knot (3.1.5-1) [PTS] [DDPO]

COMMITS: VCS has seen 52 commits since the debian/3.1.4-1 tag

Git: https://salsa.debian.org/dns-team/knot-dns.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/master
Path: debian/changelog
Browser: https://salsa.debian.org/dns-team/knot-dns
Last scan: 2022-01-24 06:26:06+00
Next scan: 2022-02-01 18:06:00+00
Merge requests: 1
CI pipeline status: failed

Debian changelog in Git:

knot (3.1.5-1) unstable; urgency=medium

  * new upstream version 3.1.5

 -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 04 Jan 2022 14:59:07 +0000

This branch is 52 commits ahead of tag debian/3.1.4-1

Git log:

commit 4c8cf96d4fd28856efa58ed9ce3c9abf66f59ca5
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Tue Jan 4 16:01:16 2022 +0100

    d/changelog: release 3.1.5-1

commit a8b293088b4c2c3b3af028db3117bfed0b0c9ef8
Merge: 6ee7ac2db b2fdab6a7
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Tue Jan 4 14:38:39 2022 +0000

    Update upstream source from tag 'upstream/3.1.5'
    
    Update to upstream version '3.1.5'
    with Debian dir 9d5a5ea248bdc8581e7420bd60b207047ed54545

commit b2fdab6a7ef6c09022c8cd714ec04beef34d2513
Merge: 5ce73ff88 55203c241
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Tue Jan 4 14:38:32 2022 +0000

    New upstream version 3.1.5

commit 55203c241626f21fb3eb8c7771f60bc640742c22
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Dec 20 14:30:35 2021 +0100

    Bump version 3.1.5

commit 0d0aca81c2ff7f029bb93509b7a50361e2b800be
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Dec 20 14:30:15 2021 +0100

    NEWS: add version 3.1.5

commit 269357600c47c12d78788920a30c173608a6121b
Author: David Vašek <david.vasek@nic.cz>
Date:   Mon Dec 20 13:54:08 2021 +0100

    tests-extra: ctl/basic -- call zone-purge in the blocking mode

commit cd8068d80d633bccf038ade868e72f7aac8b8059
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Mon Dec 20 14:14:01 2021 +0100

    tests: test pre-check of mod-geoip configuration

commit e739979f6f003822b5d8be5a8e986520feaeeb90
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Thu Dec 16 20:29:19 2021 +0100

    knotc: conf-check checks also configuration database

commit cefcb657fa2684337432be5afb89b27bbd133cd9
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Thu Dec 16 14:24:01 2021 +0100

    geoip: check the module configuration file during the general configuration checks

commit 6c51a1111c1bd0a8859eccf71f676ec215d3268f
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Thu Dec 16 10:05:13 2021 +0100

    geoip: move geodb-key checks to geoip_conf_check()

commit 6ecfe33782ed989293a4f3bdaed44f0bb38f2d72
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Sat Dec 18 21:35:43 2021 +0100

    NEWS: synchronize with the 3.0 branch

commit 1b24ef3902cbebe3bffef4e384bf2d8b2366efc5
Author: David Vašek <david.vasek@nic.cz>
Date:   Thu Dec 16 23:38:58 2021 +0100

    ctl/purge: add a simple error logging

commit 91eb876cfe76eb1802c1eabb0f0839346e347412
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Wed Dec 15 16:14:36 2021 +0100

    libdnssec: fix memleak when pkcs8_import_key() fails

commit c3a09b37924556af5c110b0b64ef38e7a75f4cb3
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Tue Dec 14 12:16:25 2021 +0100

    knot: change server.remote-retry-delay units from seconds to milliseconds

commit 0b6e10256575c416f4d882503a2a270fb4650796
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Thu Dec 2 16:16:25 2021 +0100

    unreachables: use list_t and unlimited number of remotes

commit 873ee762e346389841ab06d2be09373da6898259
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Thu Dec 2 15:28:27 2021 +0100

    unreachables: also consider local 'via' address

commit 3719b4b435f442d008cf6e77747c00c4fd52ecff
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Mon Nov 29 11:19:27 2021 +0100

    requestor: return proper errcode when send fails

commit 6ef979ee2bdefcd114bf92604b2b44faa523a836
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Fri Nov 26 18:10:05 2021 +0100

    implemented tracking of unreachable remotes

commit ff8091584b0a61614530b012b1c4dc9a016c2d99
Author: Jan Hák <jan.hak@nic.cz>
Date:   Tue Dec 14 14:50:39 2021 +0100

