pdns-backend-geoip-4.1.2-lp150.3.13.1<>,]Jo/=„r?J6 sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-develbuild84 15651830874.1.2-lp150.3.13.14.1.2-lp150.3.13.1libgeoipbackend.so/usr/lib64/pdns/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10740/openSUSE_Leap_15.0_Update/d41edf56faad09bc988db5b8e79fadb8-pdns.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea457d33234e9d602465c746ac34e7de9a7714f1, strippedPRRRRRRR R R R RR RRRRR0utf-833cc98ea007d9e5d770d988d1e0ede7b2a316e53aba9f41d3d53f71179045f49? 7zXZ !t/T5`]"k%60E<$#]1GS=ކ!Uhsua,7 Og' i^B`V\H;AmhPC"H1nDΔ2<(lKк#^R|+!4?l?=euų΋允 (5r-Ro?496pJAnBRՀ$v]!CšQ$h~Bi9I> ˥یVϓ8JN"[ho.2.e F}Dp7Ի3˙'`ekd}#r1:C/.I^ RYmWMẼ~P$XGa3:Vf['Z2 Fy?cg!- eaރ kG՜!* kM򱚩$^,BCGs'}{UY*dj"pmUJXo '{ Շ^ҟД]r% ~*s1 #v~'DfZpPV8;zp1WVs#(:L0DJ"HO8YJ>,mwD<3/ᔏE$ym1ύ$1ƺXj C/]?(zx"7`c XMv?hI~h&B$D4nw`'VA;U䜘|S<#K/ʔ8#J ]pͶve1O 4 b(aK8W.>ncG<)b D,3Im?KMxF\sS+qS( *ߐ\oxR;[ 7q/2yB0q}lL;+1NJq׬={z 'B!%発E EAc6Y3oi/j J5[hO>㩳=v J r 3&y*D 7[XiO-c NZ;ߎgG|ELJ!4 r2Hhb6;Օ߭}|*$eeq$ zWq7|0jUCkτ]nQs,>dC'O̟Mn?.F*%+={|?:)4X}sC6iY_KHUKEfz^xc^zcȱ1*U{~'5* lʷ L SLNbp0CSΊE0񲞕!8ܷ-|M`6h^å\੄{bpA1~ر,O)+/<媩d-@q3$TiV;@O{} X@>3V{ n0)RթDWFB#W8l[ k刂,mȬݭ(ws"Cx*lC$ cP*'6n}WW/F|NI̲f3a~JZ>}ehEM1zY9ʦɑP؋<ݳ(ipo-"%|5iw?o-6p^5mBNPx~VLqUZKaT#|*ORyw? \:hN-NsD#pGȇh8fƓ {av~2UWtñ`- {ORE2(]˯MpD]_!!' U U{*Nԫ,NhHw^=A2:BMƈ[8sUv&3&ېgF@ kuC޽(E%P?dR|okmnm- -pc;9YcpHb'T܉w;q=wTC*S` dDdNK2Q-?~eNCO[YL\7EJ9Bh(-o5P]ͱ\%0T"V=(#yV(.JA'DKb.2+> w4|*M0ʫ$]6qkŻz>k{_SЙveW\{!/O圻{nƼ٢1\mc C6-m:dSzP8DNp t},zn']qޣnУ[o0z*0z*>뛠u`1+Ѣ eaJɹtv7J 6a m>uN]7Cbs51Q uݱZ[$S@-RG*r] +qLY[Ē 6FZ(G-aS8VpA SN6 <_:#,8qEɎ`~H{V>'QHk|4B`Foag"n}& hn)/4;eSifWsA)A=jJ)I5K]>b:ǭ4ILeUI:T8'>4ue &dsZ}' 5^aZOufM.[T4O@C)j_oMg9fD2H\ѭc,ć[6kM+L[Bē3D ~%2oW\*RaVⲌ~J:QDzPU"ճXP^.?je{A~}ڕSfڜΘiJ^qCVbօqZP2, >.yJGL4`U2j-^1lt}U--H"+Ue q`O(畺%KfM-Fb[wo)r3O$Axr2eLo"z@/ɑq4UT+He>֛:ƶi 5[ݏްu-/ѳT84Kw,`LWstgA%Ïv!*$DG ~$RNO o'9svJ me7̟%ki[iRSw=ARe'='7n/;˰FJ$6Ȉb錤h?{+ f͘ݤFײ? twvG⮋ qj֝y=ݲvaͥ O!>a:uxƕR=s59:B 2}QWƃsak9º/x p֨|R,%50F/:Lbb |9>-psxg_ {A>7.F6(4jÔ[`€[, ԣ£ӭΠtƳo$.^Nm?{n-:C4 ctܼAmֽz8LҲjmDGl5o8+3?v am~zMk!0HB/LQ_᭐]uBź>q5QX5_4D\'ğ{د@OF`hUAGA5?,,6ސPuLM}:}UP9 2k+_)D凫k8Ysk7˗ sIEs @'էVI9]梘*Ղzmhm}QU #ުHQ f:syΦz@QlMkB+7mלCJS0T\'n9h+'Ah޵o'QscL̦+GG4֕MMR'ݮ^W}y;̘),ĕoYe&kV7>OZyL֥~sᩰ쒀Bl+@w=y|143W~kc,3Ӓr_u1*ܥHy.;KV'X->u‰eE$]g{㛐S(+*J.