From patchwork Tue Sep 26 13:24:07 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 7255 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Rw0ny5w7Qz3wkw for ; Tue, 26 Sep 2023 13:24:22 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Rw0nv3F4jz3tN; Tue, 26 Sep 2023 13:24:19 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Rw0nv0kTLz3031; Tue, 26 Sep 2023 13:24:19 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Rw0ns4ylNz2xrm for ; Tue, 26 Sep 2023 13:24:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Rw0ns2zDFz208; Tue, 26 Sep 2023 13:24:17 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1695734657; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=zGp1bDBmH0CebG6g5hQYxGTMGB2XWOuSRfe7yPJVL64=; b=9Aag/qHKSB9w7aGaKY0Fq3BQri7JLOafpv4D7LncDc0Jb92n97lC0sdGBz/rc0Dob7efz3 VDizhdHym/OMAOCw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1695734657; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=zGp1bDBmH0CebG6g5hQYxGTMGB2XWOuSRfe7yPJVL64=; b=BtjgS6oi9pSO7BoWTuSmfvD+T3JCQ0bRazUlVnyWsbgP+UCb46ZL7m4biN70z+2FMIiet2 7sabwXhKq2vuwBffArnpZxp8Y32L97obwYIEqbl6aGq6NvsHsvXGIjy97v8v8X7/s9Otjw CUversDi717XcgR4NFiWG5Vp0o1KSQ7mMj04cH/O+Kla8IKqC1SE1iyzDhwjUEBMcuO89S 16X1LEtJATVqtoMUcjsp60nuCv7JZQ8ubYUtdCGSguVPF5IIPMzBzPCpOEB3VP2rxiEalb hgoDk7UEPk2Qc01N5qf9UkW9zHzbB6nrMYXdkJvPSLXqE01pCf5eH91kCHs8dA== From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] python3-dns: Update to version 2.4.2-1 Date: Tue, 26 Sep 2023 15:24:07 +0200 Message-ID: <20230926132410.7915-2-adolf.belka@ipfire.org> In-Reply-To: <20230926132410.7915-1-adolf.belka@ipfire.org> References: <20230926132410.7915-1-adolf.belka@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" - IPFire-3.x - Update from version 2.3.0-1 to 2.4.2-1 - Changelog 2.4.2 Async queries could wait forever instead of respecting the timeout if the timeout was 0 and a packet was lost. The timeout is now respected. Restore HTTP/2 support which was accidentally broken during the https refactoring done as part of 2.4.0. When an inception time and lifetime are specified, the signer now sets the expiration to the inception time plus lifetime, instead of the current time plus the lifetime. 2.4.1 Importing dns.dnssecalgs without the cryptography module installed no longer causes an ImportError. A number of timeout bugs with the asyncio backend have been fixed. DNS-over-QUIC for the asyncio backend now works for IPv6. Dnspython now enforces that the candidate DNSKEYs for DNSSEC signatures have protocol 3 and have the ZONE flag set. This is a standards compliance issue more than a security issue as the legitimate authority would have to have published the non-compliant keys as well as updated their DS record in order for the records to validate (the DS digest includes both flags and protocol). Dnspython will not make invalid keys by default, but does allow them to be created and used for testing purposes. Dependency specifications for optional features in the package metadata have been improved. 2.4.0 Python 3.8 or newer is required. The stub resolver now uses instances of dns.nameserver.Nameserver to represent remote recursive resolvers, and can communicate using DNS over UDP/TCP, HTTPS, TLS, and QUIC. In additional to being able to specify an IPv4, IPv6, or HTTPS URL as a nameserver, instances of dns.nameserver.Nameserver are now permitted. The DNS-over-HTTPS bootstrap address no longer causes URL rewriting. DNS-over-HTTPS now only uses httpx; support for requests has been dropped. A source port may now be supplied when using httpx. DNSSEC zone signing with NSEC records is now supported. Thank you very much (again!) Jakob Schlyter! The resolver and async resolver now have the try_ddr() method, which will try to use Discovery of Designated Resolvers (DDR) to upgrade the connection from the stub resolver to the recursive server so that it uses DNS-over-HTTPS, DNS-over-TLS, or DNS-over-QUIC. This feature is currently experimental as the standard is still in draft stage. The resolver and async resolver now have the make_resolver_at() and resolve_at() functions, as a convenience for making queries to specific recursive servers. Curio support has been removed. Signed-off-by: Adolf Belka --- python3-dns/python3-dns.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python3-dns/python3-dns.nm b/python3-dns/python3-dns.nm index 20c172403..e32a10ac4 100644 --- a/python3-dns/python3-dns.nm +++ b/python3-dns/python3-dns.nm @@ -4,7 +4,7 @@ ############################################################################### name = python3-dns -version = 2.3.0 +version = 2.4.2 release = 1 thisapp = dnspython-%{version}