<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3">
<package pkgid="f93abc221526cf9fc24bb1aba498188989fef9bbb64c00a2ef01864fb20d86ea5454f0da2121e13ad0d9d4205712ed1e2c07ba298a2bcbdf54d89c5f34cfe8e7" name="nsd" arch="i586">
  <version epoch="0" ver="4.14.3" rel="1.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1652529600">- New upstream release 4.5.0
  FEATURES:
- Merge PR #209: IXFR out
  This adds IXFR out functionality to NSD. NSD can copy IXFRs from
  upstream to downstream clients, or create IXFRs from zonefiles.
  The options store-ixfr: yes and create-ixfr: yes can be used to
  turn this on. Default is turned off. The options ixfr-number and
  ixfr-size can be used to tune the number of IXFR transfers and
  total data size stored. This is configured per zone, the IXFRs
  are served to the hosts that are allowed to perform zone transfers.
  And if TSIG is configured, signed with the same key. The content
  is stored to file if a zonefile is configured for the zone, in
  the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain
  readable text format. The number of IXFRs is num.rixfr in
  statistics output, also per zone if per zone statistics are enabled.
  If offline, nsd-checkzone -i can create ixfr files.
  NSD already supports requesting IXFRs, this addition allows NSD
  to serve IXFR transfers to clients.
  NSD stops responding with NOTIMPL to IXFR requests, also for zones
  that do not have IXFR enabled. The clients gets a full zone reply
  or a status reply if the serial is up to date.
  BUG FIXES:
- Fix code analyzer zero divide warning.
- Fix code analyzer large value with assertion.
- Fix another code analyzer zero divide warning.
- Fix code analyzer warning about uninitialized temp storage in loop.
- Fix spelling error in comment in svcbparam_lookup_key.
- Update cirrus script FreeBSD version.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1656676800">- New upstream release 4.6.0
  FEATURES:
- Port zone-verification from CreDNS to NSD4.
  BUG FIXES:
- Fix static analyzer reports on ixfrcreate temp file.
- Fixup wrong ixfrcreate fread return check.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1668081600">- New upstream release 4.6.1
  FEATURES:
- Set ALPN "dot" token during connection establishment as per RFC9103
  section 7.1 (Thanks Cesar Kuroiwa).
- Add SVCB dohpath support
  BUG FIXES:
- Fix static analyzer reports, fix wrong log print when skipping xfr,
  fix to print error on pipe read fail, and assert an xfr is in
  progress during packet checks.
- Use AC_PROG_CC_STDC with autoconf versions prior to 2.70.
- Add missing documentation for zone verification.
- Fix #212: Change commandline control actions to always log.
- Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work
  on OpenBSD.
- Change zone parsing to accept non-trailing newline.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1687348800">- New upstream release 4.7.0
  This release adds a script for bash autocompletion for nsd-control. Also
  nsd-control can be configured to use unencrypted operation also when
  compiled without openssl. There is also a systemd service unit example
  file contributed. The dnstap log service can be contacted over TCP, with
  the dnstap-ip: ip option. It is also possible to use TLS, with
  dnstap-tls, it is enabled by default, and can be configured with the
  dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
  dnstap-client-cert-file options.
  FEATURES:
  * Fix #267: Allow unencrypted local operation of nsd-control.
  * Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
  * dnstap over TLS, default enabled. Configured with the
    options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
    dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
  BUGFIXES:
    see https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_7_0_REL</changelog>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1691150400">- Adapt spec file to work nicer with containers, like no systemd
- Fix build for SLE12</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706529600">- update to 4.8.0:
  * Fix unit test kill_from_pidfile function for nonexistent
    files because the argument is evaluated before the test
    expression.
  * Fix rr-test to also convert the contents of the just written
    output file.
  * Fix test set to remove -f nsd.db and rm nsd.db commands.
  * Fix test set to remove difffile option.
  * Fix #14: Set timeout to 3s when servicing remaining TCP
    connections.
