---
- branch: MAIN
  date: Wed Jan  6 12:18:48 UTC 2021
  files:
  - new: '1.60'
    old: '1.59'
    path: pkgsrc/net/knot/Makefile
    pathrev: pkgsrc/net/knot/Makefile@1.60
    type: modified
  - new: '1.35'
    old: '1.34'
    path: pkgsrc/net/knot/distinfo
    pathrev: pkgsrc/net/knot/distinfo@1.35
    type: modified
  id: 20210106T121848Z.9cf90cf6afcd4f9e2e470eecf3a7712694a17564
  log: "knot: Update to 3.0.3\n\nChangelog:\nVersion 3.0.3\n\nFeatures:\n\n      +
    Kjournalprint can display changesets starting from specific SOA serial\n\nImprovements:\n\n
    \     + New configuration check on ambiguous 'storage' specification #706\n      +
    New configuration check on problematic 'zonefile-load' with\n        'journal-contents'
    combination\n      + Server logs positive ACL check in debug severity level (Thanks
    to\n        Andreas Schrägle)\n      + More verbose logging of failed zone backup\n
    \     + Extended documentation for catalog zones\n\nBugfixes:\n\n      + On-slave
    signing produces broken NSEC(3) chain if glue node becomes\n        (un-)orphaned
    #705\n      + Server responds CNAME query with NXDOMAIN for CNAME synthesized
    from\n        DNAME\n      + Kdig crashes if source address and dnstap logging
    are specified\n        together #702\n      + Knotc fails to display error returned
    from zone freeze or zone thaw\n      + Dynamically reconfigured zone isn't loaded
    upon configuration commit\n      + Keymgr is unable to import BIND-style private
    key if it contains empty\n        lines\n      + Zone backup fails to backup keys
    if any of them is public-only\n      + Failed to build with XDP support on Debian
    testing\n\nVersion 3.0.2\n\nFeatures:\n\n      + kdig prints Extended DNS Error
    (Gift for Marek Vavruša)\n      + kxdpgun allows source IP address/subnet specification\n\nImprovements:\n\n
    \     + Server doesn't start if any of listen addresses fails to bind\n      +
    knotc no longer stores empty and adjacent identical commands to\n        interactive
    history\n      + Depth of interactive history of knotc was increased to 1000 commands\n
    \     + keymgr prints error messages to stderr instead of stdout\n      + keymgr
    checks for proper offline-ksk configuration before processing\n        KSR or
    SKR\n      + keymgr imports Revoked timer from BIND keys\n      + Additional XDP
    support detection in server\n      + Lots of spelling and grammar fixes in documentation
    (Thanks to Paul\n        Dee)\n      + Some documentation improvements\n\nBugfixes:\n\n
    \     + If more masters configured, zone retransfer triggers AXFR from all\n        masters\n
    \     + Server can fail to bind address during restart due to missing\n        SO_REUSEADDR\n
    \     + KSK imported from BIND doesn't roll over automatically\n      + libdnssec
    respects local GnuTLS policy â\x80\x94 affects DNSSEC operations and\n        Knot
    Resolver\n      + kdig can stuck in infinite loop when solving BADCOOKIE responses\n
    \     + Zone names received over control interface are not lower-cased\n      +
    Zone attributes not secured with multi-threaded changes\n      + kzonecheck ignores
    forced dnssec checks if zone not signed\n      + kzonecheck fails on case-sensitivity
    of owner names in NSEC records #\n        699\n      + kdig fails to establish
    TLS connection #700\n      + Server responds NOTIMPL to queries with QDCOUNT 0
    and known OPCODE\n"
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/net/knot'
  unixtime: '1609935528'
  user: ryoon