-
ldns (1.8.3-2) unstable; urgency=medium
* ldns-rdf-typemap-fixes-for-swig-4.2.0.patch (Closes: #1066217)
From upstream https://github.com/NLnetLabs/ldns/pull/231
-- Michael Tokarev <email address hidden> Sat, 16 Mar 2024 18:04:34 +0300
-
ldns (1.8.3-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1064167
-- Lukas Märdian <email address hidden> Thu, 29 Feb 2024 08:19:16 +0000
-
ldns (1.8.3-1) unstable; urgency=medium
* new upstream version 1.8.3
* d/libldns3.symbols: include new symbols
* doxygen-in-builddir.patch: patch from upstream
to fix doxygen build in a separate build directory
* always build in a subdir (build/main for the main build), -
no need to hack clean target anymore
* d/rules: mark all build/install targets as .PHONY
(makes build target work with build subdir)
* d/libldns-dev.install: do not install libldns.pc,
it is already installed by upstream as ldns.pc
* disable GOST algorithm (Closes: #862207)
GOST R 34.10-2001 is an obsolete algorithm which should not be used
in production. It is not provided by openssl too, a special plugin
is required to be installed. This change removes it entirely.
This removes 4 symbols out of libldns3.so:
ldns_gost2pkey_raw
ldns_gost_engine
ldns_key_EVP_load_gost_id
ldns_key_EVP_unload_gost
Technicallly we should bump soname when removing symbols from a
shared library. Or alternatively, we can provide stubs which just
return failure. But in this case there should be no problems, since
the symbols aren't used by any of rdepends, and they should not be
used by anything either, given the context.
If lack of one of these symbols will be problematic we can solve
it down the line.
* d/rules: since compat9 dh_auto_* tools export CFLAGS/LDFLAGS already
* d/changelog: fix typo in previous entry
-- Michael Tokarev <email address hidden> Mon, 05 Sep 2022 11:39:52 +0300
-
ldns (1.8.1-1) unstable; urgency=medium
* New upstream version 1.8.1
Closes: #1008638 (FTBFS with python 3.10 due to distutils check)
Closes: #1005646 (FTBFS with OpenSSL 3.0)
Closes: #1009385 (output of ldns-key2ds changes after compiler changes)
Closes: CVE-2020-19860 (heap buffer overflow in while verifying zone file)
Closes: CVE-2020-19861 (heap overflow/leakage when reading a zone file)
* rework the build system, fixing numerous issues:
- stop overwriting files at install time from different builds
and ending up using the build with wrong configure options
- stop running install twice
- stop removing system-installed files if any on clean
- stop doing (re)build of everything just for the python build
- build python bits in the main build and perform extra steps
only if there's more than one python version to build for
(this effectively eliminates miltiple builds completely)
- clarify build with multiple pyversions and why it still fails
- remove old, now irrelevant, stuff (like overriding options
which are being in effect anyway, or which has no effect)
- move variable-based custom install rule for libldns.pc
into .install file once dh now allows variables in there
- reduce startup time by eliminating dpkg's default.mk which is slow
- remove the wrongly-generated staic lib for the python bindings
(_ldns.{a,la}) in the install rules instead of ignoring them
in dh_install -X
- fix add --with-trust-anchor= so it actually works
- replace dh --with python with Build-Depend: dh-sequence-python3
- run dh only for supported targets/sequences
* update symbols file for 1.8 version, adding 6 new symbols
* remove Makefile-remove-install-libldns-pc.patch
* update short descriptions of all packages to mention what is
actually in there instead of being the same for all packages
* remove Build-Dependes: chrpath & pkg-config (not used)
* add fix-pyldns-include.patch to fix building pyldns outside source dir
* d/control: update Stdandards-Version to 4.6.0.1 (no changes)
* d/watch: rework, simplify, use https, enable pgp signature verification
* add upstream/signing-key.asc with the followig key:
E5F8F8212F77A498 "Willem Toorop <email address hidden>"
* remove trailing whitespace from d/changelog
* add myself to uploaders
-- Michael Tokarev <email address hidden> Tue, 26 Apr 2022 16:05:17 +0300
-
ldns (1.7.1-3) unstable; urgency=medium
* Acknowledge NMU (thanks, Michael Tokarev!)
