From patchwork Sat Jun 13 23:12:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 9938 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gdBxV3ysjz3wh8 for ; Sat, 13 Jun 2026 23:12:46 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gdBxV0pNRzhX for ; Sat, 13 Jun 2026 23:12:46 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gdBxV02lVz2yxC for ; Sat, 13 Jun 2026 23:12:46 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gdBxR1wtvz2xjZ for ; Sat, 13 Jun 2026 23:12:43 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gdBxQ2bykz1PK; Sat, 13 Jun 2026 23:12:42 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1781392362; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=DmUS3ztqXR2n3g0/VTn5svbw9bVPJj76Q9IHpsUKvA0=; b=h7xJZ1wttKxaizMu7CNEV3ecjKp81wuSKxB8N+SDaKYEFCP2rGjJQmGtallZLb/pUJZp28 GVkzNcK0jH5iDMDA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1781392362; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=DmUS3ztqXR2n3g0/VTn5svbw9bVPJj76Q9IHpsUKvA0=; b=UIfLMscajU0BIt4eyirzZhnYN8SaOVaxWC+8rPwwDDohTpRnUbmsnlFLXzzrUj9A7kEf/O oAHwAeQuxgWK8ysYr3A6aukSsDdJOg+dgZ4R7E9IKz1eyVm/vezC7i8UTUFWRbvgqyL3L5 RMPbyzhSTvmqySvXSkJDKc+IM0kVOf3SkEQVp4UTtghL1NnC5nlIuncpBffk4HKQP1bPUV dUno3JwjjWylf1BmNbgt6YG+8vfnYPqyTvY/WYItKyon/FIvCjodQtXHjLIXG1Fry0QaRK F1JciEeqsacI9eVHXvKApmxk6Wbjjnvrzmm2XmNlorP37K3Z0TaZgM2sXdzexg== From: Matthias Fischer To: development@lists.ipfire.org Cc: Matthias Fischer Subject: [PATCH] knot: Update to 3.5.5 Date: Sun, 14 Jun 2026 01:12:28 +0200 Message-ID: <20260613231231.299937-1-matthias.fischer@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 For details see: https://www.knot-dns.cz/2026-06-12-version-355.html "Version 3.5.5 Friday, June 12, 2026 Features: knotd: support for binding wildcard addresses to a specific network interface mod-alias: ALIAS record synthesis from locally served targets (Thanks to Bron Gondwana) !1867 Improvements: knotd: zone XFR freeze state is persistent across restarts by storing it in timers knotd: optimized rescheduled DNSSEC validation knotd: hardened manually triggered DNSSEC validation utils: configuration detection fails if the database is empty or inaccessible utils: LMDB reader lock table is purged even for read-only access utils: errors when writing to stdout are reported libs: upgraded embedded libngtcp2 to 1.23.0 doc: various improvements Bugfixes: knotd: missing mutex lock in server startup check knotd: server crashes if the QUIC client limit is lower than the number of UDP workers knotd: misleading error log for DS check #969 knotd: empty catalog database is created when purging orphans knotd: false error report when there is no journal during purging orphans knotd: the '--' specification doesn't work with 'zone-serial-set' and 'zone-key-rollover' knotd: zone backup prevents timer dumping, resulting in inconsistent timers knotd: zone reload causes timer dumping to be skipped knotd: segfault on SIGTERM if periodic statistics dumping is enabled #972 knotd: redundant RRSIGs are removed during DNSSEC validation knotd: missing AA flag in AXFR and IXFR responses libknot: unnecessary increase in library size libdnssec: memory leak when PEM key generation fails libknot: undefined behavior in QUIC data stream processing libknot: assertion failure in QUIC connection handling under high load mod-geoip: inconsistent behavior for specific records and ANY queries #971 redis: incorrect filter parameter parsing in KNOT.UPD.LOAD commands redis: database crashes if it's built with jemalloc kdig: undefined behavior if both +https and +quic are specified kxdpgun: crash when reusing a swept-out QUIC connection" Signed-off-by: Matthias Fischer --- lfs/knot | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/knot b/lfs/knot index fee499cee..a68619134 100644 --- a/lfs/knot +++ b/lfs/knot @@ -24,7 +24,7 @@ include Config -VER = 3.5.4 +VER = 3.5.5 THISAPP = knot-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = ddd7b2fdcc2fbd23c3ff3173026883bae4b068eac7b076a641353a0c2f13b525914c6d8df3ea41b339667c28f4f5e70486b51fc7b6eee2de7bdf648b3ec2d3c8 +$(DL_FILE)_BLAKE2 = 5ee478109a26e3b163da169e7e22a03780727528f84953e399f25670d48392b6b407388c38b152bc90399f517b70676168735c1aba4028326237b92cdf904938 install : $(TARGET)