| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
| |
There's a bugfix important for some auto-signer setups.
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.5
$ nix build -f nixos/release-combined.nix nixos.tests.knot.x86_64-linux
|
|
|
|
| |
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/
|
|
|
|
|
| |
https://www.isc.org/blogs/bind9-vulnerabilities-2020-05/
$ nix build -f nixos/release.nix tests.bind.x86_64-linux
|
|
|
|
|
|
|
| |
https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1
It fixes DoS CVEs; details e.g. on http://www.nxnsattack.com/
$ nix build -f nixos/release.nix tests.pdns-recursor.x86_64-linux
|
| |
|
| |
|
|
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.4
|
|
|
|
|
|
|
|
|
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0
The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
|
|\
| |
| | |
https-dns-proxy: init at unstable-20200419
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
This reverts commit 4e6bf03504c9e09f067cc6dee6b5aeec43a1405c, reversing
changes made to afd997aab6e9b7a322198092c7828d6c560ac06f.
Instead we propagate those frameworks from the compiler again
|
| | |
|
| | |
|
|\ \
| | |
| | | |
coredns: 1.6.6 -> 1.6.7
|
| | | |
|
|/ /
| |
| |
| |
| | |
I see just a single small bugfix in the news:
https://downloads.isc.org/isc/bind9/9.14.11/RELEASE-NOTES-bind-9.14.11.html
|
| | |
|
| |
| |
| |
| |
| | |
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream. Close #81188.
|
|/
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.3
|
|
|
|
|
|
|
| |
Otherwise knot tries to write to non-writable directories.
This for example breaks dnssec signing.
While it's possible to overwrite these path in the configuration,
having a sane defaults is nicer.
|
|
|
|
|
|
|
|
| |
In 87a19e9048773d5a363679617406ad148d36c3b8 I merged staging-next into master using the GitHub gui as intended.
In ac241fb7a570d6cf81d229ad22a8889602639160 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master.
Thinking this may cause trouble, I reverted it in 0be87c79797a5fa384fbc356c74ed54f9f7829ea. This was however wrong, as it "removed" master.
This reverts commit 0be87c79797a5fa384fbc356c74ed54f9f7829ea.
|
|
|
|
|
|
|
|
| |
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048773d5a363679617406ad148d36c3b8.
This reverts commit ac241fb7a570d6cf81d229ad22a8889602639160, reversing
changes made to 76a439239eb310d9ad76d998b34d5d3bc0e37acb.
|
|\
| |
| |
| |
| |
| | |
The service needed lots of changes. A few smaller changes
are added into the PR, e.g. replacement for PR #72014.
See the commit messages for details.
|
| |
| |
| |
| | |
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Minor incompatibilities due to moving to upstream defaults:
- capabilities are used instead of systemd.socket units
- the control socket moved:
/run/kresd/control -> /run/knot-resolver/control/1
- cacheDir moved and isn't configurable anymore
- different user+group names, without static IDs
Thanks Mic92 for multiple ideas.
|
| |
| |
| |
| | |
Part of this is approximate revert of commit f0d2da43a7a449b5888.
|
| |
| |
| |
| | |
The cqueues fix is in nixpkgs already, so it works now.
|
|\ \
| |/
|/| |
bind: 9.14.9 -> 9.14.10
|
| | |
|
|/
|
|
|
| |
This reverts commit 5c0567dcc688ee0663e06393b0f7ac02a1724738.
The issue had been fixed but I forgot to remove this workaround.
|
|\
| |
| | |
nsd: 4.2.3 -> 4.2.4
|
| | |
|
|\ \
| | |
| | | |
bind: 9.14.8 -> 9.14.9
|
| |/ |
|
|\ \
| | |
| | | |
pdns-recursor: 4.2.0 -> 4.2.1
|
| |/ |
|
| | |
|
| |
| |
| |
| |
| | |
- fixes build against boost
- also enable DoH
|
|\ \
| |/
|/| |
powerdns: 4.2.0 -> 4.2.1
|
| | |
|
| | |
|
|/
|
|
| |
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.9.2
|
|
|
|
|
| |
Fixes CVE-2019-19331 (DoS), but other changes as well:
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.3.0
|
| |
|
| |
|
|
|
|
|
| |
It's mainly bugfixes:
https://gitlab.labs.nic.cz/knot/knot-dns/raw/v2.9.1/NEWS
|
|
|
|
|
|
|
| |
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/bind/versions
|
| |
|