[ Robert Edmonds ]
* debian/rules: Add "--with-trust-anchor=/usr/share/dns/root.key"
to configure parameters
* debian/control: Add "Recommends: dns-root-data" to ldnsutils
[ Daniel Kahn Gillmor ]
* added myself to uploaders
* Import upstream patch to fix SHA-256 on GCC 11 (Closes: #1009385)
* d/watch: update to version 4 (and use https)
* d/clean: clean up some generated files
-- Daniel Kahn Gillmor <email address hidden> Wed, 13 Apr 2022 10:27:03 -0700
-
ldns (1.7.1-2.1) unstable; urgency=medium
* Non-maintainer upload.
* add fix-wrong-python-distutils-configure-check.diff to fix the
incorrect distutils package check (it should be checking the
return code not the emptiness of the output). This fixes FTBFS
with new python (3.10) and allows the python3.10 transition to
happen, but it is not fixing the actual issiue with ldns using
distutils which should be addressed later. Closes: #1008638
-- Michael Tokarev <email address hidden> Thu, 07 Apr 2022 16:03:29 +0300
-
ldns (1.7.1-2) unstable; urgency=low
* Team upload.
* Upload to unstable.
-- Santiago Ruano Rincón <email address hidden> Wed, 24 Jun 2020 14:08:19 +0200
-
ldns (1.7.0-4.1) unstable; urgency=medium
* Non-maintainer upload.
* Use upstream patch to fix FTBFS with SWIG 4.0 (Closes: #951899)
-- Ivo De Decker <email address hidden> Fri, 20 Mar 2020 13:39:43 +0000
-
ldns (1.7.0-4) unstable; urgency=medium
* Fix invalid maintainer (Closes: #899938)
* Add two upstream patches to address security issues:
+ CVE-2017-1000231: Memory corruption in ldns_rr_new_frm_fp_l
(Closes: #882015)
+ CVE-2017-1000232: Memory corruption in ldns_str2rdf_long_str
(Closes: #882014)
* Bump debhelper compat to v12
* Update the Vcs-* links to salsa.d.o
* Bump the policy to the latest version (no change)
* Add upstream Homepage link to d/control
* Disable GOST and enable Ed25519 algorithm (see draft-wouters-sury-dnsop-algorithm-update)
-- Ondřej Surý <email address hidden> Sun, 10 Mar 2019 21:56:02 +0000
-
ldns (1.7.0-3.1) unstable; urgency=medium
* Non-maintainer upload.
* Don't build-depend on python3-all-dev, the build rules don't handle
multiple versions of python3 correctly. Closes: #904038
Thanks to Steve Langasek <email address hidden> for the patch.
* Enable parallel building.
-- Mattia Rizzolo <email address hidden> Thu, 27 Sep 2018 10:36:04 +0200
-
ldns (1.7.0-3) unstable; urgency=medium
* Build depend on OpenSSL >= 1.1.0 to support offline DANE verification
-- Ondřej Surý <email address hidden> Fri, 23 Jun 2017 10:12:00 +0200
-
ldns (1.7.0-1) unstable; urgency=medium
* Imported Upstream version 1.7.0
* Use --enable-gost-anyway to enable GOST even when not available at compile time
-- Ondřej Surý <email address hidden> Wed, 21 Dec 2016 13:12:52 +0100
-
ldns (1.7.0~rc3-1) unstable; urgency=medium
* Imported Upstream version 1.7.0~rc3
* Upload to unstable
-- Ondřej Surý <email address hidden> Sat, 17 Dec 2016 10:36:30 +0100
-
ldns (1.6.17-10) unstable; urgency=medium
[ A. Schulze ]
* experimental support openssl-1.1.x (Closes: #828377)
-- Ondřej Surý <email address hidden> Thu, 27 Oct 2016 16:53:07 +0200
-
ldns (1.6.17-9) unstable; urgency=medium
* Add ldns_resolver_clone function needed by libnet-ldns-perl
-- Ondřej Surý <email address hidden> Tue, 28 Jun 2016 13:11:24 +0200
-
ldns (1.6.17-8) unstable; urgency=medium
[ Robert Edmonds ]
* Makefile.in: Don't pass CPPFLAGS to swig (Closes: #811230)
-- Ondřej Surý <email address hidden> Mon, 15 Feb 2016 12:21:40 +0100
-
ldns (1.6.17-7) unstable; urgency=medium
