lp://staging/ubuntu/trusty-proposed/nsd3

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

33. By Ondřej Surý on 2013-10-24

Add $network to Required-Start (Closes: #694930)

32. By Ondřej Surý on 2013-10-06

Drop oldlibs nsd package in preparation of nsd 4.0.0 release

31. By Ondřej Surý on 2013-09-27

New upstream version 3.2.16

30. By Ondřej Surý on 2013-06-27

* New upstream version 3.2.15 (Closes: #711490)
* Remove RRL patch as it is already included in new upstream version
* Update patches for 3.2.15 release

29. By Ondřej Surý on 2013-02-19

Cleanup autoreconf -fi stuff in dh_auto_clean target

28. By Ondřej Surý on 2013-02-06

* Add Response Rate Limiting patch (Courtesy of Matthijs Mekking of NLnet Labs)
* Regenerate configure due to RRL patch and ./configure with --enable-ratelimit

27. By Ondřej Surý on 2012-07-19

* Imported Upstream version 3.2.12
 - Fix for VU#624931 CVE-2012-2978: NSD denial of service
   vulnerability from non-standard DNS packet from any host
   on the internet as discovered by Marek Vavrusa and Lubos
   Slovak from CZ.NIC Labs
   http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt

26. By Ondřej Surý on 2012-07-10

* Imported Upstream version 3.2.11
 - Fallback to AXFR if IXFR is unknown at the primary. NSD considers
   IXFR unknown at the primary if there is a negative response for the
   IXFR RRtype. This does not override the value for
   'allow-axfr-fallback'.
 - Allow for reading in new DNSKEY algorithm mnemonics (RFC5155,
   RFC5702, RFC5933, and RFC6605 (ECDSA)).
 - Zone statistics, enable with --enable-zone-stats. This stores the
   BIND8 stats per zone in a configurable statistics file. This option
   does not scale and should therefore not be enabled when serving
   many zones.
 - Support for TLSA RRtype (DANE).
 - Fix for qtype ANY for a wildcard domain in NSEC signed zone: Don't
   add the wildcard domain NSEC into the answer section. Instead,
   put the wildcard expanded NSEC into the answer section and keep the
   wildcard domain NSEC in the authority section.
 - Fix for accept spinning reported by OpenBSD.
 - Fix restart failed due to bad ixfr packet because of zone removed
   from nsd.conf.
 - Bugfix #453: typo in nsdc man page.
 - NSD uses the query name for dname compression again (Fix #235
   had as side effect that this didn't happen anymore and is hereby
   undone).

25. By Ondřej Surý on 2012-02-15

[ Jeroen Schot ]
Imported Upstream version 3.2.10

24. By Ondřej Surý on 2012-01-31

[ Jeroen Schot ]
* Sync long description of nsd with nsd3
* Drop 0007-Fix-spelling-errors-in-manpage.patch, applied upstream
* Move transitional nsd package to oldlibs/extra
* Add minimal DEP3 headers to patches
* Use Breaks instead of Conflicts with old nsd
* Switch from hardening-wrapper to (hardened) dpkg-buildflags

[ Ondřej Surý ]
* Use nsd3 version and not php5 version in postinst :)
* Don't break the build when buildflags.mk is not found

[ Jeroen Schot ]
* Call 'nsdc rebuild' via init script to handle new and unconfigured
  installations without nsd.conf