CVS commit: pkgsrc/net/knot

Module Name:	pkgsrc
Committed By:	drixter
Date:		Tue Aug 18 19:01:11 UTC 2026

Modified Files:
	pkgsrc/net/knot: Makefile buildlink3.mk distinfo

Log Message:
knot: Update to 3.5.7

Knot DNS 3.5.7 (2026-08-18)

Improvements:
knotd: new debug logging for DDNS prerequisite errors
knotd: support for SO_BINDTODEVICE for remotes/via #977 (closed) (Thanks to Tore Anderson)
keymgr: 'keystore-bench' is slow with many threads and a high-latency HSM connection
keymgr: 'keystore-bench' command accepts a filter by signing algorithm
libs: upgraded embedded libngtcp2 to 1.25.0
doc: various improvements

Bugfixes:
knotd: server crash due to a missing check for malformed TCP packet in XDP mode (Thanks to Arthur Chan)
knotd: server crash when processing XFR or NOTIFY with non-IN records (Thanks to Qifan Zhang)
knotd: server crash when processing an outbound reply with non-IN records (Thanks to Qifan Zhang)
knotd: server crash on zone with NSEC3PARAM but without NSEC3 records (Thanks to Qifan Zhang)
knotd: incorrect ACL address range evaluation (Thanks to Qifan Zhang)
knotd: assertion failure if zone expire is set to maximum (Thanks to Qifan Zhang)
knotd: server crash if SOA serial is not increased during IXFR from AXFR processing (Thanks to Qifan Zhang)
knotd: default 'policy.rrsig-refresh' value not considered for DNSSEC validation
knotd: missing '0.1 * policy.rrsig_lifetime' part in 'rrsig-refresh' default if 'policy.zone-max-ttl' is set #978 (closed)
libknot: defective QUIC stateless-reset handler vulnerable to a crash (Thanks to Arthur Chan and Kushal Das)
libknot: insufficient check for oversized ECS EDNS option (Thanks to Qifan Zhang)
libknot: TSIG truncation check not implemented (Thanks to Qifan Zhang)
libs: inappropriate realloc failure handlings in heap structure
mod-authsignal: server crash if insertion to packet fails (Thanks to Qifan Zhang)
mod-authsignal: server crash if zone name contains _dsboot prefix (Thanks to Qifan Zhang)
mod-dnsproxy: outbound packet insertion error not propagated to client (Thanks to Qifan Zhang)
mod-onlinesign: server responds with SERVFAIL instead of NOERROR if reply is truncated
man: incorrect default paths for files, databases and sockets #976 (closed)


To generate a diff of this commit:
cvs rdiff -u -r1.100 -r1.101 pkgsrc/net/knot/Makefile
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/knot/buildlink3.mk
cvs rdiff -u -r1.54 -r1.55 pkgsrc/net/knot/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/knot/Makefile
diff -u pkgsrc/net/knot/Makefile:1.100 pkgsrc/net/knot/Makefile:1.101
--- pkgsrc/net/knot/Makefile:1.100	Wed Jul 22 15:06:55 2026
+++ pkgsrc/net/knot/Makefile	Tue Aug 18 19:01:10 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.100 2026/07/22 15:06:55 drixter Exp $
+# $NetBSD: Makefile,v 1.101 2026/08/18 19:01:10 drixter Exp $
 
-DISTNAME=	knot-3.5.6
+DISTNAME=	knot-3.5.7
 CATEGORIES=	net
 MASTER_SITES=	https://knot-dns.nic.cz/release/
 EXTRACT_SUFX=	.tar.xz

Index: pkgsrc/net/knot/buildlink3.mk
diff -u pkgsrc/net/knot/buildlink3.mk:1.1 pkgsrc/net/knot/buildlink3.mk:1.2
--- pkgsrc/net/knot/buildlink3.mk:1.1	Tue Jun 23 06:49:07 2026
+++ pkgsrc/net/knot/buildlink3.mk	Tue Aug 18 19:01:10 2026
@@ -1,11 +1,11 @@
-# $NetBSD: buildlink3.mk,v 1.1 2026/06/23 06:49:07 drixter Exp $
+# $NetBSD: buildlink3.mk,v 1.2 2026/08/18 19:01:10 drixter Exp $
 
 BUILDLINK_TREE+=	knot
 
 .if !defined(KNOT_BUILDLINK3_MK)
 KNOT_BUILDLINK3_MK:=
 
-BUILDLINK_API_DEPENDS.knot+=	knot>=3.5.5
+BUILDLINK_API_DEPENDS.knot+=	knot>=3.5.7
 BUILDLINK_PKGSRCDIR.knot?=	../../net/knot
 
 .endif

Index: pkgsrc/net/knot/distinfo
diff -u pkgsrc/net/knot/distinfo:1.54 pkgsrc/net/knot/distinfo:1.55
--- pkgsrc/net/knot/distinfo:1.54	Wed Jul 22 15:06:55 2026
+++ pkgsrc/net/knot/distinfo	Tue Aug 18 19:01:11 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.54 2026/07/22 15:06:55 drixter Exp $
+$NetBSD: distinfo,v 1.55 2026/08/18 19:01:11 drixter Exp $
 
-BLAKE2s (knot-3.5.6.tar.xz) = 8641abe576b08a182dfb059c98156626b0c231e58605441138ee4f6072cb8a08
-SHA512 (knot-3.5.6.tar.xz) = bd1818552ab076a007aae2d14fdae053e7ffabb37bcfd6cd4485b866fe2d80675f3a4367a87afe4c4a32ea529a503f2b6857632eb74f7cac0598f15b093d286b
-Size (knot-3.5.6.tar.xz) = 1734776 bytes
+BLAKE2s (knot-3.5.7.tar.xz) = 231e114cfc5d035243887998bf44d9ce27a26e7ff5e0e35e9bb54f4e5fb2f7da
+SHA512 (knot-3.5.7.tar.xz) = 83c0a6aaf85ba079639b7fb06cf7cd43daf184573414f74b8da8f795f23a4b0c2361780e6d0622b5fabe88ac62e8dcc3fb2b7f05abdb967b27917539fb063dfc
+Size (knot-3.5.7.tar.xz) = 1735896 bytes
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b