--\'lsKQf %+vX~3|_t![X~h(oGAF o3Ȧ mf+F tqh텂(FR6QA+ |wiUft VQt~Ĭef3JeAG`AXH0JKT?ЬR-Wڬ8o(~\6YfFO & b 5Nl\sbܹl Y(es7[* m5 Q $.'- ant":Xe j&yH:<48vgS(|czApVDao&O"&ICSعT41Yܠ,U}<I|'#cekC['}~Xz/wOY>%Mt-ԳUn 8U%-odBk9'9;OݿG f#2\k{-ih"Ӈ/4ӁTh`¾}W-jsp@3UӂpG@R%¯qj KB0/jMC @FVrKKRg_F Ȓ  yr͝ADKhs_.hy&O Xpe¥ʙKA?y{'Dc1☰xr#5R9>cRU&N8RCm%3Y//ꥴoA'v_i׋QfW,&VəSAQO4QبonZvD?sUtPj_JxS sXjWw$KQ\?歲$# XɓUbZrguLl_a5U+ҼNz<-o4 91®Qiz KV$B?'bKYW·|k/.M@v3pg V&Aa$Tꇪ2{=bD" !fV-=8QVW,9WvY>￣[6JYc>U8(ٺtE uYNj`ްNG55JZ d:{y#"$P7|{ qJdt/Db ͻ"oלؠ __X [|t9$8QɰZ#.h/gQ=ljf:^hKͿqXKD.d3_VFU_ZI{?Lhx$+]!lsp?[bdRDo`a#?@ IUވ8-r muqϿɔ%{>4VTc.]y2 h se'Gҷ~k(TAiw@BF0oU[X`*` W}%1 M10I5xl*tm;h~4gđ&wG͆͜ʞRo3ZB纱},'ؿڴqFoŀq+ԏmlY "צ }6r ryxH!GVG1kgj.5;/UHX|}KS[6Q̧tE 5) ?S"pypbM&xT!߳Cf W/~0@aX~D/`8Zq7K+t8Oe<޻KN~nL@mu(m(" u9nq] Fn}V G6?\JAMKca9ynRH@2T[wXTO-$7D120}z~p,}PǣP'Ӣ,xv#Nl?>V;gigӝ?n1mmE;!7L`t8q BZn =KJ>Nq?JK(4W<iuUgֳ|hnoz^'Kx"oQ?w@_V+[wi@l 'uX٧kQ.{^ M< |/Vt{O {-\idj@ӆvpIv:(|W |X].Dk1- 4%x@>3dJ^׏`)?|axY8鱯!HRCNH&u p9kXp#K>*Mv8:cf<Ζ˼fp- ΰ67(\TBmoBx'6"*8Cx@Qek XA.r5=׀Gouf`vKE|,x(KȂ娃Hׯ4en, ޺0ydo5z9qzq|BDq?04)Q! K`qJ1B7K% I\5}̹y)] $ŧ*q19O-nڏj~FլeQBʟs,(Qգ&MUhLƺ9Lw\<+1b?I5xC4NQa(5 T:Ss;^}[=)xYaODc!}ãn(W BjTaInz =6ZX2$8rd1IBNRHO6DׅT%ܬP6Y(2T|~úPrwa '`gKAW0wlx5DN8'Մ튋I T .crn$@{Q3+OG_'>D`@=_[9[^bWM^}Yj0bJQU4 g[T'_t455ꚍzEe˧gѫ݀[\Y50P.K?Ae5LH?hYefq*MׂhbxG}v&ΥPU%Ptn8rk%)ͮueίIwBx 2K:^|%_9s>%0W( xRiZ|n( 9_ W (+->Ơ{ג \腥b3޷ "xŨ2p0 $){ 'z;| yṯ,QZK4S4TY0LR_>V[>VbaʚeFh!J"`q i14FW-:Pj C&vVAޤz8 HN(Yg]a#JM[cϝ!X/E-2ry7لF3l][wXBHd${,>/iv#36fLW H0aͿd}_)|'pJlwF(m)}0™Lv@`Q:6Rԁh%HzuP|h㰡aZC:Igx|hܡ1'ē6Y2'4)r 3..^8c[07)1i!YGc{Z܁^Ft6q>1%ЇDsk4a+ߋ CRIiIpwU$3 ¾@F0|ȿR ?ê+Շ͂cwdCl"ZbexGkJ1D"<hQը >aNO{m})޽+u&bjq;[ <>`\#U{LV=+^WjRepLdsۦG,d7# e^>9wh{LyzZ.fRslZL( i@"'N;^3>e:zgX}R {p%]k_-|әo?v+H$zD"P Iȼ+1qS%\jtd)B[r*`ˤU2];h6 5Ӌf% I?v g.cK21B V[Z>MVb*],cTb#L"{dgϖ~V[!˵[˪̢U홓$Qz0Ãq/ OmeϷVF4Z,v◍`":y3gUvþ*rP2Exg$/=BT`~S\3Ar6^.;wV3|iFTTdLWI%6M@ryp3@Gv]D  }a{CX`3\F|o7H:ޑ|֗q4f#tFQ U3[~(T i$&^lMSՏ1kq>)@d1?쒱C+4#|OCdo/Vگ+PKB;Hl_U<=!IN5\#4uomkA*rͰ>o 1wpnaTmPo?)V_*KE2vf{GqݦB?eꖵR SEm4!1&uby(@8i?q$y(3oAN[KCr<;¯t-* 783kduf@-Jct .=P*J]PBv:kfoX]xiOrbhcKzϮj?[ZokmXJF?mO'Y6aV0Rp0 4K(&ijȌbiUv(.` 0]=`Z*2= I6҆;w DނB0ĤYyT%]!wu&}Jݩk L_LTm 2RWa6:RGHd#rgbV^}c~ h`kVO>"n2:-dWuMEO+N?60c&-5_>BX"\a2gI)`_iD/`g\+ɉGG,4M `vщSDp<&% U&SRV{[?x As֊}ؽHkcJqQ53F6es*Yb`)IҎIp{8ރ ~;&v3"㖔#*tE8ڡ0k@^ YZ