  * Fix: Always instate write handler after reading queries from
    TCP.
  * Answer first query on connections accepted just before
    reload.
  * Merge #305: faster stats. Statistics can be gathered while a
    reload is in progress.
  * Remove on-disk database.
  * Fix processing of consolidated IXFRs.
  * Fix for interprocess communication to set quit sync command
    from main process explicitly.
  * Merge #281: Proxy protocol. An implementation of PROXYv2 for
    NSD.
  * It can be configured with proxy-protocol-port: portnum with
    the port number of the interface on which proxy traffic is
    handled.
  * The interface can support proxy traffic for UDP, TCP and
    TLS.
  * Fix autoconf 2.69 warnings in configure.
  * Merge #287: Update nsd.conf.5.in.
  * Fix unused variable warning in unit test of udb.
  * Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available
    on Mac/Darwin.
  * Fix unused but set variable warning.
    bind8-stats and --without-ssl are specified.
  * Add missing items to doc/RELNOTES.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1708948800">- As far as it is known the kernel has a working recvmmsg
  pass --enable-recvmmsg to configure.
- Don't --enable-mmap. Replacing malloc may sound attractive but
  all safety checks to prevent corruption included in libc are lost.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1763467200">- update to 4.13.0:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog
- enable systemd notify support. New Buildrequires:
  pkgconfig(systemd) pkgconfig(libsystemd)
- enable dnstap support. New BuildRequires:
  libfstrm-devel libprotobuf-c-devel protobuf-c
- enable tcp fast open support
- enable support for &gt;= 2038</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783080000">- update to 4.14.3:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog
- update to 4.14.2:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog
- update to 4.14.1:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog
- update to 4.14.0:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog
- add new Requires for openssl, as this is needed for the
  nsd-control-setup script to generate the certificates</changelog>
</package>
<package pkgid="206f303c133b6221c1fc6f374d1562a3634b5b6bc70ba152d469370f0957489734f04996fd6ea939a0ce35304312d1302c9510c6ad0f2beb6452ca7c3afda021" name="nsd" arch="src">
  <version epoch="0" ver="4.14.3" rel="1.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611662400">- New upstream release 4.3.5
  BUG FIXES:
- Fix #143: xfrd no hysteresis with NOT IMPLEMENTED rcode.
- Fix #144: Typo fix in nsd.conf.5.in.
- For #145: Fix that service of remaining TCP and TLS connections
  does not allow new queries to be made, the connection is closed.
  Only existing queries and zone transfers are answered, new ones
  are rejected by a close of the channel.
- Fix that nsd-control has timeout when connection is down.
- remove windows socket ifdefs from nsd-control.
- Fix #148: CNAME need not be followed after a synthesized CNAME
  for a CNAME query.
- Fix configure.ac for autoconf 2.70.
- Fix #150: TXT record validation difference with BIND.
- Fix #151: DNAME not applied more than once to resolve the query.
- Fix #152: '*' in Rdata causes the return code to be NOERROR instead
  of NX.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1617710400">- New upstream release 4.3.6
  FEATURES:
- Fix #146 with #147: DNSTAP log the local address of the server
  with the dnstap logs.
- Enable configuring a control-interface by interface name.
- A -p option to nsd-checkzone to print a successfully read zone.
- Add Extended DNS Errors RFC8914
- Per zone Access Control List for queries
  with an allow-query: option.
  BUG FIXES:
- Prevent a few more yacc clashes.
- Merge PR #153 from fobser: Repair -fno-common linker errors
  automatically.
- Fix uninitialized access of log_buf in error printout on apply ixfr.
- Fix AF_LOCAL compile error for Solaris.
- Fix ifaddrs compile error for Solaris.
- Fix ifaddrs.h compile error for Solaris.
- Man page documentation for dnstap options.
- Fix segfault on high verbosity for TLS channels with dnstap log
  local address.
- Fix #163: A TSIG noncompliance with RFC 2845.
- Fix that wildcard is printed as a star instead of escaped, in
  logs and in written zone files.
