; commitid FZEMSoU8Sj6ZBzOz; 1.24 date 2017.03.29.11.46.03; author fhajny; state Exp; branches; next 1.23; commitid Pl5dT99ysMSNhrLz; 1.23 date 2017.03.09.13.32.54; author fhajny; state Exp; branches; next 1.22; commitid uqh2AEL1XgPVwSIz; 1.22 date 2017.01.01.16.06.33; author adam; state Exp; branches; next 1.21; commitid jkBZ9Kd0NEyexhAz; 1.21 date 2016.12.04.05.17.38; author ryoon; state Exp; branches; next 1.20; commitid xSaWu3mShoBjQCwz; 1.20 date 2016.10.07.18.26.07; author adam; state Exp; branches; next 1.19; commitid WWBLkSP9Isuv4fpz; 1.19 date 2016.06.16.09.24.42; author fhajny; state Exp; branches; next 1.18; commitid qvAIwjkRdldZHFaz; 1.18 date 2016.06.03.11.45.34; author fhajny; state Exp; branches; next 1.17; commitid vZ4IHWQHrDFeU09z; 1.17 date 2016.04.11.19.02.01; author ryoon; state Exp; branches; next 1.16; commitid mgqGURJPmT1r1f2z; 1.16 date 2015.10.22.19.01.24; author fhajny; state Exp; branches; next 1.15; commitid GxxBGOKPPfHky8Gy; 1.15 date 2015.10.10.01.58.17; author ryoon; state Exp; branches; next 1.14; commitid 78BsYZiClqZSgvEy; 1.14 date 2015.06.12.10.50.58; author fhajny; state Exp; branches; next 1.13; commitid iQZmmkqIC5sM48py; 1.13 date 2015.06.10.16.24.44; author fhajny; state Exp; branches; next 1.12; commitid o0HZxnomfIKmZToy; 1.12 date 2015.04.17.15.53.14; author adam; state Exp; branches; next 1.11; commitid kz5n0nxJowLkyXhy; 1.11 date 2015.04.06.08.17.35; author adam; state Exp; branches; next 1.10; commitid dUs0ktQdJn8Wnvgy; 1.10 date 2014.12.10.14.50.08; author fhajny; state Exp; branches; next 1.9; commitid LMaKFcuCnfUajv1y; 1.9 date 2012.10.23.17.18.59; author asau; state Exp; branches; next 1.8; 1.8 date 2012.10.02.12.20.47; author jperkin; state Exp; branches; next 1.7; 1.7 date 2012.01.25.10.21.12; author ghen; state Exp; branches; next 1.6; 1.6 date 2012.01.23.15.11.54; author ghen; state Exp; branches; next 1.5; 1.5 date 2008.08.11.14.38.33; author ghen; state Exp; branches 1.5.30.1; next 1.4; 1.4 date 2008.08.11.13.59.48; author ghen; state Exp; branches; next 1.3; 1.3 date 2008.01.30.22.36.14; author heinz; state Exp; branches 1.3.6.1; next 1.2; 1.2 date 2008.01.04.20.05.12; author jmmv; state Exp; branches; next 1.1; 1.1 date 2006.08.13.09.34.21; author ghen; state Exp; branches 1.1.1.1; next ; 1.5.30.1 date 2012.01.26.23.39.10; author tron; state Exp; branches; next ; 1.3.6.1 date 2008.08.12.11.46.49; author rtr; state Exp; branches; next ; 1.1.1.1 date 2006.08.13.09.34.21; author ghen; state Exp; branches; next ; desc @@ 1.77 log @revbump due to security/botan2 update @ text @# $NetBSD: Makefile,v 1.76 2023/12/29 18:24:56 adam Exp $ PKGREVISION= 7 .include "Makefile.common" PKGNAME= ${DISTNAME:S/pdns/powerdns/} COMMENT= Modern, advanced and high performance nameserver .include "options.mk" CONFIGURE_ARGS+= --with-dynmodules=no CONFIGURE_ARGS+= --with-modules="${PDNS_MODULES}" RCD_SCRIPTS= pdns SMF_NAME= pdns EGDIR= ${PREFIX}/share/examples/pdns CONF_FILES+= ${EGDIR}/pdns.conf-dist ${PKG_SYSCONFDIR}/pdns.conf LDFLAGS.SunOS+= -lsocket -lnsl INSTALL_MAKE_FLAGS+= sysconfdir=${EGDIR} .include "../../mk/bsd.pkg.mk" @ 1.76 log @revbump for boost-libs @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.75 2023/11/08 13:20:34 wiz Exp $ d3 1 a3 1 PKGREVISION= 6 @ 1.75 log @*: recursive bump for icu 74.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.74 2023/10/24 22:10:30 wiz Exp $ d3 1 a3 1 PKGREVISION= 5 @ 1.74 log @*: bump for openssl 3 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.73 2023/04/23 14:26:30 adam Exp $ d3 1 a3 1 PKGREVISION= 4 @ 1.73 log @revbump for boost @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.72 2023/04/19 08:11:11 adam Exp $ d3 1 a3 1 PKGREVISION= 3 @ 1.72 log @revbump after textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.71 2023/01/22 16:28:36 ryoon Exp $ d3 1 a3 1 PKGREVISION= 2 @ 1.71 log @*: Recursive revbump from Boost 1.81.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.70 2022/12/28 18:24:53 otis Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.70 log @powerdns: update to 4.6.4 Bug Fixes: - pdnsutil edit-zone, detect capitalization changes in LUA, TXT and SPF records - initialize zone cache after dropping privileges; Detect invalid bytes in makeBytesFromHex() - Log NULL for nullptr-bound properties instead of dereferencing - LUA records: we only need one IsUpOracle checker thread - axfr-retriever: abort on chunk with TC set - use getInnerRemote() for the remotes ring Full changelog: https://docs.powerdns.com/authoritative/changelog/4.6.html#change-4.6.4 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.69 2022/11/23 16:20:54 adam Exp $ d3 1 @ 1.69 log @massive revision bump after textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.68 2022/10/26 10:31:51 wiz Exp $ a2 1 PKGREVISION= 2 @ 1.68 log @*: bump PKGREVISION for libunistring shlib major bump @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.67 2022/09/29 13:49:50 jperkin Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.67 log @powerdns: Update to 4.6.3. The changelogs are very long and unwieldly, even trying to use the raw versions as they're written in RST, so please see the following URLs for the full list of changes (which are many) since 4.4.1: https://doc.powerdns.com/authoritative/changelog/4.6.html https://doc.powerdns.com/authoritative/changelog/4.5.html https://doc.powerdns.com/authoritative/changelog/4.4.html While here clean up various pkglint warnings. