File pdns.changes of Package pdns

-------------------------------------------------------------------
Fri Feb  3 13:00:34 UTC 2012 - nadvornik@suse.com

- fixed CVE-2012-0206 (bnc#740255)

-------------------------------------------------------------------
Wed Apr 28 10:28:51 UTC 2010 - mrueckert@suse.de

- create /var/run/pdns directory in the init script and package it
  as ghost.

-------------------------------------------------------------------
Wed Apr 28 00:46:52 UTC 2010 - mrueckert@suse.de

- fix feature guards

-------------------------------------------------------------------
Tue Apr 27 19:47:13 UTC 2010 - mrueckert@suse.de

- add pdns-2.9.22_missing_includes.patch:
  add missing includes

-------------------------------------------------------------------
Tue Jun  9 15:28:41 CEST 2009 - coolo@novell.com

- fix build with gcc 4.4

-------------------------------------------------------------------
Wed Jan 28 17:50:02 CET 2009 - mrueckert@suse.de

- updated to version 2.9.22
  "This is a huge release, spanning almost 20 months of
  development.  Besides fixing a lot of bugs, of note is the
  addition of the so called 'Notification Proxy', which allows
  PowerDNS to function as a master server behind a firewall, plus
  the huge performance improvement of the internal caches."
  http://doc.powerdns.com/changelog.html#CHANGELOG-AUTH-2-9-22
- updated pdns-2.9.21.1-wrong-pgsql.patch
  new name: pdns-2.9.22_wrong_pgsql.patch
- updated pdns-2.9.21.1_new_boost_exceptions.patch:
  most fixes went into 2.9.22. Just the LDAP chunk got lost
  somehow. Additional the new patch also fixes the odbc backend
  (we do not build this one, but the patch got also send upstream)
  new name pdns-2.9.22_new_boost_exceptions.patch
- dropped patches after upstream included them:
  pdns-2.9.21.1_gcc43.patch
  pdns-2.9.21.1_unversioned_modules.patch
- added pdns-2.9.22_warnings.patch:
  fix 2 small compiler warnings

-------------------------------------------------------------------
Tue Nov 18 20:29:21 CET 2008 - mrueckert@suse.de

- update to version 2.9.21.2: (bnc#445568)
  do not crash with HINFO CHAOS requests when configured with
  'distributor-threads=1'
- make default config more sane
- remove guardian commandline parameter. it was hiding the startup
  errors. If you want to use the guardian reenable it in the
  configuration file.
- mark init script as config

-------------------------------------------------------------------
Fri Nov 14 21:05:09 CET 2008 - mrueckert@suse.de

- make conditionals use suse_version instead of sles_version

-------------------------------------------------------------------
Thu Nov  6 15:56:56 CET 2008 - mrueckert@suse.de

- added pdns-2.9.21.1_new_boost_exceptions.patch:
  clearify the referenced exception class

-------------------------------------------------------------------
Fri Oct 17 15:28:48 CEST 2008 - ro@suse.de

- last change does not work yet, disable forcefully 

-------------------------------------------------------------------
Thu Aug 21 16:41:22 CEST 2008 - mrueckert@suse.de

- replaced conditional on #{opensuse_bs} with:
  #if #(echo "%distribution" | grep -Ec '^server:dns')

-------------------------------------------------------------------
Mon Aug 11 11:26:29 CEST 2008 - anosek@suse.cz

- updated to version 2.9.21.1
  - fixes security issue CVE-2008-3337 (bnc#415369) 

-------------------------------------------------------------------
Wed Apr 23 23:31:30 CEST 2008 - crrodriguez@suse.de

- fix build, wrong pq library detection.