* Add lintian overrides for slightly errorneous man pages
* Disable ldns-config distribution; please use pkg-config
* Add missing dh-python B-D
* Fix perl error in doxyparse.pl (Closes: #808665)
-- Ondřej Surý <email address hidden> Wed, 23 Dec 2015 11:05:32 +0100
-
ldns (1.6.17-6) unstable; urgency=medium
* Update packaging to debhelper compat level 9 and convert libldns to
MultiArch package
* Move the package under pkg-dns group umbrella
-- Ondřej Surý <email address hidden> Tue, 22 Dec 2015 15:24:37 +0100
-
ldns (1.6.17-5) unstable; urgency=medium
* Add upstream fix for double free for answers bigger than 4096 bytes
* Add upstream fix whitespace bug in ldns-read-zone
-- Ondřej Surý <email address hidden> Thu, 19 Jun 2014 09:45:26 +0200
-
ldns (1.6.17-4) unstable; urgency=high
* [CVE-2014-3209]: fix ldns-keygen writing private DNSKEYs with default
umask (Closes: #746758)
-- Ondřej Surý <email address hidden> Mon, 16 Jun 2014 11:40:18 +0200
-
ldns (1.6.17-3) unstable; urgency=high
* Add Breaks for dnssec-trigger as well to allow its backports without
symbol breakage in libldns1
-- Ondřej Surý <email address hidden> Fri, 13 Jun 2014 14:23:43 +0200
-
ldns (1.6.17-2) unstable; urgency=high
* Install libldns.pc into correct location (Closes: #746614)
* Add Breaks for opendnssec version that uses strlcpy symbol from ldns
(Closes: #720702)
-- Ondřej Surý <email address hidden> Fri, 13 Jun 2014 13:47:22 +0200
-
ldns (1.6.17-1) unstable; urgency=low
* New upstream version 1.6.17
* Use updated watch file
* Refresh patches for 1.6.17 release
* Install libldns.pc to /usr/lib/pkg-config (Closes: #696025)
* Update symbols file that has removed some internal symbols
-- Ondřej Surý <email address hidden> Tue, 11 Feb 2014 15:22:50 +0100
-
ldns (1.6.16-1) unstable; urgency=low
* New upstream version 1.6.16
* Update patches for release 1.6.16
-- Ondřej Surý <email address hidden> Wed, 10 Jul 2013 12:47:56 +0200
-
ldns (1.6.13-4) unstable; urgency=low
* Add correct Breaks/Replaces, fix typo and version (Closes: #694468)
-- Ondřej Surý <email address hidden> Tue, 27 Nov 2012 12:05:04 +0100
-
ldns (1.6.13-3) unstable; urgency=low
* Also move manual page for ldns-config to libldns-dev package
-- Ondřej Surý <email address hidden> Fri, 07 Sep 2012 14:36:11 +0200
-
ldns (1.6.13-2) unstable; urgency=low
* Convert python-ldns package to dh_python2
* Move ldns-config to /usr/sbin and to libldns-dev where it belongs
-- Ondřej Surý <email address hidden> Fri, 13 Jul 2012 12:43:03 +0200
-
ldns (1.6.13-1) unstable; urgency=low
[ Daniel Baumann ]
* Removing gost symbols in libldns1 if needed (Closes: #649695)
[ Ondřej Surý ]
* Generate symbols file in dh_makeshlibs target
* Imported Upstream version 1.6.13 (Closes: #674458)
* Add new symbols introduced in 1.6.13
-- Ondřej Surý <email address hidden> Mon, 28 May 2012 09:32:24 +0200
-
ldns (1.6.12-2) unstable; urgency=low
[ Robert S. Edmonds ]
* debian/: add libldns1-dbg debugging symbol package
-- Ondřej Surý <email address hidden> Mon, 26 Mar 2012 13:56:03 +0200
-
ldns (1.6.12-1) unstable; urgency=low
* Fix brace-expansion-in-debhelper-config-file warning
* Imported Upstream version 1.6.12
* Update patch for new release
-- Ondřej Surý <email address hidden> Mon, 16 Jan 2012 15:34:20 +0100
-
ldns (1.6.11-1) unstable; urgency=low
* Conditionally enable GOST algorithm support based on OpenSSL version
* Make GOST symbols optional to allow easy backporting
* Imported Upstream version 1.6.11
* Update patches to the new release