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.66 2022/04/18 19:11:53 adam Exp $ d3 1 @ 1.66 log @revbump for textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.65 2022/03/31 23:30:16 wiz Exp $ a2 1 PKGREVISION= 7 @ 1.65 log @*: recursive bump for botan-devel shlib bump @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.64 2022/01/10 01:46:43 ryoon Exp $ d3 1 a3 1 PKGREVISION= 6 @ 1.64 log @*: Recursive revbump from boost 1.78.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.63 2021/12/08 16:06:06 adam Exp $ d3 1 a3 1 PKGREVISION= 5 @ 1.63 log @revbump for icu and libffi @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.62 2021/09/29 19:01:10 adam Exp $ d3 1 a3 1 PKGREVISION= 4 @ 1.62 log @revbump for boost-libs @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.61 2021/04/21 13:25:12 adam Exp $ d3 1 a3 1 PKGREVISION= 3 @ 1.61 log @revbump for boost-libs @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.60 2021/04/21 11:42:29 adam Exp $ d3 1 a3 1 PKGREVISION= 2 @ 1.60 log @revbump for textproc/icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.59 2021/02/08 13:31:58 otis Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.59 log @net/powerdns: Update to 4.4.1 * Released: 8th of February 2021 * Improvements: - debian packaging update - dockerfiles: do not claim equivs-dummy is built from the pdns source package - Fix missing #include for gcc-11 - lmdb: Do a mdb_readers_check to clean up stale readers on database load * Bug Fixes: - fix TCP answer counters - run deleteDomain() inside a transaction - lmdb: do not reuse backend that has seen corrupted data - lmdb: serialise LMDBBackend construction to ensure only a single schema upgrade is attempted - backport some asan/ubsan fixes - pdnsutil edit-zone: do not exit on ZoneParser exception Full changelog: https://doc.powerdns.com/authoritative/changelog/4.4.html#change-4.4.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.58 2021/01/01 08:24:55 ryoon Exp $ d3 1 @ 1.58 log @*: Recursive revbump from boost-1.75.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.57 2020/12/21 00:26:50 otis Exp $ a2 1 PKGREVISION= 1 @ 1.57 log @net/powerdns: Update to 4.4.0 Security fix: * This release drops GSS/TSIG support, please see PowerDNS Security Advisory 2020-06 https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html Changelog: * New features: - the LMDB backend now supports long record content, making it production ready for everybody - the SVCB and HTTPS record types are supported, with limited additional processing transaction handling in the 2136 handler and the HTTP API was again improved a lot, avoiding various spurious issues users may have noticed if they do a lot of changes a new setting (consistent-backends) offers a roughly 30% speedup, subject to conditions - we finally emit Prometheus metrics! * Improvements: - don’t log trusted-notification-proxy notify at error level - Stop using incbin and use od & sed to generate constant string data. * Bug Fixes: - clear the LMDB set state when performing a new lookup or list to prevent corruption cases - SVCB: Correctly parse and print unknown params - fix direct-dnskey in AXFR-out @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.56 2020/11/05 09:08:56 ryoon Exp $ d3 1 @ 1.56 log @*: Recursive revbump from textproc/icu-68.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.55 2020/06/07 18:55:12 otis Exp $ a2 1 PKGREVISION= 1 @ 1.55 log @net/powerdns: Update to 4.2.2 Changes since 4.2.1: * Released: - 9th of April 2020 * New Features: - api: add includerings option to statistics endpoint * Improvements: - cache: strictly enforce maximum size, and improve cleanup routine * Bug Fixes: - fix records ending up in wrong packet section - avoid IXFR-in corruption when deltas come in close together. Please see the IXFR-in corruption upgrade notes - fix out-of-bound access for zero length "serialized" string when using lmdbbackend. - bind backend: pthread_mutex_t should be inited and destroyed and not be copied * Reference: - https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.2 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.54 2020/06/02 08:24:34 adam Exp $ d3 1 @ 1.54 log @Revbump for icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.53 2020/05/22 10:56:30 adam Exp $ a2 1 PKGREVISION= 4 @ 1.53 log @revbump after updating security/nettle @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.52 2020/05/13 04:27:55 rillig Exp $ d3 1 a3 1 PKGREVISION= 3 @ 1.52 log @net/powerdns: remove no-op SUBST