- Fix double config.h include in configlexer.c
- Fix to remove configyyrename from makedist.sh and also
  update the flex and bison rules there to add the "c_" prefix.
- Fix configure to use header checks with compile.
- Fix warning about unused function log_addr.
- Fix #154: TXT with parentheses fails in 4.3.5.
- Align parsing of TXT elements with how bind does it.
- Fix configure failure for enable systemd because of autoconf.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626955200">- New upstream release 4.3.7
  FEATURES:
- Syntax of SVCB and HTTPS RR type as per draft-ietf-dnsop-svcb-https
- Client side DNS Zone Transfer-over-TLS (XoT) support as per
  draft-ietf-dprive-xfr-over-tls
- Interoperable DNS Cookies support as per RFC7873 and RFC9018
  BUG FIXES:
- Fix for #170: Fix build warnings when IPv6 is disabled.
- Fix #170: Disabled IPv6 and DNSTAP enabled triggers a build error.
- Fix for #128: Skip over sendmmsg invalid argument when port is zero.
- Fix #171: Invalid negative response (NSEC3) after IXFR.
- Fix to make nsec3_chain_find_prev return NULL if one nsec3 left.
- Fix #174: NS Records below delegation are not ignored (nsd-checkzone
  also does not raise any issue).
- Fix #176: please review Loglevel on missing zonefile.
- Update the ACX_CHECK_NONBLOCKING_BROKEN test for the configure
  script.
- Fix #179: log notice and server-count.
- Update configure nonblocking test to use host.
- Fix #168: Buffer overflow in the dname_to_string() function
- Fixes for child server processes getting out of sync with the
  dnstap-collector process
- Fix gcc-11 warning on array bounds.
- Fix compile of cookies on FreeBSD without IPv6.
- Fix for loop initial declaration for nonc99 compiler
- Fix typo in xfrd-tcp.c.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634040000">- New upstream release 4.3.8
  FEATURES:
- Merge #185 by cesarkuroiwa: Mutual TLS.
- Set default for answer-cookie to no. Because in server deployments
  with mixed server software, a default of yes causes issues.
  BUG FIXES:
- Fix to compile with OpenSSL 3.0.0beta2.
- Fix configure detection of SSL_CTX_set_security_level.
- Fix deprecated functions use from openssl 3.0.0beta2.
- For #184: Note that all zones can be targeted by some nsd-control
  commands in the man page.
- Fixes for #185: Document client-cert, client-key and client-key-pw
  in the man page. Fix yacc semicolon. Fix unused variable warning.
  Use strlcpy instead of strncpy. Fix spelling error in error
  printout.
- Merge #187: Support using system-wide crypto policies.
- Fix #188: NSD fails to build against openssl 1.1 on CentOS 7.
- Fix sed script in ssldir split handling.
- Fix #189: nsd 4.3.7 crash answer_delegation: Assertion
  `query-&gt;delegation_rrset' failed.
- Fix #190: NSD returns 3 NSEC3 records for NODATA response.
- Fix compile failure with openssl 1.0.2.
- Fix #194: Incorrect NSEC3 response for SOA query below delegation
  point.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634040001">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * nsd.service</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634040002">- reworked nsd.service:
  * directly start as User=_nsd
  * even more hardening
  * removed commented and unused directives</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634126400">- set RestrictAddressFamilies= in nsd.service</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636804800">- adjusted SystemCallFilter= in nsd.service</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639051200">- New upstream release 4.3.9
  * Fix #198: nsd-control reconfig core dump.
  * Fix to remove git tracking and ci information from release tarballs.
  * Fix unit tests for new answer-cookie default.
  * Fix socket_partitioning unit test for FreeBSD.
  * Fix SVCB test to work around older dig with drill.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1645099200">- New upstream release 4.4.0
  FEATURES:
- Merge #193: Lower memory usage of the XFRD process by default.
  Instead of preallocating all elements, they are allocated when used.
