Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1603118216268020"
MIME-Version: 1.0
Date: Mon, 19 Oct 2020 14:36:56 +0000
From: "Juraj Lutter" <otis@netbsd.org>
Subject: CVS commit: pkgsrc/net/powerdns-recursor
To: pkgsrc-changes@NetBSD.org
Reply-To: otis@netbsd.org
Message-Id: <20201019143656.B73B9FB28@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1603118216268020
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"

Module Name:	pkgsrc
Committed By:	otis
Date:		Mon Oct 19 14:36:56 UTC 2020

Modified Files:
	pkgsrc/net/powerdns-recursor: Makefile distinfo

Log Message:
net/powerdns-recursor: Update to 4.4.0

Changelog for 4.4.0:
Released: 19th of October 2020
Bug Fixes
  - Backport of CVE-2020-25829: Cache pollution.

Changelog for 4.4.0-rc2:
Released: 6th of October 2020
Improvements:
  - Don’t parse any config with –version.
  - Expose typed cache flush via Web API.
  - Log when going Bogus because of a missing SOA in authority.
  - Raise an exception on invalid content in unknown record.
Bug Fixes:
  - When deciding if we are auth in the local auth or forwarding case, DS is
	special.
  - Fix wipe-cache-typed.
  - Watch the descriptor again after an out-of-order read timeout.

Changelog for 4.4.0-rc1:
Released: 21st of September 2020
Bug Fixes:
  - Only do QName Minimization for the names inside a forwarded domain.
  - Fix the parsing of dont-throttle-netmasks in the presence of
	dont-throttle-names.

Changelog for 4.4.0-beta1:
Released: 31st of August 2020
Improvements:
  - Store RPZ trigger and hit in appliedPolicy and protobuf message and log
	them in the trace log.
  - Apply filtering policies (RPZ) on CNAME chains as well.
  - Fix warning: initialized lambda captures are a C++14 extension.
  - Clean some coverity reported cases of exceptions thrown but not caught.
  - Export record cache lock (contention) stats via the various channels.
  - Allow multiple local data records when doing RPZ IP matching.
  - Replace the use of ‘1’ by QClass::IN to improve readability.
  - Avoid name clashes on Solaris derived systems.
Bug Fixes:
  - Allow some more depth headroom for the no-qname-minimization fallback case.
  - If we have an NS in cache, use it in the forwarder case.
  - Disable outgoing v4 when query-local-address has no v4 addresses.
  - Resize hostname to final size in getCarbonHostname() (Aki Tuomi).

Changelog for 4.4.0-alpha2:
Released: 20th of July 2020
Improvements:
  - Check that DNSKEYs have the zone flag set.
  - Remove redundant toLogString() calls (Chris Hofstaedtler).
  - Stop cluttering the global namespace with validation states.
  - Use explicit flag for the specific version of c++ we’re targeting.
  - Use new operator to print states.
  - Refuse QType 0 right away, based on rfc6895 section 3.1.
  - Specify a storage type for validation states.
  - Common TCP write problems should only be logged if wanted.
  - Dump the authority records of a negative cache entry as well.
  - Alternative way to do “skip cname check” for DS and DNSKEY records
  - Control stack depth when priming.
  - Add version ‘statistic’ to prometheus.
  - Cleanup cache cleaner pruneCollection function.
  - RPZ policy should override gettag_ffi answer by default.
  - Don’t copy the records when scanning for CNAME loops.
  - Do not use using namespace std; .
  - More sophisticated CNAME loop detection.
  - Use std::string_view when available (Rosen Penev).
  - Make sure we can install unsigned packages.
  - Clarify docs (Josh Soref).
  - Ensure runtime dirs for virtual services differ.
  - Builder: improve shipped config files (Chris Hofstaedtler).
  - Less negatives in error messages improves readability.
  - Boost 1.73 moved boost::bind placeholders to the placeholders namespace.
  - Fix useless copies in loop reported by clang++ 10.
  - NetmaskTree: do not test node for null, the loop guarantees node is not
	null.
  - Wrap pthread objects
  - Get rid of a naked pointer in the /dev/poll event multiplexer.
  - Random engine.
Bug Fixes:
  - Update proxy-protocol.cc (ihsinme).
  - Kill an signed vs unsigned warning on OpenBSD.
  - Don’t validate a NXD with a NSEC proving that the name is an ENT.
  - Fix three shared cache issues.
  - Limit the TTL of RRSIG records as well.
  - Avoid throwing an exception in Logger::log().