block @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.51 2020/05/06 14:04:57 adam Exp $ d3 1 a3 1 PKGREVISION= 2 @ 1.51 log @revbump after boost update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.50 2020/04/12 08:29:06 adam Exp $ a20 5 SUBST_CLASSES+= conf SUBST_STAGE.conf= pre-install SUBST_FILES.conf= pdns/pdns.conf-dist SUBST_VARS.conf+= PREFIX PKG_SYSCONFDIR @ 1.50 log @Recursive revision bump after textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.49 2020/03/17 19:04:49 adam Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.49 log @powerdns: updated to 4.2.1 4.2.1 This release fixes several bugs and makes a few features more robust or intuitive. It also contains a few performance improvements for API users. New Features Add SLAVE-RENOTIFY zone metadata support Add configurable timeout for inbound AXFR Add CentOS 8 as builder target gmysql backend, add an option to send the SSL capability flag Improvements API: reduce number of database connections Register a few known RR types and remove an unknown one bindbackend: use metadata for also-notifies as well pdnsutil increase-serial: under SOA-EDIT=INCEPTION-EPOCH, bump as if it is EPOCH API: optionally do not return dnssec info in domain list Basic validation of $GENERATE parameters Bug Fixes LUA view: do not crash on empty IP list API: Accept headers without spaces Avoid database state-related SERVFAILs after a LUA error Just before 4.2.0, some SQL-related fixes broke edit-zone and other features with the LMDB backend. This has been fixed now. rfc2136, pdnsutil: somewhat improve duplicate record handling 4.2.0 Compared to the last release candidate, one more bug has been fixed. The LMDB backend is incomplete in this version. Slaving zones works, loading zones with pdnsutil works, but more fine grained edits (using edit-zone, or the REST API) fail. We hope to fix this soon in a 4.2.x release. For an overview of features new since 4.1.x, please see the 4.2.0 announcement blog post. Bug Fixes bind getAllDomains: ignore per-zone exceptions @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.48 2020/01/18 21:50:23 jperkin Exp $ d3 1 @ 1.48 log @*: Recursive revision bump for openssl 1.1.1. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.47 2020/01/12 20:20:39 ryoon Exp $ a2 1 PKGREVISION= 4 @ 1.47 log @*: Recursive revbump from devel/boost-libs @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.46 2019/08/22 12:23:41 ryoon Exp $ d3 1 a3 1 PKGREVISION= 3 @ 1.46 log @Recursive revbump from boost-1.71.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.45 2019/07/01 04:08:42 ryoon Exp $ d3 1 a3 1 PKGREVISION= 2 @ 1.45 log @Recursive revbump from boost-1.70.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.44 2019/04/25 18:42:41 adam Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.44 log @powerdns: updated to 4.1.8 4.1.8 Bug Fixes Fix rectify for ENT records in narrow zones. Prevent leak of file descriptor if running out of ports for incoming AXFR. EL6: fix CXXFLAGS to build with compiler optimizations. Fix API search failed with “Commands out of sync; you can’t run this command now”. Fix invalid SOA record in MySQL which prevented the authoritative server from starting. Plug mysql_thread_init memory leak. Correctly interpret an empty AXFR response to an IXFR query. Fix replying from ANY address for non-standard port. Do not compress the root. Fix dot stripping in setcontent(). 4.1.7 Bug Fixes Insufficient validation in the HTTP remote backend (CVE-2019-3871, PowerDNS Security Advisory 2019-03) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.43 2019/04/03 00:33:01 ryoon Exp $ d3 1 @ 1.43 log @Recursive revbump from textproc/icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.42 2019/02/20 12:21:05 adam Exp $ a2 1 PKGREVISION= 1 @ 1.42 log @powerdns: updated to 4.1.6 4.1.6: Bug Fixes Prevent more than one CNAME/SOA record in the same RRset @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.41 2018/12/13 19:52:17 adam Exp $ d3 1 @ 1.41 log @revbump for boost 1.69.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.40 2018/12/09 18:52:41 adam Exp $ a2 1 PKGREVISION= 2 d23 1 a23 2 SUBST_SED.conf= -e 's,@@PREFIX@@,${PREFIX},' SUBST_SED.conf+= -e 's,@@PKG_SYSCONFDIR@@,${PKG_SYSCONFDIR},' @ 1.40 log @revbump after updating textproc/icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.39 2018/08/16 19:01:15 adam Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.39 log @powerdns: reset PKGREVISION (had been updated after the boost update) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.38 2018/08/16 18:55:08 adam Exp $ d3 1 @ 1.38 log @revbump after boost-libs update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.37 2018/08/16 16:08:45 adam Exp $ a2 1 PKGREVISION= 1 @ 1.37 log @powerdns: updated to 4.1.3 4.1.3: Improvements : pdnsutil: use new domain in b2bmigrate : Update copyright years to 2018 : Lower ‘packet too short’ loglevel Bug Fixes : Restrict creation of OPT and TSIG RRsets : Fix handling of user-defined axfr filters return values : Prevent the GeoIP backend from copying NetMaskTrees around, fixes slow-downs in certain configurations : Ensure alias answers over TCP have correct name @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.36 2018/07/20 03:34:24 ryoon Exp $ d3 1 @ 1.36 log @Recursive revbump from textproc/icu-62.