-------------------------------------------------------------------
Sun Oct 28 19:52:07 CET 2007 - mrueckert@suse.de

- added pdns-2.9.21_gcc43.patch:
  fix nearly all warnings (patch is upstream)
- removed pdns-2.9.20-warnings.patch:
  better version included in pdns-2.9.21_gcc43.patch
- added README.opendbx:
  include documentation for the opendbx backend (buildservice only)

-------------------------------------------------------------------
Tue Sep 25 19:00:43 CEST 2007 - mrueckert@suse.de

- added pdns-2.9.21_unversioned_modules.patch:
  the plugins dont need versioning

-------------------------------------------------------------------
Tue Sep 25 18:19:28 CEST 2007 - mrueckert@suse.de

- reorder %package list to work around a bug in prepare_spec
  which breaks debuginfo packages

-------------------------------------------------------------------
Wed Apr 25 21:59:20 CEST 2007 - mrueckert@suse.de

- disable the patch again. i think it breaks for me on 64bit.

-------------------------------------------------------------------
Tue Apr 24 20:40:51 CEST 2007 - mrueckert@suse.de

- readd pdns-2.9.20-warnings.patch [#232489]

-------------------------------------------------------------------
Tue Apr 24 19:20:02 CEST 2007 - mrueckert@suse.de

- more tight permissions for the config dir as the config file can
  contain passwords

-------------------------------------------------------------------
Sat Apr 21 22:08:28 CEST 2007 - mrueckert@suse.de

- fix build on 64bit hosts
- sync with pdns-snapshot (pkg_name)

-------------------------------------------------------------------
Sat Apr 21 18:44:53 CEST 2007 - mrueckert@suse.de

