From patchwork Fri Jun 12 17:14:32 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 9935 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gcR2x0Vtmz3wb2 for ; Fri, 12 Jun 2026 17:14:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gcR2w41hVz74N for ; Fri, 12 Jun 2026 17:14:48 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gcR2w3GrJz30VM for ; Fri, 12 Jun 2026 17:14:48 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gcR2s6ZS2z2xJ5 for ; Fri, 12 Jun 2026 17:14:45 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gcR2r1Dpgz1rv; Fri, 12 Jun 2026 17:14:43 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1781284484; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=2XdmfgOmfFrdkcLrd4GlkDgg3uzBM7KcHwtHyz2Djis=; b=mC5hG+ZnIyuVxfDzjdfNi0NoNFXA2HNCdshSLOpC3CK4yOIeHtE/gnD1uo5z+n/V4jiJpr 2j8YmL/RHnmcvODQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1781284484; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=2XdmfgOmfFrdkcLrd4GlkDgg3uzBM7KcHwtHyz2Djis=; b=obMDhkiXdZtU1XtkeKkG5SwuExeTaBdU+IRXmmsK6lnwPRiyGi+X7aJ8FVbZGYmJj8NR+x J66tIqZh/G/uQyh6CmYdX/ZrnR7+5mU+xH6/yVeBs32IvyBxciVJDN8j4SqMbqdsl+GKcf GXF4oUwTaKDfSDtR2XsIsmfP4H3p30HzyIuZB+Npb0im2CkOuanNtNHrpD48ha3eXH1JMj c6KELeY/AHvpG5bNhinmOF7/n0lCGOeNrhpw49hIwboK+Bx7e+8TD2JsA9wUO2fWkulC4D tfeIdGa++lvJHz9iRvpPpRuVBc964npYQKYyEnUNcbI4g5oJSucnJk8gZ+PcUw== From: Matthias Fischer To: development@lists.ipfire.org Cc: Matthias Fischer Subject: [PATCH] Net-DNS: Update to 1.55 Date: Fri, 12 Jun 2026 19:14:32 +0200 Message-ID: <20260612171435.3440482-1-matthias.fischer@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 This is an update from v1.30 => v1.55 - changelog is rather long... For details see: https://www.net-dns.org/svn/net-dns/release/1.55/Changes "**** 1.55 Jun 11, 2026 Fix UDP truncation tests which relied on large RSA RRSIGs. Fix rt.cpan.org #178183 Unhelpful TAINT error Fix rt.cpan.org #177003 TCP read loop treats 1-byte recv() of "0" (0x30) as EOF, corrupting AXFRs Fix rt.cpan.org #176900 UNIX.pm: avoid `backticks` which depends on shell **** 1.54 Jan 16, 2026 Resync with IANA DNS parameters registry. Resync with IANA DNSSEC algorithms registry. Backport DELEG parser to SVCB. **** 1.53 Aug 29, 2025 Suppress autovivified undefined $rr->{class} and $rr->{ttl}. Rework test scripts for SVCB and DELEG. **** 1.52 Jul 29, 2025 Refactor SVCB to avoid internal use of generic keyNN. DELEG documentation and code improvement. Fix rt.cpan.org #168433 Bug in resolver base selection on non-Unix/Linux platforms **** 1.51 Jul 4, 2025 Resync with IANA DNS Parameters registry. Add prototype DELEG RR package. Minor code and documentation improvements. **** 1.50 Feb 21, 2025 Minor code improvements in Resolver::Base. Add RESINFO package for resolver information. Documentation revision and reformatting. Fix rt.cpan.org #158714 Fedora41: IPv4 loopback disabled in IPv6-only configuration Fix rt.cpan.org #158706 Use of uninitialized value [in _send_udp] **** 1.49 Dec 27, 2024 Add DSYNC package for Generalized Notification. EDNS: Add support for ZONEVERSION option. Fix rt.cpan.org #157700 "Use of uninitialized value" errors when using TCP connections Fix rt.cpan.org #157669 Net::DNS::Nameserver: SOA not present in NODATA response Fix rt.cpan.org #157195 EDNS option structure does not match JSON from $packet->edns->print Fix rt.cpan.org #157043 User-hostile return value from SVCB key methods **** 1.48 Nov 8, 2024 SVCB: Add tls-suppored-groups parameter. Fix failures in 01-resolver.t dry tests. **** 1.47 Sep 18, 2024 