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.35 2018/05/14 15:40:08 fhajny Exp $ a2 1 PKGREVISION= 1 d5 2 a6 2 PKGNAME= ${DISTNAME:S/pdns/powerdns/} COMMENT= Modern, advanced and high performance nameserver a29 2 #CHECK_WRKREF_SKIP+= sbin/pdns_server @ 1.35 log @net/powerdns*: Update to 4.1.2. Improvements - API: increase serial after dnssec related updates - Dnsreplay: bail out on a too small outgoing buffer - lower ‘packet too short’ loglevel - Make check-zone error on rows that have content but shouldn’t - avoid an isane amount of new backend connections during an axfr - Report unparseable data in stoul invalid_argument exception - recheck serial when axfr is done - add tcp support for alias Bug Fixes - allocate new statements after reconnecting to postgresql - bindbackend: only compare ips in ismaster() (Kees Monshouwer) - Rather than crash, sheepishly report no file/linenum - Document undocumented config vars - prevent cname + other data with dnsupdate @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.34 2018/04/29 21:32:00 adam Exp $ d3 1 @ 1.34 log @revbump for boost-libs update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.33 2018/04/14 07:34:36 adam Exp $ a2 1 PKGREVISION= 2 @ 1.33 log @revbump after icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.32 2018/01/02 12:18:15 fhajny Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.32 log @Update net/powerdns* to 4.1.0. PowerDNS Authoritative Server 4.1.0 =========================================================== - Improved performance: 400% speedup in some scenarios - Crypto API: DNSSEC fully configurable via RESTful API - Improved documentation - Database related improvements - Enhanced tooling - Support for TCP Fast Open - Support for non-local bind - Support for Botan 2.x (and removal of support for Botan 1.10) - Our packages now ship with PKCS #11 support. - Recursor passthrough removal Full changelog: https://doc.powerdns.com/authoritative/changelog/4.1.html PowerDNS Authoritative Server 4.0.5 =========================================================== Fixes - Fix for missing check on API operations (CVE-2017-15091) - Bindbackend: do not corrupt data supplied by other backends in getAllDomains - API: prevent sending nameservers list and zone-level NS in rrsets - gpgsql: make statement names actually unique - Fix remotebackend params - Fix godbc query logging - For create-slave-zone, actually add all slaves, and not only first n times - Fix a regression in axfr-rectify + test - When making a netmask from a comboaddress, we neglected to zero the port - Fix libatomic detection on ppc64 - Catch DNSName exception in the Zoneparser - Publish inactive KSK/CSK as CDNSKEY/CDS - Handle AFSDB record separately due to record structure. - Treat requestor's payload size lower than 512 as equal to 512 - Correctly purge entries from the caches after a transfer - Handle a signing pipe worker dying with work still pending - Ignore SOA-EDIT for PRESIGNED zones. - Check return value for all getTSIGKey calls. Improvements - Fix ldap-strict autoptr feature, including a test - mydnsbackend: Add getAllDomains - Stubresolver: Use only recursor setting if given - LuaWrapper: Allow embedded NULs in strings received from Lua - sdig: Clarify that the ednssubnet option takes "subnet/mask" - Tests: Ensure all required tools are available - PowerDNS sdig does not truncate trailing bits of EDNS Client Subnet mask - LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace - Add support for Botan 2.x - Ship ldapbackend schema files in tarball - Collection of schema changes - Fix typo in two log messages - Add help text on autodetecting systemd support - Use a unique pointer for bind backend's d_of - Fix some of the issues found by @@jpmens @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2018/01/01 21:18:49 adam Exp $ d3 1 @ 1.31 log @Revbump after boost update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.30 2017/11/30 16:45:35 adam Exp $ a2 1 PKGREVISION= 4 d30 1 a30 1 CHECK_WRKREF_SKIP+= sbin/pdns_server @ 1.30 log @Revbump after textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2017/09/18 09:53:31 maya Exp $ d3 1 a3 1 PKGREVISION= 3 @ 1.29 log @revbump for requiring ICU 59.x @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2017/08/24 20:03:36 adam Exp $ d3 1 a3 1 PKGREVISION= 2 @ 1.28 log @Revbump for boost update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2017/06/23 17:12:54 fhajny Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.27 log @Update net/powerdns* to 4.0.4. This release features a fix for the ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. Also on