    kdig: fix empty server in program arguments

commit 3d0f94a973413fe1f50988088d93170b3729385d
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Sun Dec 12 20:45:02 2021 +0100

    conn-pool: ignore source port in conn_pool_get() in case if set

commit 7dedda711225b07951a041109172faefd4f3e008
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Sat Dec 11 19:32:27 2021 +0100

    doc: update key log order during key rollovers

commit 998268c97328f18257f7b73ece39a964b4991c34
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Fri Dec 10 16:20:15 2021 +0100

    dnssec: rrsig-refresh: warn if too low

commit 9d7a56a6f68a5fbaa5e678cc9d5189b05c9f05b4
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Fri Dec 10 12:14:41 2021 +0100

    DS push: use DNSKEY TTL for parent DS

commit 9bc55edeeb1d415fd4bb2445c4d182a0cd713c6f
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Tue Dec 7 13:27:48 2021 +0100

    conf: add check on using the default number of NSEC3 iterations

commit 9ce21f6a2c08725c413c1461efd3255c79135be8
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Tue Dec 7 12:57:10 2021 +0100

    tests-extra: enable ldns-verify-zone for alg rollovers (it works with new versions)

commit fb1e968c24a6574f284ea2608d1c66c4e9522cf3
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Fri Dec 3 15:36:28 2021 +0100

    tests: scenario of alg roll with offline KSK

commit 0ac7ae908eb39b3422ae836d398cb2de456664f8
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Tue Dec 7 10:56:49 2021 +0100

    libknot/dname: improve knot_dname_lf() output description

commit 59573ab34987e6cc0b5b9896837c7c5a61e5baf7
Author: Robert Edmonds <edmonds@users.noreply.github.com>
Date:   Mon Dec 6 15:12:57 2021 -0500

    mod-dnstap: Fix corner case in "Restore the original query QNAME case"
    
    Previously, after "mod-dnstap: Restore the original query QNAME case",
    the dnstap module would copy the original QNAME into the query packet
    buffer passed to the dnstap module, so that the originally cased query
    message would be written out to the dnstap logging stream.
    
    However, there are error conditions that can result in the query
    packet's 'qname_size' field being updated to a non-zero value (the
    question section was successfully parsed), but the packet was ultimately
    rejected.
    
    In the prepare_answer() function in src/knot/nameserver/process_query.c,
    there are several error return paths that prevent the 'orig_qname' field
    from being written by the call to memcpy(). In this case, the
    'orig_qname' field in the corresponding knotd_qdata_extra_t object will
    remain at an initialized (zeroed out) value.
    
    Before this patch, in some cases (e.g. in responses to some queries that
    return FORMERR), mod-dnstap would overwrite the QNAME in the query
    packet buffer with 'qname_size' bytes from the 'orig_qname' field. With
    'qname_size' set to a non-zero value (due to successful parsing of the
    QNAME) but with 'orig_qname' set to its original initialized (zeroed
    out) value, this would result in zeroing out the QNAME in the query
    packet buffer. This would then result in writing a corrupted query
    message into the dnstap logging stream.
    
    Since mod-dnstap writes directly to the query packet buffer rather than
    making a copy, this corruption would also be visible to modules
    executing after mod-dnstap as well as the rest of knotd.
    
    This patch updates mod-dnstap's msg_query_qname_restore() so that it
    avoids copying the original QNAME into the query packet buffer if the
    'orig_qname' field has been left in its initialized (zeroed out) value.
    
    fixes #777

commit d0cabd50e8d2428660931fdf9cbd4b98ab4067e9
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Sat Dec 4 15:36:50 2021 +0100

    ctl: log the command for all zones specified (not just the first one)

commit 580be077e1ed23d85ec624e0622f7bd10702905c
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Wed Dec 1 16:14:45 2021 +0100

    dnsproxy: add optional source address match option

commit de549baeb8e6c13d5095b3c0e2bcfb11f21cf957
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Mon Nov 22 19:08:34 2021 +0100

    tests: compatibility with new Bind

commit 07c0bbf505d8e11254b2b57661eb5c400bdf3aa1
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Nov 29 12:38:27 2021 +0100

    conn-pool: add missing pthread_join() to conn_pool_deinit()

commit f39077dc763cbb9e62cc1aa3b59fc6ca4cd6a065
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Fri Nov 26 12:43:16 2021 +0100

