Hello community, here is the log from the commit of package unbound for openSUSE:Factory checked in at 2015-10-19 22:54:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/unbound (Old) and /work/SRC/openSUSE:Factory/.unbound.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "unbound" Changes: -------- --- /work/SRC/openSUSE:Factory/unbound/unbound.changes 2015-07-19 11:45:49.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.unbound.new/unbound.changes 2015-10-20 00:09:09.000000000 +0200 @@ -1,0 +2,67 @@ +Sat Oct 10 09:31:40 UTC 2015 - [email protected] + +- ignore absence of the systemd-tmpfiles command + +------------------------------------------------------------------- +Tue Oct 6 14:21:00 UTC 2015 - [email protected] + +- update to 1.5.5 + Features + - Change default of harden-algo-downgrade to off. This is lenient + for algorithm rollover. + - Added permit-small-holddown config to debug fast 5011 rollover. + - Allow certificate chain files to allow for intermediate + certificates. (thanks Daniel Kahn Gillmor) + - Enable ECDHE for servers. Where available, use + SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations + to enable ECDHE. Otherwise, manually offer curve p256. Client + connections should automatically use ECDHE when available. + (thanks Daniel Kahn Gillmor) + - Feature --enable-pie option to that builds PIE binary. + [bugzilla: 699 ] + - Feature --enable-relro-now option that enables full read-only + relocation. [bugzilla: 700 ] + - New IPs for for h.root-servers.net. [bugzilla: 702 ] + Bug Fixes + - Fix setting forwarders with unbound-control forward implicitly + turns on forward-first. [bugzilla: 681 ] + - Fix that reload fails when so-reuseport is yes after changing + num-threads. [bugzilla: 690 ] + - please afl-gcc (llvm) for uninitialised variable warning. + - Fix mktime in unbound-anchor not using UTC. + - Fix 5011 anchor update timer after reload. + - 5011 implementation does not insist on all algorithms, when + harden-algo-downgrade is turned off. + - Document in the manual more text about configuring locally + served zones. + - Document that local-zone nodefault matches exactly and + transparent can be used to release a subzone. + - Fix that configure script does not detect LibreSSL 2.2.2 + [bugzilla: 694 ] + - Fix deadlock for local data add and zone add when + unbound-control list_local_data printout is interrupted. + - Fix get PY_MAJOR_VERSION failure at configure for python 2.4 to + 2.6. [bugzilla: 697 ] + - changed windows setup compression to be more transparent. + - Fix config globbed include chroot treatment, this fixes reload + of globs (patch from Dag-Erling Smørgrav). + - Fix ub_ctx_set_fwd() return value mishandled on windows. + [bugzilla: 705 ] + - Fix minor error in unbound.conf.5.in. + - Fix unbound.conf(5) access-control description for precedence + and default. + - Fix unbound-control flush that does not succeed in removing + data. + - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution + failures. + - iana portlist update. +- remove manual hacks for relro,now and pie and replace them with + official configure options. + +------------------------------------------------------------------- +Fri Sep 4 13:37:38 UTC 2015 - [email protected] + +- enable event api +- enable dnstap support + +------------------------------------------------------------------- Old: ---- unbound-1.5.4.tar.gz New: ---- unbound-1.5.5.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ unbound.spec ++++++ --- /var/tmp/diff_new_pack.f0U6vq/_old 2015-10-20 00:09:10.000000000 +0200 +++ /var/tmp/diff_new_pack.f0U6vq/_new 2015-10-20 00:09:10.000000000 +0200 @@ -20,6 +20,12 @@ %bcond_without munin %bcond_without hardened_build +%if 0%{?suse_version} > 1320 +%bcond_without dnstap +%else +%bcond_with dnstap +%endif + %if 0%{?suse_version} >= 1230 %bcond_without systemd %else @@ -47,7 +53,7 @@ %endif Name: unbound -Version: 1.5.4 +Version: 1.5.5 Release: 0 # # @@ -58,8 +64,12 @@ BuildRequires: libexpat-devel BuildRequires: openssl-devel BuildRequires: python-devel +%if %{with dnstap} +BuildRequires: protobuf-c >= 1.0.0 +BuildRequires: libprotobuf-c-devel >= 1.0.0 +BuildRequires: libfstrm-devel +%endif %if %{with python} -BuildRequires: python-devel BuildRequires: swig %endif PreReq: pwdutils @@ -174,9 +184,8 @@ %setup %build -export LDFLAGS="-Wl,-z,relro,-z,now -pie" -export CFLAGS="%{optflags} -fPIE -pie" -export CXXFLAGS="%{optflags} -fPIE -pie" +export CFLAGS="%{optflags}" +export CXXFLAGS="%{optflags}" %configure \ --disable-rpath \ --with-libevent \ @@ -186,6 +195,12 @@ --enable-sha2 \ --enable-gost \ --enable-ecdsa \ + --enable-event-api \ + --enable-pie \ + --enable-relro-now \ +%if %{with dnstap} + --enable-dnstap \ +%endif --with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \ --with-pidfile=%{piddir}%{name}/%{name}.pid \ %if %{with python} @@ -284,7 +299,7 @@ %post %fillup_only %{name} %if %{with systemd} -systemd-tmpfiles --create %{_tmpfilesdir}/unbound.conf +systemd-tmpfiles --create %{_tmpfilesdir}/unbound.conf || : %service_add_post unbound-keygen.service unbound.service %endif @@ -368,6 +383,7 @@ %files devel %defattr(-,root,root,-) %{_includedir}/unbound.h +%{_includedir}/unbound-event.h %{_libdir}/libunbound.so %{_mandir}/man3/libunbound.3* %{_mandir}/man3/ub_*.3* ++++++ unbound-1.5.4.tar.gz -> unbound-1.5.5.tar.gz ++++++ ++++ 8963 lines of diff (skipped)