the Elliptic Curve front, support was added for ED448 (DNSSEC algorithm 16) by using libdecaf. Bug fixes - Do not hash the message in the ed25519 signer - Make URI integers 16 bits, fixes #5443 - configure.ac: Corrects syntax error in test statement on existance of libcrypto_ecdsa - configure.ac: Fix quoting issue fixes #5401 - configure.ac: Check in the detected OpenSSL/libcrypto for ECDSA - configure.ac: Check if we can link against libatomic if needed - Fix typo in ldapbackend.cc from issue #5091 - Sort NSEC record case insensitive - Make sure NSEC ordernames are always lower case - API: correctly take TTL from first record even if we are at the last comment - Fix AtomicCounter unit tests on 32-bit - Fix negative port detection for IPv6 addresses on 32-bit - Remove support for 'right' timezones, as this code turned out to be broken - Lowercase the TSIG algorithm name in hash computation - Handle exceptions raised by closesocket() - Don't leak on signing errors during outgoing AXFR; signpipe stumbles over interrupted rrsets; fix memory leak in gmysql backend - TinyCDB backend: Don't leak a CDB object in case of bogus data Improvements - ODBC backend: Allow query logging - Add ED25519 (algo 15) and ED448 (algo 16) support with libdecaf signer - YaHTTP: Sync with upstream changes - Send a notification to all slave servers after every dnsupdate - Add option to set a global lua-axfr-script value - dnsreplay: Add --source-ip and --source-port options - calidns: Use the correct socket family (IPv4 / IPv6) - Add an option to allow AXFR of zones with a different (higher/lower) serial - API: Make trailing dot handling consistent with pdnsutil - SuffixMatchNode: Fix insertion issue for an existing node - Do not resolve the NS-records for NOTIFY targets if the "only-notify" whitelist is empty, as a target will never match an empty whitelist. - Improve the AXFR DNSSEC freshness check; Ignore NSEC3PARAM metadata in an unsigned zone - Create additional reuseport sockets before dropping privileges; remove transaction in pgpsql backend @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2017/04/30 01:21:57 ryoon Exp $ d3 1 @ 1.26 log @Recursive revbump from boost update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2017/04/22 21:03:51 adam Exp $ a5 1 PKGREVISION= 3 @ 1.25 log @Revbump after icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2017/03/29 11:46:03 fhajny Exp $ d6 1 a6 1 PKGREVISION= 2 @ 1.24 log @Fix SunOS segfaults. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2017/03/09 13:32:54 fhajny Exp $ d6 1 a6 1 PKGREVISION= 1 @ 1.23 log @Update net/powerdns to 4.0.3. pkgsrc changes: - Remove options for cryptopp and geoip (the latter to go into a separate package). - Clean up a lot of patches that do not seem to be needed anymore. PowerDNS Authoritative Server 4.0.3 =================================== - Revert "In 'Bind2Backend::lookup()', use the 'zoneId' when we have it" PowerDNS Authoritative Server 4.0.2 Security issues fixed: - 2016-02: Crafted queries can cause abnormal CPU usage - 2016-03: Denial of service via the web server - 2016-04: Insufficient validation of TSIG signatures - 2016-05: Crafted zone record can cause a denial of service Other highlights: - Don't parse spurious RRs in queries when we don't need them (Security Advisory 2016-02) - Don't exit if the webserver can't accept a connection (Security Advisory 2016-03) - Check TSIG signature on IXFR (Security Advisory 2016-04) - Correctly check unknown record content size (Security Advisory 2016-05) - ODBC backend: actually prepare statements - Improve root-zone performance - Plug memory leak in postgresql backend (Christian Hofstaedtler) - calidns: Don't crash if we don't have enough 'unknown' queries remaining - Improve PacketCache cleaning (Kees Monshouwer) - Bind backend: update status message on reload, keep the existing zone on failure - Fix TSIG for single thread distributor (Kees Monshouwer) - Change default for any-to-tcp to yes (Kees Monshouwer) - Don't look up the packet cache for TSIG-enabled queries - Fix build with OpenSSL 1.1.0 final (Christian Hofstaedtler) - pdnsutil: create-slave-zone accept multiple masters (Hannu Ylitalo) PowerDNS Authoritative Server 4.0.1 =================================== Bug fixes - Wait for the connection to the carbon server to be established - Don't try to deallocate empty PG statements - Send the correct response when queried for an NSEC directly (Kees Monshouwer) - Don't include bind files if length <= 2 or > sizeof(filename) - Catch runtime_error when parsing a broken MNAME Improvements - Make DNSPacket return a ComboAddredd for local and remote (Aki Tuomi) - OpenSSL 1.1.0 support (Christian Hofstaedtler) - Fix typos in a logmessage and exception (Christian Hofsteadtler) - pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - dnsreplay: Only add Client Subnet stamp when asked - Use toLogString() for ringAccount (Kees Monshouwer) Additions - Add limits to the size of received {A,I}XFR - Add used filedescriptor statistic (Kees Monshouwer) PowerDNS Authoritative Server 4.0.0 =================================== - Moved to C++ 2011, a cleaner more powerful version of C++ that has allowed us to improve the quality of implementation in many places. - Implemented dedicated infrastructure for dealing with DNS names that is fully "DNS Native" and needs less escaping and unescaping. - Due to this, the PowerDNS Authoritative Server can now serve DNSSEC-enabled root-zones. - All backends derived from the Generic SQL backend use prepared statements. - Both the server and pdns_control do the right thing when chroot'ed. - Caches are now fully canonically ordered, which means entries can be wiped on suffix in all places - A revived and supported ODBC backend (godbc). - A revived and supported LDAP backend (ldap). - Support for CDS/CDNSKEY and RFC 7344 key-rollovers. - Support for the ALIAS record. - The webserver and API are no longer experimental. - The API-path has moved to /api/v1 - DNSUpdate is no longer experimental. - ECDSA (algorithm 13 and 14) supported without in-tree cryptographic libraries (provided by OpenSSL). - Experimental support for ed25519 DNSSEC signatures (when compiled with libsodium support). - Many new pdnsutil commands. - GeoIP backend has gained many features, and can now e.g. run based on explicit netmasks not present in the GeoIP databases - Removed support for LMDB. - Removed the Geo backened (use the improved GeoIP instead). - pdnssec has been renamed to pdnsutil. - Support for the PolarSSL/MbedTLS, Crypto++ and Botan cryptographic libraries have been dropped in favor of the (faster) OpenSSL libcrypto (except for GOST, which is still provided by Botan). - ECDSA P256 SHA256 (algorithm 13) is now the default algorithm when securing zones. - The PowerDNS Authoritative Server now listens by default on all IPv6 addresses. - Several superfluous queries have been dropped from the Generic SQL backends. - The INCEPTION, INCEPTION-WEEK and EPOCH SOA-EDIT metadata values are marked as deprecated and will be removed in 4.1.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2017/01/01 16:06:33 adam Exp $ d6 1 @ 1.22 log @Revbump after boost update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2016/12/04 05:17:38 ryoon Exp $ a5 1 PKGREVISION= 4 d10 2 a11 2 CONFIGURE_ARGS+= --with-modules="geo" CONFIGURE_ARGS+= --with-dynmodules="${PDNS_MODULES}" a16 1 MAKE_ENV+= EGDIR=${EGDIR} d28 4 @ 1.21 log @Recursive revbump from textproc/icu 58.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2016/10/07 18:26:07 adam Exp $ d6 1 a6 1 PKGREVISION= 3 @ 1.20 log @Revbump post boost update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2016/06/16 09:24:42 fhajny Exp $ d6 1 a6 1 PKGREVISION= 2 @ 1.19 log @Switch to security/mbedtls1/buildlink3.mk. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2016/06/03 11:45:34 fhajny Exp $ d6 1 a6 1 PKGREVISION= 1 @ 1.18 log @Update net/powerdns (and modules) to 3.4.9. PowerDNS Authoritative Server 3.4.9 =================================== This is a minor bugfix and performance release. Two contributions by Kees Monshouwer make 3.4.9 fully compatible with the new single key ECDSA default that is coming in version 4.0.0. Changes since 3.4.8: - use OpenSSL for ECDSA signing where available (Kees Monshouwer) - allow common signing key (Kees Monshouwer) - Add a disable-syslog setting - fix SOA caching with multiple backends (Kees Monshouwer) - whitespace-related zone parsing fixes ticket #3568 - bindbackend: fix, set domain in list() (Kees Monshouwer) PowerDNS Authoritative Server 3.4.8 =================================== This is a small bugfix release. Additionally, the deb/RPM packages on downloads.powerdns.com (those with -static in the name) for 3.4.8 have been built against Botan 1.10.11 instead of Botan 1.10.3 like previous packages. Please see the Botan Security page for more information on the fixes in Botan 1.10.11. As a PowerDNS user, these issues only affect you if you ran our -static packages and allowed your users to upload private keys to your configuration. Changes since 3.4.7: - Use AC_SEARCH_LIBS (Ruben Kerkhof) - Check for inet_aton in libresolv (Ruben Kerkhof) - Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) - pdnssec: don't check disabled records (Pieter Lexis) - pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) - traling dot in DNAME content (Kees Monshouwer) - Fix luabackend compilation on FreeBSD i386 (RvdE) - silence g++ 6.0 warnings and error (Kees Monshouwer) - add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer) PowerDNS Authoritative Server 3.4.7 =================================== This is a security release fixing Security Advisory 2015-03 Bug fixes: - Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) - Don't reply to truncated queries (Christian Hofstaedtler) - don't log out-of-zone ents during AXFR in (Kees Monshouwer) - Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. - Handle NULL and boolean properly in gPGSql (Aki Tuomi) - Improve negative caching (Kees Monshouwer) - Do not divide timeout twice (Aki Tuomi) - Correctly sort records with a priority. Improvements: - Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) - Use token names to identify PKCS#11 keys (Aki Tuomi) - Fix typo in an error message (Arjen Zonneveld) - limit NSEC3 iterations in bindbackend (Kees Monshouwer) - Initialize minbody (Aki Tuomi) New features: - OPENPGPKEY record-type (James Cloos and Kees Monshouwer) - add global soa-edit settings (Kees Monshouwer) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2016/04/11 19:02:01 ryoon Exp $ d6 1 @ 1.17 log @Recursive revbump from textproc/icu 57.