* Update libldns1 symbols (and make GOST symbols mandatory again, it
will break ABI if they are missing)
-- Ondřej Surý <email address hidden> Thu, 29 Sep 2011 17:38:20 +0200
-
ldns (1.6.10-2) unstable; urgency=low
* Add dependency on libssl-dev to libldns-dev (Closes: #629888) -- Ondřej Surý <email address hidden> Thu, 09 Jun 2011 11:20:41 +0200
-
ldns (1.6.10-1) unstable; urgency=low
* Link libtool to current directory in the clean target if not found (Closes: #623320) * Update Vcs-* links * Imported Upstream version 1.6.10 -- Ondřej Surý <email address hidden> Tue, 31 May 2011 15:54:59 +0200
-
ldns (1.6.9-2) unstable; urgency=low
* Don't perform checks, because upstream target test is broken * Enable GOST algorithm (Closes: #620598) -- Ondřej Surý <email address hidden> Sun, 03 Apr 2011 12:07:36 +0200
-
ldns (1.6.9-1) unstable; urgency=low
* Imported Upstream version 1.6.9 -- Ondřej Surý <email address hidden> Fri, 18 Mar 2011 13:48:47 +0100
-
ldns (1.6.8-1) unstable; urgency=low
* Imported Upstream version 1.6.8 -- Ondřej Surý <email address hidden> Mon, 24 Jan 2011 15:50:09 +0100
-
ldns (1.6.6-2) unstable; urgency=high
* Install ldns.py into python-ldns package (Closes: #609955) -- Ondřej Surý <email address hidden> Fri, 14 Jan 2011 10:53:30 +0100
-
ldns (1.6.6-1) unstable; urgency=low
* New upstream release
* Add Changelog to debian/docs (Closes: #592437)
-- Ondřej Surý <email address hidden> Thu, 12 Aug 2010 13:06:10 +0200
-
ldns (1.6.5-1) unstable; urgency=low
* New upstream release
* Fix _ldns.so install command
-- Ondřej Surý <email address hidden> Wed, 04 Aug 2010 16:08:00 +0200
-
ldns (1.6.4-5) unstable; urgency=low
* allow installing with just one version of python (Closes: #583350)
* add explicit call to python-support and quilt from debhelper
-- Ondřej Surý <email address hidden> Fri, 26 Mar 2010 17:01:28 +0100
-
ldns (1.6.4-4) unstable; urgency=low
* Add support for all python versions (Closes: #571494)
-- Ondřej Surý <email address hidden> Mon, 01 Mar 2010 13:29:06 +0100
-
ldns (1.6.4-3) unstable; urgency=low
* Disable building with binutils-gold
-- Ondřej Surý <email address hidden> Tue, 02 Feb 2010 14:51:07 +0100
-
ldns (1.6.4-2) unstable; urgency=low
* Don't uselessly link to all libraries around
-- Ondřej Surý <email address hidden> Thu, 28 Jan 2010 22:33:05 +0100
-
ldns (1.6.1-1) unstable; urgency=low
* New Upstream Version
-- Ondřej Surý <email address hidden> Sat, 24 Oct 2009 11:14:17 +0200
-
ldns (1.6.0-1) unstable; urgency=low
* New Upstream Version
-- Ondřej Surý <email address hidden> Thu, 30 Jul 2009 21:31:34 +0200
-
ldns (1.5.1-1) unstable; urgency=low
* New upstream release.
* Merged upstream:
- debian/patches/01_put_ldns_library_check_to_bottom.dpatch
- debian/patches/02_buffer_overflow_in_rr.c.dpatch
-- Ondřej Surý <email address hidden> Tue, 03 Mar 2009 11:53:42 +0100
-
ldns (1.4.0-1) unstable; urgency=low
* New upstream release.
* Merged upstream:
- debian/patches/01_ldns-1.3.0.ldns-new-dnssec-tools.dpatch
- debian/patches/02_ldns-1.3.0.ldns-read-zone.dpatch
- debian/patches/03_ldns-1.3.0_hex_can_contain_space.dpatch
- debian/patches/04_ldns-1.3.0_ldns-compare-zones.dpatch
-- Ondřej Surý <email address hidden> Thu, 20 Nov 2008 20:33:14 +0100
-
ldns (1.3.0-6) unstable; urgency=low
* Various improvements and fixes for ldns-compare-zones
- Change opt_* from int to bool
- Fix double zones read
- Canonicalize and sort zones before comparing (can be disabled
by -z)
-- Ondřej Surý <email address hidden> Tue, 30 Sep 2008 16:52:22 +0200