  There are options for managing the memory usage, defaults are the
  same as before. xfrd-tcp-max sets the number of sockets for tcp
  connections that xfrd can make to download zone contents. And
  xfrd-tcp-pipeline the number of simultaneous transfers over the
  same connection.
  BUG FIXES:
- Fix #200: nsd-checkzone succeeds even with incorrect serial in SOA
  record.
- Merge #204 from jonathangray: correct some spelling mistakes.
- Fix to change file mode before changing file owner for the
  nsd-control unix socket file.
- Fix to document nsd-checkzone -p in the man page for nsd-checkzone.
- Fix #206: build with --without-ssl fails.
- Merge #207 Sync nsd-control-setup with unbound-control-setup to
  generate certificates with SANs.
- Fix unit tests for nds-control-setup exit code and the
  xfrd-tcp-max default.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1652529600">- New upstream release 4.5.0
  FEATURES:
- Merge PR #209: IXFR out
  This adds IXFR out functionality to NSD. NSD can copy IXFRs from
  upstream to downstream clients, or create IXFRs from zonefiles.
  The options store-ixfr: yes and create-ixfr: yes can be used to
  turn this on. Default is turned off. The options ixfr-number and
  ixfr-size can be used to tune the number of IXFR transfers and
  total data size stored. This is configured per zone, the IXFRs
  are served to the hosts that are allowed to perform zone transfers.
  And if TSIG is configured, signed with the same key. The content
  is stored to file if a zonefile is configured for the zone, in
  the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain
  readable text format. The number of IXFRs is num.rixfr in
  statistics output, also per zone if per zone statistics are enabled.
  If offline, nsd-checkzone -i can create ixfr files.
  NSD already supports requesting IXFRs, this addition allows NSD
  to serve IXFR transfers to clients.
  NSD stops responding with NOTIMPL to IXFR requests, also for zones
  that do not have IXFR enabled. The clients gets a full zone reply
  or a status reply if the serial is up to date.
  BUG FIXES:
- Fix code analyzer zero divide warning.
- Fix code analyzer large value with assertion.
- Fix another code analyzer zero divide warning.
- Fix code analyzer warning about uninitialized temp storage in loop.
- Fix spelling error in comment in svcbparam_lookup_key.
- Update cirrus script FreeBSD version.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1656676800">- New upstream release 4.6.0
  FEATURES:
- Port zone-verification from CreDNS to NSD4.
  BUG FIXES:
- Fix static analyzer reports on ixfrcreate temp file.
- Fixup wrong ixfrcreate fread return check.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1668081600">- New upstream release 4.6.1
  FEATURES:
- Set ALPN "dot" token during connection establishment as per RFC9103
  section 7.1 (Thanks Cesar Kuroiwa).
- Add SVCB dohpath support
  BUG FIXES:
- Fix static analyzer reports, fix wrong log print when skipping xfr,
  fix to print error on pipe read fail, and assert an xfr is in
  progress during packet checks.
- Use AC_PROG_CC_STDC with autoconf versions prior to 2.70.
- Add missing documentation for zone verification.
- Fix #212: Change commandline control actions to always log.
- Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work
  on OpenBSD.
- Change zone parsing to accept non-trailing newline.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1687348800">- New upstream release 4.7.0
  This release adds a script for bash autocompletion for nsd-control. Also
  nsd-control can be configured to use unencrypted operation also when
  compiled without openssl. There is also a systemd service unit example
  file contributed. The dnstap log service can be contacted over TCP, with
  the dnstap-ip: ip option. It is also possible to use TLS, with
  dnstap-tls, it is enabled by default, and can be configured with the
  dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
  dnstap-client-cert-file options.
  FEATURES:
  * Fix #267: Allow unencrypted local operation of nsd-control.
  * Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
  * dnstap over TLS, default enabled. Configured with the
    options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
    dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
  BUGFIXES:
    see https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_7_0_REL</changelog>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1691150400">- Adapt spec file to work nicer with containers, like no systemd
- Fix build for SLE12</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706529600">- update to 4.8.0:
  * Fix unit test kill_from_pidfile function for nonexistent
    files because the argument is evaluated before the test
    expression.