Changelog for 4.4.0-alpha1:
Released: 22th of April 2020
New Features:
  - Implement native DNS64 support, without Lua.
  - Add custom tags to RPZ hits.
  - Allow attaching a ‘routing’ tag string to a query in lua code and use that
	tag in the record cache when appropriate.
  - Share record cache between threads.
  - Add support for Proxy Protocol between dnsdist and the recursor.
Improvements:
  - Fix warnings with llvm10 and -Wrange-loop-construct (Kirill Ponomarev).
  - Fix compilation without deprecated OpenSSL APIs (Rosen Penev).
  - Detect {Libre,Open}SSL functions availability during configure.
  - Better handling of reconnections in Remote Logger.
  - Add ‘queue full’ metrics for our remote logger, log at debug only.
  - Update boost.m4
  - Keep a masked network in the Netmask class.
  - Replace include guard ifdef/define with pragma once (Chris Hofstaedtler).
  - YaHTTP: Support bracketed IPv6 addresses
  - Rework NetmaskTree for better CPU and memory efficiency (Stephan Bosch).
  - RPZ dumpFile/seedFile: store/get SOA refresh on dump/load.
  - Add ‘IO wait’ and ‘steal’ metrics on Linux.
  - DNSName: Don’t call strlen() when the length is already known.
  - Fix build with gcc-10 (Sander Hoentjen).
Bug Fixes
  - Fix compilation of the ports event multiplexer.
  - Init zone’s d_priority field.
  - QName Minimization sometimes uses 1 label too many.


To generate a diff of this commit:
cvs rdiff -u -r1.38 -r1.39 pkgsrc/net/powerdns-recursor/Makefile
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/powerdns-recursor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1603118216268020
Content-Disposition: inline
Content-Length: 2267
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/net/powerdns-recursor/Makefile
diff -u pkgsrc/net/powerdns-recursor/Makefile:1.38 pkgsrc/net/powerdns-recursor/Makefile:1.39
--- pkgsrc/net/powerdns-recursor/Makefile:1.38	Wed Sep 30 11:53:07 2020
+++ pkgsrc/net/powerdns-recursor/Makefile	Mon Oct 19 14:36:56 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.38 2020/09/30 11:53:07 otis Exp $
+# $NetBSD: Makefile,v 1.39 2020/10/19 14:36:56 otis Exp $
 
-DISTNAME=	pdns-recursor-4.3.4
+DISTNAME=	pdns-recursor-4.4.0
 PKGNAME=	${DISTNAME:S/pdns/powerdns/}
 CATEGORIES=	net
 MASTER_SITES=	http://downloads.powerdns.com/releases/

Index: pkgsrc/net/powerdns-recursor/distinfo
diff -u pkgsrc/net/powerdns-recursor/distinfo:1.34 pkgsrc/net/powerdns-recursor/distinfo:1.35
--- pkgsrc/net/powerdns-recursor/distinfo:1.34	Wed Sep 30 11:53:07 2020
+++ pkgsrc/net/powerdns-recursor/distinfo	Mon Oct 19 14:36:56 2020
@@ -1,13 +1,11 @@
-$NetBSD: distinfo,v 1.34 2020/09/30 11:53:07 otis Exp $
+$NetBSD: distinfo,v 1.35 2020/10/19 14:36:56 otis Exp $
 
-SHA1 (pdns-recursor-4.3.4.tar.bz2) = 1ade30bb1f9ee78438be59e1ed76d96eb95f7f62
-RMD160 (pdns-recursor-4.3.4.tar.bz2) = 097a0f32f8bc988063cacde2de407d231d37b809
-SHA512 (pdns-recursor-4.3.4.tar.bz2) = cfc34f42ed95c7fd2be1ab7ba172672e5e1db96b4ced171c1eae7bd60fb7db482aed928028811b133d326550de35c506a8fc480b12ae39ab7fa142408e0b42d8
-Size (pdns-recursor-4.3.4.tar.bz2) = 1359380 bytes
+SHA1 (pdns-recursor-4.4.0.tar.bz2) = a53e23891110ac646249ec03f0571a693c730e9e
+RMD160 (pdns-recursor-4.4.0.tar.bz2) = 3cb8c711628c26519a6031f42f53a878c61d3401
+SHA512 (pdns-recursor-4.4.0.tar.bz2) = 06ec7788510b656ee8e08e54d989d8789685a3acb8b11172aff5de21bff493227368bbfca8203c56853da97d209facc4d88005b4b565a5986788a1b5f16a9fb6
+Size (pdns-recursor-4.4.0.tar.bz2) = 1395544 bytes
 SHA1 (patch-dns.hh) = 7e9c1b10a066a605b74ebdbee2d894aed50f6c68
 SHA1 (patch-ext_json11_json11.cpp) = 2de8ea8b51556bd3e3c1a88f681697eff239ab1a
 SHA1 (patch-iputils.cc) = a7a25d76293bc2e68efc749c661ae1595167fab7
 SHA1 (patch-qtype.hh) = f14eb9ad7efc7dd4a0ce220c1f93044ef69e99c2
 SHA1 (patch-version.cc) = 26226a02198edd9d8890a5199ee5a8051334fe41
-SHA1 (patch-webserver.cc) = 2b34430b990c8398daf565d4811fd12848234c6a
-SHA1 (patch-ws-recursor.cc) = 24d8582cff7207d84458dc123cc9976806c310b9


--_----------=_1603118216268020--