Date: Sun, 19 May 2019 23:08:44 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 237988] dns/opendnssec2: Upgrade to release 2.1.4 Message-ID: <bug-237988-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D237988 Bug ID: 237988 Summary: dns/opendnssec2: Upgrade to release 2.1.4 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: ports-bugs@FreeBSD.org Reporter: andrey@bsdnir.info CC: jaap@NLnetLabs.nl CC: jaap@NLnetLabs.nl Flags: maintainer-feedback?(jaap@NLnetLabs.nl) Attachment #204470 maintainer-approval?(jaap@NLnetLabs.nl) Flags: Flags: maintainer-feedback?(jaap@NLnetLabs.nl), merge-quarterly? Created attachment 204470 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D204470&action= =3Dedit Upgrade to release 2.1.4 "The 2.1 release has been quite stable with a few corner case problems. How= ever there is now a need for a release to fix an issue with zone signing that can potentially lead to missing signatures so definitely warrants a release. The 2.1.4 release is available immediately from the download site, we urge = you to upgrade. Also for installations still on the 1.4 release should consider upgrading as a number of incidents reported against 1.4 have not occurred on 2.1 installations due to better stability. To make sure this release is picked out we will not include a fix that was = to the issue for a double KSK roll. This fix is available on our develop branc= h, but includes more changes, and this fix needs to go out on its own. Fixes OPENDNSSEC-904: autoconfigure fails to properly identify functions in s= sl library on some distributions. This caused the =E2=80=9Ctsig unknown algori= thm hmac-sha256=E2=80=B3 error. OPENDNSSEC-894: repair configuration script to allow excluding the buil= d of the enforcer. SUPPORT-229: Missing signatures for key new while signatures for old key still present under certain kasp policies, leading to bogus zones. Root cau= se for bug existed but made prominent since 2.1.3 release. OPENDNSSEC-943: support build on MacOS with missing pthread barriers SUPPORT-229: fixed for too early retivement of signatures upon double r= rsig key roll signing strategy. Strip build directory from doxygen docs, remove bashisms from ods-kasp2html.in The ods-signer and ods-signerd man page should be in section 8 not 22. = Note that this might mean that package managers should remove the older man pages from the old location." testport: OK (poudriere: 11.2, amd64, tested) testport: OK (poudriere: 12.0, amd64, tested) testport: OK (poudriere: 12.0, i386, tested) testport: OK (poudriere: 13, amd64, tested) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-237988-7788>