Restore current domain name following $INCLUDE in zone file. Update RFC and other document references. Fix rt.cpan.org #155337 Issue with parallel run of TSIG tests **** 1.46 Aug 19, 2024 Resync with IANA DNS Parameters registry. Revise documentation for Packet.pm and Header.pm. Random ID cache moved from header->id to packet->encode. Restructure resolver method inheritance tree. **** 1.45 May 2, 2024 Resync with IANA DNSSEC Algorithm Numbers registry. Resync with IANA DS Digest Algorithms registry. Add support for EDNS CO flag. Fix rt.cpan.org #152756 Net::DNS::Resolver::UNIX creates $ENV{PATH} key if one doesn't exist **** 1.44 Feb 15, 2024 Simplify testing of resolver error paths. Prevent read beyond end of RDATA in corrupt SVCB RR. **** 1.43 Jan 26, 2024 Update b.root-servers.net addresses in resolver hints. Improve accuracy and completeness of dependency metadata. Nameserver: hangs on persistent TCP connection (Windows). IPSECKEY: leave gateway undefined for gatetype 0. Remove remaining support for GOST. Fix rt.cpan.org #151240 Nameserver.pm: DoS vulnerability in TCP handling Fix rt.cpan.org #151232 Net::DNS::Resolver::new hangs for 150s on Win32 with no active DNS Fix rt.cpan.org #151075 Bug in Net::DNS::Resolver::Recurse::_referral Fix rt.cpan.org #151074 Deep recursion in Net::DNS::Resolver::Recurse **** 1.42 Dec 24, 2023 Fix rt.cpan.org #150695 Hang in Net::DNS::Nameserver on Windows **** 1.41 Nov 28, 2023 Accept inbound Ethernet "Jumbo" UDP packet. Facilitate decoding of mDNS/SD packets with compressed RDATA. Update Parameters.pm to resync with IANA registry. Fix rt.cpan.org #150550 Error trying to use Socket macro SO_REUSEPORT in Windows **** 1.40 Aug 30, 2023 Add support for SVCB dohpath and ohttp parameters. More robust test of bgbusy() SpamAssassin workaround. Fix rt.cpan.org #149456 t/05-SOA.t test fails in 2038 Fix rt.cpan.org #149280 Deep recursion on subroutine "Net::DNS::Resolver::Recurse::_recurse" **** 1.39 Jun 1, 2023 Fix rt.cpan.org #148340 udpsize uninitialized value **** 1.38 May 9, 2023 Mailbox.pm: Improve robustness of address parsing. Deprecate packet->edns->size() method. Deprecate rdatastr() historical RR subtype method. Major overhaul of pre-installation test scripts. Add new t/TestToolkit.pm Refactor socket code and control structure in Nameserver.pm and improve efficiency of zonefile data storage and retrieval. Fix rt.cpan.org #148274 Multicast DNS flag breaks Net::DNS::Parameters::classbyval Fix rt.cpan.org #148273 EDNS extended rcode not handled correctly Fix rt.cpan.org #147507 Nameserver.pm: peerhost undefined after $sock->accept **** 1.37 Mar 13, 2023 Add links to relevant RFCs in package documentation. Fix rt.cpan.org #147038 resolver->axfr( undef ) fails silently Fix rt.cpan.org #145944 Case sensitivity issue with AXFR **** 1.36 Dec 30, 2022 Adopt JSON as presentation notation for EDNS options. Disallow zero packet->id in outbound packet. Remove deprecated 2-argument TSIG->create() method. Revise TSIG test scripts and documentation. **** 1.35 Oct 4, 2022 Improve SVCB error reporting. Fix rt.cpan.org #144328 accept_reply test fails with matched consecutive "random" generated packet->id Fix rt.cpan.org #144299 Spelling errors. **** 1.34 May 30, 2022 Improve robustness of EDNS option compose/decompose functions. Simplify code in Makefile.PL. Fix rt.cpan.org #142426 Avoid "Useless use of a constant in void context" warning. **** 1.33 Dec 16, 2021 Fix rt.cpan.org #137768 Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion. Fix rt.cpan.org #144136/#132921 $resolver->send wrongly overwrites RD flag in user's packet. **** 1.32 Jul 16, 2021 Text: Offer both Unicode and escaped-ASCII strings. Add LICENSE file to comply with Fedora/RedHat announcement. Fix rt.cpan.org #136666 Net::DNS::RR::ZoneFile parser erroneously strips line terminators in quoted string forming part of multiline RR. **** 1.31 May 2, 2021 Improve implementation of SVCB record." Signed-off-by: Matthias Fischer --- config/rootfiles/common/perl-Net-DNS | 6 ++++++ lfs/perl-Net-DNS | 6 +++--- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/perl-Net-DNS b/config/rootfiles/common/perl-Net-DNS index ed5e32d38..386097c0d 100644 --- a/config/rootfiles/common/perl-Net-DNS +++ b/config/rootfiles/common/perl-Net-DNS @@ -23,10 +23,12 @@ usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/CDS.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/CERT.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/CNAME.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/CSYNC.pm +usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/DELEG.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/DHCID.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/DNAME.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/DNSKEY.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/DS.pm +usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/DSYNC.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/EUI48.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/EUI64.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/GPOS.pm @@ -57,6 +59,7 @@ usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/OPENPGPKEY.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/OPT.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/PTR.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/PX.pm +usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/RESINFO.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/RP.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/RRSIG.pm usr/lib/perl5/site_perl/5.36.0/Net/DNS/RR/RT.pm @@ -112,10 +115,12 @@ usr/lib/perl5/site_perl/5.36.0/Net/DNS/ZoneFile.pm #usr/share/man/man3/Net::DNS::RR::CERT.3 #usr/share/man/man3/Net::DNS::RR::CNAME.3 #usr/share/man/man3/Net::DNS::RR::CSYNC.3 +#usr/share/man/man3/Net::DNS::RR::DELEG.3 #usr/share/man/man3/Net::DNS::RR::DHCID.3 #usr/share/man/man3/Net::DNS::RR::DNAME.3 #usr/share/man/man3/Net::DNS::RR::DNSKEY.3 #usr/share/man/man3/Net::DNS::RR::DS.3 +#usr/share/man/man3/Net::DNS::RR::DSYNC.3 #usr/share/man/man3/Net::DNS::RR::EUI48.3 #usr/share/man/man3/Net::DNS::RR::EUI64.3 #usr/share/man/man3/Net::DNS::RR::GPOS.3 @@ -146,6 +151,7 @@ usr/lib/perl5/site_perl/5.36.0/Net/DNS/ZoneFile.pm #usr/share/man/man3/Net::DNS::RR::OPT.3 #usr/share/man/man3/Net::DNS::RR::PTR.3 #usr/share/man/man3/Net::DNS::RR::PX.3 +#usr/share/man/man3/Net::DNS::RR::RESINFO.3 #usr/share/man/man3/Net::DNS::RR::RP.3 #usr/share/man/man3/Net::DNS::RR::RRSIG.3 #usr/share/man/man3/Net::DNS::RR::RT.3 diff --git a/lfs/perl-Net-DNS b/lfs/perl-Net-DNS index b3d0426a6..5d2edff0f 100644 --- a/lfs/perl-Net-DNS +++ b/lfs/perl-Net-DNS @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.30 +VER = 1.55 THISAPP = Net-DNS-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b5cddef00a34c48ef9ecf65abf815965e149d7cde36dd818d61ccd19e42e9a4e90e3ca93a48836ef8ad5f55e6dc07b2852c3d5ba0115eb86d0ad9c88c2872370 +$(DL_FILE)_BLAKE2 = 65b916205c4281a2e8214179f9cecc9132d1f11f0913f9c032e3f532cd107b26f320f62e50ac05f4b2bb96fbcffe2f93e3ff70807ec356ed3b4b5699362789dd install : $(TARGET)