- update to 2.9.21:
  - Bugs:
    - Multi-part TXT records weren't supported. This has been
      fixed, and regression tests have been added. Code in commits
      1016, 996, 994.
    - Email addresses with embedded dots in SOA records were not
      parsed correctly, nor were other embedded dots. Noted by
      'Bastiaan', fixed in commit 1026.
    - BIND backend treated the 'm' TTL modifier as 'months' and not
      'minutes'. Closes Debian bug 406462. Addressed in commit
      1026.
    - Our snapshots were built against a static version of
      PosgreSQL that was incompatible with many Linux
      distributions, leading to instant crashes on startup. Fixed
      in 1022 and 1023.
    - CNAME referrals to child zones gave improper responses. Noted
      by Augie Schwer in ticket 123, fixed in commit 992.
    - When passing a port number with the recursor setting, this
      would sometimes generate errors during additional processing.
      Switched off overly helpful additional processing for
      recursive queries to remove this problem. Implemented in
      commit 1031, spotted by Ralf van der Enden.
    - NS to a nameserver with the name of the zone itself generated
      problems. Spotted by Augie Schwer, fixed in commit 947.
    - Multi-line records in the BIND backend were not always parsed
      correctly. Fixed in commit 1014.
    - The LOC-record had problems operating outside of the eastern
      hemisphere of the northern part of the world! Fixed in commit
      1011.
    - Backends were compiled without multithreading preprocessor
      flags. As far as we can determine, this would only cause
      problems for the BIND backend, but we cannot rule out this
      caused instability in other backends. Fixed in commit 1001.
    - The BIND backend was highly unstable under reloads, and
      leaked memory and file descriptors. Thanks to Mark Bergsma
      and Massimo Bandinelli for respectively pointing this out to
      us and testing large amounts of patches to fix the problem.
      The fixes have resulted in better performance, less code, and
      a remarkable simplification of this backend. Commits 1039,
      1034, 1035, 1006, 999, 905 and previous.
    - BIND backend gave convincing NXDOMAINS on unloaded zones in
      some cases. Spotted and fixed by Daniel Bilik in commit 984.
    - SOA records in zone transfers sometimes contained the wrong
      SOA TTL. Spotted by Christian Kuehn, fixed in commit 902.
    - PowerDNS could get confused by very high SOA serial numbers.
      Spotted and fixed by Dan Billik, fixed in commit 626.
    - Some versions of FreeBSD perform very strict checks on socket
      address sizes passed to 'connect', which could lead to
      problems retrieving zones over AXFR. Fixed in commit 891.
    - Some versions of FreeBSD perform very strict checks on IPv6
      socket addresses, leading to problems. Discovered by Sten
      Spans, fixed in commit 885 and commit 886.
    - IXFR requests were not logged properly. Noted by Ralf van der
      Enden, fixed in commit 990.
    - Some NAPTR records needed an additional space character to
      encode correctly. Spotted by Heinrich Ruthensteiner, fixed in
      commit 1029.
    - Many bugs in the TCP nameserver, leading to a PowerDNS
      process that did not respond to TCP queries over time. Many
      fixes provided by Dan Bilik, other problems were fixed by
      rewriting our TCP handling code. Commits 982 and 980, 950,
      924, 889, 874, 869, 685, 684.
    - Fix crashes on the ARM processor due to alignment errors.
      Thanks to Sjoerd Simons. Closes Debian bug 397031.
    - Missing data in generic SQL backends would sometimes lead to
      faked SOA serial data. Spotted by Leander Lakkas from True.
      Fix in commit 866.
    - When receiving two quick notifications in succession, the
      packet cache would sometimes "process" the second one,
      leading PowerDNS to ignore it. Spotted by Dan Bilik, fixed in
      commit 686.
    - Geobackend (by Mark Bergsma) did not properly override the
      getSOA method, breaking non-overlay operation of this fine
      backend. The geobackend now also skips '.hidden'
      configuration files, and now properly disregards empty
      configuration files. Additionally, the overlapping abilities
      were improved. Details available in commit 876, by Mark.
  - Features:
    - Thanks to EasyDNS, PowerDNS now supports multiple masters per
      domain. For configuration details, see Section 13.2.
      Implemented in commit 1018, commit 1017.
    - Thanks to EasyDNS, PowerDNS now supports the KEY record type,
      as well the SPF record. In commit 976.
    - Added support for CERT, SSHFP, DNSKEY, DS, NSEC, RRSIG record
      types, as part of the move to the new DNS parsing/generating
      code.
    - Support for the AFSDB record type, as requested by 'Bastian'.
      Implemented in commit 978, closing ticket 129.
    - Support for the MR record type. Implemented in commit 941 and
      commit 1019.
    - Gsqlite3 backend was added by Antony Lesuisse in commit 942;
    - Added the ability to send out light-weight root-referrals
      that save bandwidth yet still placate mediocre resolver
      implementations. Implemented in commit 912, enable with
      'root-referral=lean'.
  - Improvements:
    - Miscellaneous OpenDBX and LDAP backend improvements by
      Norbert Sendetzky. Applied in commit 977 and commit 1040.
    - SGML source of the documentation was cleaned up by Ruben
      Kerkhof in commit 936.
    - Speedups in core DNS label processing code. Implemented in
      commit 928, commit 654, commit 1020.
    - When communicating with master servers and encountering
      errors, more useful details are logged. Reported by Stefan
      Arentz in ticket 137, closed by commit 1015.
    - Database errors are now logged with more details. Addressed
      in commit 1004.
    - pdns_control problems are now logged more verbosely. Change
      in commit 910.
    - Erroneous address configuration was logged unclearly. Spotted
      by River Tarnell, fixed in commit 888.
    - Example configuration shipped with PowerDNS was very old.
      Noted by Leen Besselink, fixed in commit 946.
    - PowerDNS neglected to chdir to the root when chrooted. This
      closes ticket 110, fixed in commit 944.
    - Microsoft resolver had problems with responses we generated
      for CNAMEs pointing out of our bailiwick. Fixed in commit 983
          and expedited by Locaweb.com.br.
    - Built-in webserver logs errors more verbosely. Closes ticket
      82, gixed in commit 991.
    - Queries containing '@' no longer flood the logs. Addressed in
      commit 1014.
    - The build process now looks for PostgreSQL in more places.
      Implemented in commit 998, closes ticket 90.
    - Speedups in the BIND backend now mean large installations
      enjoy startup times up to 30 times faster than with the
      original BIND nameserver. Many thanks to Massimo Bandinelli.
    - BIND backend now offers full support for query logging,
      implemented in commit 1026, commit 1029.
    - BIND backend named.conf parsing is now fully case-insensitive
      for domain names. This closes Debian bug 406461, fixed in
          commit 1027.
    - IPv6 and IPv4 address parsing routines have been replaced,
      which should result in prettier output in some cases. commit
      962, commit 1012 and others.
    - 5 new regression tests have been added to insure old bugs do
      not return.
    - Fix small issues with very modern compilers and BOOST
      snapshots. Noted by Marcus Rueckert, addressed in commit 954,
      commit 964 commit 965, commit 1003.
- removed patches as they are included upstream:
  opendbxbackend_2.9.20-5.diff
  pdns-2.9.17_cve-2006-4251.patch
  pdns-2.9.19-CVE-2006-2069.patch
  pdns-2.9.20_2006-02.patch
- added sqlite3 backend
- the spec file should now build on sles9 aswell.

