---
- branch: MAIN
  date: Fri Nov 26 23:52:34 UTC 2021
  files:
  - new: '1.46'
    old: '1.45'
    path: pkgsrc/net/ldns/Makefile
    pathrev: pkgsrc/net/ldns/Makefile@1.46
    type: modified
  - new: '1.27'
    old: '1.26'
    path: pkgsrc/net/ldns/distinfo
    pathrev: pkgsrc/net/ldns/distinfo@1.27
    type: modified
  id: 20211126T235234Z.eb2873a40d6ba50173c532bf8e0729bb5e9cd19c
  log: |
    Update to ldns version 1.8.0.

    Pkgsrc changes:
     * Always depend on OpenSSL >= 1.1.0, use "dane-verify"

    Upstream changes:

    * ZONEMD support in ldns-signzone and ldns-verify-zone

    * Draft implementation of the SVCB and HTTPS RR types.
      Use --enable-rrtype-svcb-https with configure to compile with these
      supported.

    Changelog
    =========
    * bugfix #38: Print "line" before line number when printing
      zone parse errors. Thanks Petr Spacek.
    * bugfix: Revert unused variables in ldns-config removal patch.
    * bugfix #50: heap Out-of-bound Read vulnerability in
      rr_frm_str_internal reported by pokerfacett.
    * bugfix #51: Heap Out-of-bound Read vulnerability in
      ldns_nsec3_salt_data reported by pokerfacett.
    * Fix memory leak in examples/ldns-testns handle_tcp routine.
    * Detect fixed time memory compare for openssl 0.9.8.
    * Fix compile warning by variable initialisation for older gcc.
    * Fix #92: ldns-testns.c:429:15: error: 'fork' is unavailable: not
      available on tvOS.
    * Fix for #93: fix packaging/libldns.pc Makefile rule.
    * ZONEMD support in ldns-signzone and ldns-verify-zone
    * ldns-testns can answer several queries over one tcp connection,
      if they arrive within 100msec of each other.
    * Fix so that ldns-testns does not leak sockets if the read fails.
    * SVCB and HTTPS draft rrtypes.
      Enable with --enable-rrtype-svcb-https.
    * bugfix #117: Assertion failure with DNSSEC validating of
      non existence of RR types at the root.  Thanks ZjYwMj
    * Set NSEC(3) ttls to the minimum of the MINIMUM field of the SOA
      record and the TTL of the SOA itself. draft-ietf-dnsop-nsec-ttl
    * bugfix #119: Let example tools read longer RR's than
      LDNS_MAX_LINELEN
    * Add SVCPARAMS to python ldns_rdf_type2str function.
    * PR #134 Miscellaneous spelling fixes. Thanks jsoref!
    * Fix that ldns-read-zone and ldns_zone_new_frm_fp_l properly return
      the $INCLUDE not implemented error.
    * Fix that ldns-read-zone and ldns_zone_new_frm_fp_l count the line
      number for an empty line after a comment.
    * Fix #135: Fix compile with OpenSSL-3.0.0-beta2.
    * PR #107: Added ldns_pkt2buffer_wire_compress() to make dname
      compression optional when converting packets to wire format.
      Thanks Eli Lindsey
    * Option to ldns-keygen to create symlinks with known names
      (i.e. without the key id) to the created files.
      Thanks Andreas Schulze
    * Fix #121: Correct handling of centimetres by LOC parser.
      Thanks Felipe Gasper
    * PR #126: Link with libldns.la in Makefile.in.
      Thanks orbea
    * PR #127: Addes option -Q to drill to give short answer.
      Thanks niknah
    * PR #133: Update m4 files for python modules.
      Thanks Petr Men#�k
    * Bufix CAA value fields may be empty: Thanks Robert Mortimer
    * PR #108: Fix for ldns-compare-zones net detecting when first zone
      has a RRset that shrinks from two to one RRs, or grows from one
      to two RRs. Thanks Emilio Caballero
    * Fix #131: Drill sig chasing breaks with gcc-11 and
      strict-aliasing. Thanks Stanislav Levin
    * Fix #130: Unless $TLL is defined, ttl defaults to the last
      explicitly stated value. Thanks Benno
    * Fix #48: Missing UNSIGNED legend with drill. Thanks reedjc
    * Fix #143: EVP_PKEY_base_id became a macro with OpenSSL > 3.0
      Thanks Daniel J. Luke
    * Let ldns-signzone warn for high NSEC3 iteration counts.
      Thanks Andreas Schulze
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/net/ldns'
  unixtime: '1637970754'
  user: he