  * Fix rr-test to also convert the contents of the just written
    output file.
  * Fix test set to remove -f nsd.db and rm nsd.db commands.
  * Fix test set to remove difffile option.
  * Fix #14: Set timeout to 3s when servicing remaining TCP
    connections.
  * Fix: Always instate write handler after reading queries from
    TCP.
  * Answer first query on connections accepted just before
    reload.
  * Merge #305: faster stats. Statistics can be gathered while a
    reload is in progress.
  * Remove on-disk database.
  * Fix processing of consolidated IXFRs.
  * Fix for interprocess communication to set quit sync command
    from main process explicitly.
  * Merge #281: Proxy protocol. An implementation of PROXYv2 for
    NSD.
  * It can be configured with proxy-protocol-port: portnum with
    the port number of the interface on which proxy traffic is
    handled.
  * The interface can support proxy traffic for UDP, TCP and
    TLS.
  * Fix autoconf 2.69 warnings in configure.
  * Merge #287: Update nsd.conf.5.in.
  * Fix unused variable warning in unit test of udb.
  * Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available
    on Mac/Darwin.
  * Fix unused but set variable warning.
    bind8-stats and --without-ssl are specified.
  * Add missing items to doc/RELNOTES.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1708948800">- As far as it is known the kernel has a working recvmmsg
  pass --enable-recvmmsg to configure.
- Don't --enable-mmap. Replacing malloc may sound attractive but
  all safety checks to prevent corruption included in libc are lost.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1763467200">- update to 4.13.0:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog
- enable systemd notify support. New Buildrequires:
  pkgconfig(systemd) pkgconfig(libsystemd)
- enable dnstap support. New BuildRequires:
  libfstrm-devel libprotobuf-c-devel protobuf-c
- enable tcp fast open support
- enable support for &gt;= 2038</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783080000">- update to 4.14.3:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog
- update to 4.14.2:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog
- update to 4.14.1:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog
- update to 4.14.0:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog
- add new Requires for openssl, as this is needed for the
  nsd-control-setup script to generate the certificates</changelog>
</package>
<package pkgid="35cc3d6d24418e7d32f42da30095b07f82c0420f205845e69b661380e1c067bd76db97575a01eae9caaba2363c13800bf7bf36ec749e693260a1469f61cf9a25" name="nsd" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="1.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1652529600">- New upstream release 4.5.0
  FEATURES:
- Merge PR #209: IXFR out
  This adds IXFR out functionality to NSD. NSD can copy IXFRs from
  upstream to downstream clients, or create IXFRs from zonefiles.
  The options store-ixfr: yes and create-ixfr: yes can be used to
  turn this on. Default is turned off. The options ixfr-number and
  ixfr-size can be used to tune the number of IXFR transfers and
  total data size stored. This is configured per zone, the IXFRs
  are served to the hosts that are allowed to perform zone transfers.
  And if TSIG is configured, signed with the same key. The content
  is stored to file if a zonefile is configured for the zone, in
  the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain
  readable text format. The number of IXFRs is num.rixfr in
  statistics output, also per zone if per zone statistics are enabled.
  If offline, nsd-checkzone -i can create ixfr files.
  NSD already supports requesting IXFRs, this addition allows NSD
  to serve IXFR transfers to clients.
  NSD stops responding with NOTIMPL to IXFR requests, also for zones
  that do not have IXFR enabled. The clients gets a full zone reply
  or a status reply if the serial is up to date.
  BUG FIXES:
- Fix code analyzer zero divide warning.
- Fix code analyzer large value with assertion.
- Fix another code analyzer zero divide warning.
- Fix code analyzer warning about uninitialized temp storage in loop.
- Fix spelling error in comment in svcbparam_lookup_key.