-------------------------------------------------------------------
Thu Mar 29 18:40:56 CEST 2007 - mrueckert@suse.de

- update opendbxbackend_2.9.20-3.diff to
  opendbxbackend_2.9.20-5.diff
- added pwdutil and gdbm-devel

-------------------------------------------------------------------
Tue Jan  9 14:06:22 CET 2007 - anosek@suse.cz

- fixed compiler warning: integer operation result is out of range
  [#232489] (warnings.patch)

-------------------------------------------------------------------
Mon Nov 13 16:11:47 CET 2006 - mrueckert@suse.de

- added pdns-2.9.20_2006-02.patch:
  fix an endless recursion in CNAME handling [#219355]

-------------------------------------------------------------------
Sat Nov 11 22:52:52 CET 2006 - mrueckert@suse.de

- added pdns-2.9.17_cve-2006-4251.patch:
  fix a stack corruption with malformed packages [#219355]

-------------------------------------------------------------------
Thu Oct 19 18:48:38 CEST 2006 - mrueckert@suse.de

- this is a sync to the buildservice package in server:dns:
- remove .la files

-------------------------------------------------------------------
Fri Oct 13 12:00:00 CEST 2006 - mrueckert@suse.de

- added opendbxbackend_2.9.20-3.diff:
  updates the opendbx backend to the latest version

-------------------------------------------------------------------
Fri May 19 12:00:00 CEST 2006 - mrueckert@suse.de

- disable the recursor as we use the newer external package.

-------------------------------------------------------------------
Thu May  4 15:57:55 CEST 2006 - nadvornik@suse.cz

- fixed crash on malformed packets CVE-2006-2069 [#170542]

-------------------------------------------------------------------
Sun Mar 26 12:00:00 CEST 2006 - mrueckert@suse.de

- fixed Requires for the subpackages

-------------------------------------------------------------------
Sat Mar 25 12:00:00 CEST 2006 - mrueckert@suse.de

- update to 2.9.20:
  Besides adding OpenDBX, this release is mostly about fixing
  problems and speeding up the recursor.
- disabled static support
- removed rm for the .a files
- splitted of the backends that pull in new dependencies
- removed patch. applied upstream.

-------------------------------------------------------------------
Wed Jan 25 21:39:24 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Tue Nov  1 14:17:15 CET 2005 - nadvornik@suse.cz

- updated to 2.9.19

-------------------------------------------------------------------
Tue Jun  7 14:33:49 CEST 2005 - nadvornik@suse.cz

- fixed init scripts
- used patches from http://www.linuxnetworks.de/pdnsldap/index.html

-------------------------------------------------------------------
Wed Apr 20 12:49:37 CEST 2005 - nadvornik@suse.cz

- fixed to compile on x86_64 with gcc4

-------------------------------------------------------------------
Fri Mar 11 15:53:10 CET 2005 - nadvornik@suse.cz

- installed html documentation [#71738]

-------------------------------------------------------------------
Wed Feb 16 15:36:18 CET 2005 - nadvornik@suse.cz

- new package

openSUSE Build Service is sponsored by