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2015/10/22 19:01:24 fhajny Exp $ a2 1 PKGREVISION= 1 @ 1.16 log @Update powerdns to 3.4.6. This is a security release fixing CVE-2015-5230. Bug fixes: - Avoid superfluous backend recycling - Removal of dnsdist from the authoritative server distribution - Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: - Update YaHTTP to v0.1.7 - Make trailing/leading spaces stand out in pdnssec check_zone - GCC 5.2 support and sync boost.m4 macro with upstream - Log answer packets only if log-dns-details is enabled @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2015/10/10 01:58:17 ryoon Exp $ d3 1 @ 1.15 log @Recursive revbump from textproc/icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2015/06/12 10:50:58 fhajny Exp $ a5 1 PKGREVISION= 2 @ 1.14 log @Change powerdns dependency from polarssl to mbedtls. Streamline bl3 setup while at it. Bump PKGREVISION (and of the module packages). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2015/06/10 16:24:44 fhajny Exp $ d6 1 a6 1 PKGREVISION= 1 @ 1.13 log @Update net/powerdns to 3.4.5. PowerDNS Authoritative Server 3.4.5 Bug fixes: - Be careful reading empty lines in our config parser and prevent integer overflow. - prevent crash after --list-modules (Ruben Kerkhof) - Limit the maximum length of a qname Improvements: - Support /etc/default for our debian/ubuntu packages (Aki Tuomi) - Detect GCC 5.1 for boost (Ruben Kerkhof) - Various PKCS#11 fixes and improvements (Aki Tuomi) - Fix Coverity issues (Aki Tuomi) - Fix building on OpenBSD (Florian Obser and Ruben Kerkhof) - Look for mbedtls before polarssl (Ruben Kerkhof) - Let pkg-config determine botan dependency libs (Ruben Kerkhof) - Kill some further mallocs and add note to remind us not to add them back - Move remotebackend-unix test socket to testsdir (Aki Tuomi) - Defer launch of coprocess until first question (Aki Tuomi) - pdnssec: check for glue and delegations in parent zones (Kees Monshouwer) PowerDNS Authoritative Server 3.4.4 Bug fixes: - Fix rectify-(all)-zones for mixed case domain names - Fix CVE-2015-1868 - Blocking IO in busy-wait for remote backend (Wieger Opmeer) - Fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - pdnssec: warn for insecure wildcards in opt-out zones - TKEY record type (Aki Tuomi) - Many PKCS#11 improvements (Aki Tuomi) - Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - Allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - Improvements to the config-file parsing (Aki Tuomi) - Postgresql check should not touch LDFLAGS (Ruben Kerkhof) - Log error when remote cannot do AXFR (Aki Tuomi) - Speed improvements when AXFR is disabled (Christian Hofstaedtler) - NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - Try to raise open files before dropping privileges (Aki Tuomi) - Add newline to carbon error message on auth (Aki Tuomi) - Make sure we send servfail on error (Aki Tuomi) - Ship lmdb-example.pl in tarball (Ruben Kerkhof) - Allocate TCP buffer dynamically, decreasing stack usage - Throw if getSOA gets non-SOA record @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2015/04/17 15:53:14 adam Exp $ d6 1 a29 1 .include "../../databases/sqlite3/buildlink3.mk" @ 1.12 log @Revbump after updating devel/boost-libs @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2015/04/06 08:17:35 adam Exp $ a2 1 PKGREVISION= 2 @ 1.11 log @Revbump after updating textproc/icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2014/12/10 14:50:08 fhajny Exp $ d3 1 a3 1 PKGREVISION= 1 @ 1.10 log @Update PowerDNS to 3.4.1. pkgsrc changes: - SQLite 2.x support no longer exists - SQLite 3.x support cannot be compiled outside the main package because of how symbols are distributed, so making it a compile time option for net/powerdns now. Too many changes since 2.9.22.5 (over 2 years ago), see the full changelog: http://doc.powerdns.com/md/changelog/ Upgrade notes: - PowerDNS 3.4 comes with a mandatory database schema upgrade coming from any previous 3.x release. - PowerDNS 3.1 introduces native SQLite3 support for storing key material for DNSSEC in the bindbackend. With this change, support for bind+gsql-setups ('hybrid mode') has been dropped. - PowerDNS 3.0 introduces full DNSSEC support which requires changes to database schemas. By default, old non-DNSSEC