knot-resolver (5.5.3-1) [PTS] [DDPO]

COMMITS: VCS has seen 15 commits since the debian/5.5.2-1 tag

Git: https://salsa.debian.org/dns-team/knot-resolver.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/master
Path: debian/changelog
Browser: https://salsa.debian.org/dns-team/knot-resolver
Last scan: 2022-11-25 02:43:13+00
Next scan: 2022-12-01 08:56:00+00
CI pipeline status: success

Debian changelog in Git:

knot-resolver (5.5.3-1) unstable; urgency=medium

  * New upstream release
    - Resolves CVE-2022-40188

 -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 22 Sep 2022 05:34:20 +0000

This branch is 15 commits ahead of tag debian/5.5.2-1

Git log:

commit 9df3a7492f9e005f110b96d50b1a54e5177b972e
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu Sep 22 07:38:29 2022 +0200

    Release 5.5.3-1

commit c95a47b5e3b8ba4a8208bc370a9fd366de8f1cce
Merge: 7b2daf3e5 2c7f3331d
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu Sep 22 05:32:31 2022 +0000

    Update upstream source from tag 'upstream/5.5.3'
    
    Update to upstream version '5.5.3'
    with Debian dir 6e7d82afff9b6261ffa297c37e63db9e341429b7

commit 2c7f3331d8bc2fb8e23946387817543de9e5da3d
Merge: 8fbd1693d 519080319
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu Sep 22 05:32:27 2022 +0000

    New upstream version 5.5.3

commit 519080319a2c32b9248435b8cf546affd6f64a5e
Merge: 263bd38dc 3cf7727fe
Author: Aleš Mrázek <ales.mrazek@nic.cz>
Date:   Wed Sep 21 14:09:25 2022 +0200

    Merge branch 'release-5.5.3' into 'master'
    
    release 5.5.3
    
    See merge request knot/knot-resolver!1343

commit 3cf7727fe019820de9fc1879bae4b443928d8b13
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Sep 16 13:28:52 2022 +0200

    release 5.5.3

commit f6577a20e493c7fbdac124d7544bf1846b084185
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Aug 17 16:34:06 2022 +0200

    lib/zonecut + iterator: limit large NS sets
    
    It's a mitigation for CVE-2022-40188 and similar DoS attempts.
    It's using really trivial approaches, at least for now.

commit 263bd38dc8253aef35a82c8f1ab9db06b845aed0
Merge: a8472be36 27fc29138
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Aug 26 12:46:42 2022 +0200

    Merge !1340: ci macOS: add Knot 3.2

commit 27fc29138151ebdbaeddd0c717e8c7ff1cae4599
Author: Oto Šťáva <oto.stava@nic.cz>
Date:   Fri Aug 26 12:46:42 2022 +0200

    ci macOS: add Knot 3.2

commit a8472be36ec43fb679da155646ea7c8fd98cbef1
Merge: 0a635e363 c098925d2
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Aug 25 21:17:10 2022 +0200

    Merge !1339: cache test: loosen conditions on cache usage

commit c098925d250bdc821e11849b03696f97f084c9b1
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Aug 25 21:14:25 2022 +0200

    NEWS: mention config_tests for macOS

commit adaac913c50a5db2f226a081ddc419b0d56d1757
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Aug 25 18:02:03 2022 +0200

    cache test: loosen conditions on cache usage
    
    This fixes config_tests on aarch64 macOS.
    The key difference is that they use 16k pages,
    so LMDB space usage also behaves a bit different.

commit 0a635e363430b924dcdcbee379efb67f3ff47c5d
Merge: 8b6e838e5 48ad9d436
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Aug 24 18:04:34 2022 +0200

    Merge !1338: macOS nits

commit 48ad9d436cf80f58c107774c313a561d852148a0
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Aug 24 11:51:49 2022 +0200

    tests/config: skip `freebind` sub-test on macOS
    
    That option isn't supported there, so the test wouldn't work.
    Now the config tests work for me on x86 macOS.

commit 61ee889228386c30af595f7448c49e6f8d22894f
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Aug 24 11:50:14 2022 +0200

    daemon/http nit: silence a warning
    
    Enums are more like ints anyway (in standard),
    even when drawn from a small subset.

commit 07bfefe40b8b0c9d72576b075bb01aac6c84c5ee
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Aug 24 10:58:26 2022 +0200

    daemon/io: log another message if `freebind` isn't supported
    
    So far the message wasn't pointing to freebind at all:
    [net   ] bind to '::1@53' (UDP): Operation not supported
    
    I used preprocessor to avoid duplication and unused warnings.
    
    Another way would be to ignore the freebind option if not supported,
    but I think it's better to convince users not to specify it.