- Update cirrus script FreeBSD version.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1656676800">- New upstream release 4.6.0
  FEATURES:
- Port zone-verification from CreDNS to NSD4.
  BUG FIXES:
- Fix static analyzer reports on ixfrcreate temp file.
- Fixup wrong ixfrcreate fread return check.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1668081600">- New upstream release 4.6.1
  FEATURES:
- Set ALPN "dot" token during connection establishment as per RFC9103
  section 7.1 (Thanks Cesar Kuroiwa).
- Add SVCB dohpath support
  BUG FIXES:
- Fix static analyzer reports, fix wrong log print when skipping xfr,
  fix to print error on pipe read fail, and assert an xfr is in
  progress during packet checks.
- Use AC_PROG_CC_STDC with autoconf versions prior to 2.70.
- Add missing documentation for zone verification.
- Fix #212: Change commandline control actions to always log.
- Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work
  on OpenBSD.
- Change zone parsing to accept non-trailing newline.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1687348800">- New upstream release 4.7.0
  This release adds a script for bash autocompletion for nsd-control. Also
  nsd-control can be configured to use unencrypted operation also when
  compiled without openssl. There is also a systemd service unit example
  file contributed. The dnstap log service can be contacted over TCP, with
  the dnstap-ip: ip option. It is also possible to use TLS, with
  dnstap-tls, it is enabled by default, and can be configured with the
  dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
  dnstap-client-cert-file options.
  FEATURES:
  * Fix #267: Allow unencrypted local operation of nsd-control.
  * Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
  * dnstap over TLS, default enabled. Configured with the
    options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
    dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
  BUGFIXES:
    see https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_7_0_REL</changelog>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1691150400">- Adapt spec file to work nicer with containers, like no systemd
- Fix build for SLE12</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706529600">- update to 4.8.0:
  * Fix unit test kill_from_pidfile function for nonexistent
    files because the argument is evaluated before the test
    expression.
  * Fix rr-test to also convert the contents of the just written
    output file.
  * Fix test set to remove -f nsd.db and rm nsd.db commands.
  * Fix test set to remove difffile option.
  * Fix #14: Set timeout to 3s when servicing remaining TCP
    connections.
  * Fix: Always instate write handler after reading queries from
    TCP.
  * Answer first query on connections accepted just before
    reload.
  * Merge #305: faster stats. Statistics can be gathered while a
    reload is in progress.
  * Remove on-disk database.
  * Fix processing of consolidated IXFRs.
  * Fix for interprocess communication to set quit sync command
    from main process explicitly.
  * Merge #281: Proxy protocol. An implementation of PROXYv2 for
    NSD.
  * It can be configured with proxy-protocol-port: portnum with
    the port number of the interface on which proxy traffic is
    handled.
  * The interface can support proxy traffic for UDP, TCP and
    TLS.
  * Fix autoconf 2.69 warnings in configure.
  * Merge #287: Update nsd.conf.5.in.
  * Fix unused variable warning in unit test of udb.
  * Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available
    on Mac/Darwin.
  * Fix unused but set variable warning.
    bind8-stats and --without-ssl are specified.
  * Add missing items to doc/RELNOTES.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1708948800">- As far as it is known the kernel has a working recvmmsg
  pass --enable-recvmmsg to configure.
- Don't --enable-mmap. Replacing malloc may sound attractive but
  all safety checks to prevent corruption included in libc are lost.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1763467200">- update to 4.13.0:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog
  https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog
- enable systemd notify support. New Buildrequires:
  pkgconfig(systemd) pkgconfig(libsystemd)
- enable dnstap support. New BuildRequires:
  libfstrm-devel libprotobuf-c-devel protobuf-c
- enable tcp fast open support
- enable support for &gt;= 2038</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783080000">- update to 4.14.3:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog
- update to 4.14.2:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog
- update to 4.14.1:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog
- update to 4.14.0:
  https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog
- add new Requires for openssl, as this is needed for the
  nsd-control-setup script to generate the certificates</changelog>
</package>
</otherdata>