Enable SVCB and HTTPS records support

Still not accepted RFC, but it seems it would soon be. Enable its
experimental support in LDNS.
This commit is contained in:
Petr Menšík 2021-12-05 22:13:52 +01:00
parent 2fa5581a0d
commit e08c54bd7a

View File

@ -39,7 +39,7 @@
Summary: Low-level DNS(SEC) library with API
Name: ldns
Version: 1.8.1
Release: 1%{?dist}
Release: 2%{?dist}
License: BSD
Url: https://www.nlnetlabs.nl/%{name}/
@ -211,13 +211,13 @@ export CFLAGS CXXFLAGS LDFLAGS
%global common_args \\\
--disable-rpath \\\
--enable-rrtype-svcb-https \\\
%{enable_gost} %{enable_ecdsa} %{enable_eddsa} %{?disable_dane_ta} \\\
--with-ca-file=/etc/pki/tls/certs/ca-bundle.trust.crt \\\
--with-ca-path=/etc/pki/tls/certs/ \\\
--with-trust-anchor=%{_sharedstatedir}/unbound/root.key \\\
--disable-static \\\
%if 0%{with python3}
pushd %{pkgname}_python3
%else
@ -350,6 +350,9 @@ rm -rf doc/man
%doc doc
%changelog
* Mon Dec 06 2021 Petr Menšík <pemensik@redhat.com> - 1.8.1-2
- Enable svcb and https record type support
* Mon Dec 06 2021 Paul Wouters <paul.wouters@aiven.io> - 1.8.1-1
- Resolves: rhbz#2028465 Heap out-of-bound read vulnerability in rr_frm_str_internal function
- Resolves: rhbz#2028468 Heap out-of-bound read vulnerability in ldns_nsec3_salt_data function