schema is assumed. Please see the docs on upgrading for particular steps that need to be taken: http://doc.powerdns.com/md/authoritative/upgrading/ @ text @d1 1 a1 1 # $NetBSD$ d3 1 @ 1.9 log @Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2012/10/02 12:20:47 jperkin Exp $ a5 1 PKGREVISION= 2 d8 2 d11 1 a11 1 CONFIGURE_ARGS+= --with-dynmodules="pipe" d14 1 d29 1 @ 1.8 log @Limit inclusion of boost headers to only those necessary to avoid conflicting type errors, notably uint_t. Add -lsocket -lnsl on Solaris. Fixes package on Solaris. @ text @d1 1 a1 3 # $NetBSD: Makefile,v 1.7 2012/01/25 10:21:12 ghen Exp $ PKG_DESTDIR_SUPPORT= user-destdir @ 1.7 log @Previous PLIST change was wrong due to a libdir bug now fixed by sbd. Revert PLIST and bump PKGREVISION again for powerdns + modules. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2012/01/23 15:11:54 ghen Exp $ d27 2 @ 1.6 log @Fix unportable == check in configure (I did not have PKG_DEVELOPER=yes when previously updating this pkg), noted by joerg. Also fix some PLIST issues (introduced with the same update). Bump PKGREVISION of affected packages. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2008/08/11 14:38:33 ghen Exp $ d8 1 a8 1 PKGREVISION= 1 @ 1.5 log @Upgrade PowerDNS to 2.9.21.1. This release contains the security patch for CVE-2008-3337 that we already had in patch-ac. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2008/08/11 13:59:48 ghen Exp $ d8 1 @ 1.5.30.1 log @Pullup ticket #3660 - requested by ghen net/powerdns: build fix net/powerdns-ldap: build fix net/powerdns-mysql: build fix net/powerdns-pgsql: build fix net/powerdns-sqlite: build fix Revisions pulled up: - net/powerdns-ldap/Makefile 1.8-1.9 - net/powerdns-ldap/PLIST 1.2-1.3 - net/powerdns-mysql/Makefile 1.8-1.9 - net/powerdns-mysql/PLIST 1.3-1.4 - net/powerdns-pgsql/Makefile 1.10-1.11 - net/powerdns-pgsql/PLIST 1.2-1.3 - net/powerdns-sqlite/Makefile 1.5-1.6 - net/powerdns-sqlite/PLIST 1.2-1.3 - net/powerdns/Makefile 1.6-1.7 - net/powerdns/PLIST 1.3-1.4 - net/powerdns/distinfo 1.10 - net/powerdns/patches/patch-configure 1.1 --- Module Name: pkgsrc Committed By: ghen Date: Mon Jan 23 15:11:54 UTC 2012 Modified Files: pkgsrc/net/powerdns: Makefile PLIST distinfo pkgsrc/net/powerdns-ldap: Makefile PLIST pkgsrc/net/powerdns-mysql: Makefile PLIST pkgsrc/net/powerdns-pgsql: Makefile PLIST pkgsrc/net/powerdns-sqlite: Makefile PLIST Added Files: pkgsrc/net/powerdns/patches: patch-configure Log Message: Fix unportable == check in configure (I did not have PKG_DEVELOPER=yes when previously updating this pkg), noted by joerg. Also fix some PLIST issues (introduced with the same update). Bump PKGREVISION of affected packages. --- Module Name: pkgsrc Committed By: ghen Date: Wed Jan 25 10:21:12 UTC 2012 Modified Files: pkgsrc/net/powerdns: Makefile PLIST pkgsrc/net/powerdns-ldap: Makefile PLIST pkgsrc/net/powerdns-mysql: Makefile PLIST pkgsrc/net/powerdns-pgsql: Makefile PLIST pkgsrc/net/powerdns-sqlite: Makefile PLIST Log Message: Previous PLIST change was wrong due to a libdir bug now fixed by sbd. Revert PLIST and bump PKGREVISION again for powerdns + modules. @ text @d1 1 a1 1 # $NetBSD$ a7 1 PKGREVISION= 2 @ 1.4 log @Fix for CVE-2008-3337 taken from PowerDNS 2.9.21.1: return SERVFAIL to mailformed queries instead of just dropping them (as this facilitates DNS spoofing attacks). Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2008/01/30 22:36:14 heinz Exp $ a7 1 PKGREVISION= 2 @ 1.3 log @The package supports installation to DESTDIR. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2008/01/04 20:05:12 jmmv Exp $ d8 1 a8 1 PKGREVISION= 1 @ 1.3.6.1 log @pullup ticket #2476 - requested by ghen powerdns: security fix revisions pulled up: pkgsrc/net/powerdns/Makefile 1.4 pkgsrc/net/powerdns/distinfo 1.3 pkgsrc/net/powerdns/patches/patch-ac 1.1 Module Name: pkgsrc Committed By: ghen Date: Mon Aug 11 13:59:48 UTC 2008 Modified Files: pkgsrc/net/powerdns: Makefile distinfo Added Files: pkgsrc/net/powerdns/patches: patch-ac Log Message: Fix for CVE-2008-3337 taken from PowerDNS 2.9.21.1: return SERVFAIL to mailformed queries instead of just dropping them (as this facilitates DNS spoofing attacks). Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2008/01/30 22:36:14 heinz Exp $ d8 1 a8 1 PKGREVISION= 2 @ 1.2 log @Bump PKGREVISION due to boost update to 1.34.1. @ text @d1 3 a3 1 # $NetBSD: Makefile,v 1.1.1.1 2006/08/13 09:34:21 ghen Exp $ @ 1.1 log @Initial revision @ text @d1 1 a1 1 # $NetBSD$ d6 1 @ 1.1.1.1 log @Import net/powerdns, based on wip/pdns2 from pkgsrc-wip. The PowerDNS nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all the relevant DNS standards documents. PowerDNS is open source. The PowerDNS nameserver utilizes a flexible backend architecture that can access DNS information from any data source. This includes file formats, Bind zone files, relational databases or LDAP directories. See the net/powerdns-* packages for additional backend modules. @ text @@