    conn-pool: add remote-pool-limit reconfiguration check

commit 31d91e83aa7be3b0679365f1e3c5b609190aff9d
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Thu Nov 25 12:27:18 2021 +0100

    conn-pool: hide conn_pool_get_old()

commit 2cb3fa0c54876989996f2ea93d1aab0f81731e5b
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Wed Nov 24 14:15:00 2021 +0100

    conn-pool: replace conn_pool_put_force() with conn_pool_put()

commit 2298b0eb55003c06b444df4a66318b408217aca5
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Wed Oct 27 11:19:56 2021 +0200

    conn-pool: only keep conn when request finished and ok

commit 925bc2da5763bb7ce66fd774561a001b46a5b840
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Wed Oct 27 11:18:48 2021 +0200

    conn-pool: dont reuse conns that have pending data

commit 1b75158ba6f7b95f7cde96866e6f801d2bc5b7f4
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Fri Oct 22 11:51:44 2021 +0200

    implemented pool of opened outgoing conenctions

commit 986edb5198a8d795d920b83ee7d1bc91862947a9
Author: Josh Soref <jsoref@users.noreply.github.com>
Date:   Wed Nov 24 13:28:15 2021 +0100

    spelling (partial backport)
    
    Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

commit 54ebbc03084e0c5ea492760b4e757b459622f2cb
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Mon Sep 20 17:55:31 2021 +0200

    xdp-tcp: bugfix: incomming RST has no ackno

commit b625d102296cfb18036d1f697ec056cae25a8971
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Wed Sep 8 17:22:25 2021 +0200

    xdp-tcp: bugfix: better handling of different conn-closing states

commit 87c2285c4b075052087a2dcde49dc5eae9d5e32d
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Fri Nov 19 17:10:59 2021 +0100

    scripts: add probe_dump.py

commit addb2c599a0e8ed4dbcdb21811071820e02ab2a2
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Fri Nov 19 11:21:15 2021 +0100

    python: various probe improvements

commit 67f4b9e059a2b81779fda35e4da390b8d48c7de5
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Nov 22 13:38:20 2021 +0100

    scripts: extend Makefile.docker
    
    - Enabled fastparser
    - Temporarily disabled unittests (dthreads test fails on armhf)
    - Added release tag

commit 5ff33fa9e195e996b4240d215f1569501c30e7c3
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Nov 22 13:27:25 2021 +0100

    Dockerfile: add options and improve building
    
    - New option FASTPARSER=disable|enable
    - New option CHECK=disable|enable for unittests execution
    - Explicit CFLAGS="-g -O2 -DNDEBUG -D_FORTIFY_SOURCE=2 -fstack-protector-strong"
    - Added --enable-dnstap

commit 49b5d4124b82d9d7549bf121465d4e2d9c60053e
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Nov 15 09:19:04 2021 +0100

    doc: hightlight impact on XFR for tcp-io-timeout

commit d4e678c8225564358901df783eab2302f468cd01
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Nov 15 09:11:53 2021 +0100

    tcp-handler: improve debug message when tcp-io-timeout is reached

commit 125e056a7306659f72b4e97ab1580a48e95e678c
Author: Daniel Salzman <daniel.salzman@nic.cz>
Date:   Mon Nov 15 08:22:55 2021 +0100

    load: add zone file name to info/error log message

commit 8ca91599b8a07ecfe902079823a679debbc928cc
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Tue Nov 2 11:59:06 2021 +0100

    fixed minor memleak when zone-in-journal serialization fails

commit efa9bdafb09525ed68d8847e6c68bf55b161bcee
Author: Libor Peltan <libor.peltan@nic.cz>
Date:   Tue Nov 2 11:36:36 2021 +0100

    fixed minor memleak when full update fails writing journal

commit e5dd1d5e52d35a25181d8139dfe40194f60a765d
Author: David Vašek <david.vasek@nic.cz>
Date:   Wed Nov 10 13:47:13 2021 +0100

    tests: dynarray -- test removal of duplicate items

commit fccbd1e385d680aaee622e8290aac6015199913e
Author: David Vašek <david.vasek@nic.cz>
Date:   Sat Nov 6 00:40:23 2021 +0100

    dynarray: when removing an item by replacing it with the last one, check that item too
    
    This prevents a situtation when the deleted item may repeat in the array.
    This solution is based on the assumption that the duplicate entries are rather rare.