-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 26 Apr 2022 16:05:17 +0300 Source: ldns Architecture: source Version: 1.8.1-1 Distribution: unstable Urgency: medium Maintainer: Debian DNS Team <team+dns@tracker.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1005646 1008638 1009385 Changes: ldns (1.8.1-1) unstable; urgency=medium . * New upstream version 1.8.1 Closes: #1008638 (FTBFS with python 3.10 due to distutils check) Closes: #1005646 (FTBFS with OpenSSL 3.0) Closes: #1009385 (output of ldns-key2ds changes after compiler changes) Closes: CVE-2020-19860 (heap buffer overflow in while verifying zone file) Closes: CVE-2020-19861 (heap overflow/leakage when reading a zone file) * rework the build system, fixing numerous issues: - stop overwriting files at install time from different builds and ending up using the build with wrong configure options - stop running install twice - stop removing system-installed files if any on clean - stop doing (re)build of everything just for the python build - build python bits in the main build and perform extra steps only if there's more than one python version to build for (this effectively eliminates miltiple builds completely) - clarify build with multiple pyversions and why it still fails - remove old, now irrelevant, stuff (like overriding options which are being in effect anyway, or which has no effect) - move variable-based custom install rule for libldns.pc into .install file once dh now allows variables in there - reduce startup time by eliminating dpkg's default.mk which is slow - remove the wrongly-generated staic lib for the python bindings (_ldns.{a,la}) in the install rules instead of ignoring them in dh_install -X - fix add --with-trust-anchor= so it actually works - replace dh --with python with Build-Depend: dh-sequence-python3 - run dh only for supported targets/sequences * update symbols file for 1.8 version, adding 6 new symbols * remove Makefile-remove-install-libldns-pc.patch * update short descriptions of all packages to mention what is actually in there instead of being the same for all packages * remove Build-Dependes: chrpath & pkg-config (not used) * add fix-pyldns-include.patch to fix building pyldns outside source dir * d/control: update Stdandards-Version to 4.6.0.1 (no changes) * d/watch: rework, simplify, use https, enable pgp signature verification * add upstream/signing-key.asc with the followig key: E5F8F8212F77A498 "Willem Toorop <willem@nlnetlabs.nl>" * remove trailing whitespace from d/changelog * add myself to uploaders Checksums-Sha1: 0d89d28421f4ed0966b020de73a37a5383c9a7c2 1900 ldns_1.8.1-1.dsc df19a0404a608821b571525214a18988bc88bb46 1284971 ldns_1.8.1.orig.tar.gz f26fea2a95f353793d0b29474dece0ecfe0368c8 17368 ldns_1.8.1-1.debian.tar.xz 63cc0a3e1c2d8b4fb9fc221028778f23fdeefc17 7359 ldns_1.8.1-1_source.buildinfo Checksums-Sha256: e3d3ab041b49d02becdc6ac9c598aa35c38d7345d6b3adfc64a589ca374d2d16 1900 ldns_1.8.1-1.dsc 958229abce4d3aaa19a75c0d127666564b17216902186e952ca4aef47c6d7fa3 1284971 ldns_1.8.1.orig.tar.gz f556233bd95cc2e3cdd76f0aa965beee39bc764b1305cd703b71ac375787ff77 17368 ldns_1.8.1-1.debian.tar.xz 70725778d17cb4637b39367ffe6f686878c60b7f85141d89d1adde994bbcc72a 7359 ldns_1.8.1-1_source.buildinfo Files: e1383e6f1644827c1faa1f259d988fbf 1900 net optional ldns_1.8.1-1.dsc 563a799efbafb35e691da42921bad031 1284971 net optional ldns_1.8.1.orig.tar.gz adbd443fe33a30df11329e96c7870fba 17368 net optional ldns_1.8.1-1.debian.tar.xz 63492d515912435b21f02cf211027133 7359 net optional ldns_1.8.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmJn7jMPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZN3EIALFdo8A4iE3BR7nMwlfX9cq7b3RsJtMhjt+L JvGiHCsnUfHfieqNVviQN41gC7eqsAX4a9VbYtVa8+jLmRF2KjHRzaF+XaSFNGO0 W0WJME3CwdPMQDh/8DMFdWRNcow/U9Ht/vX3ps0A1eqXzZzYLFtjHyFJHIzpl82i 8qPloluvBOdewrBX2ogPVFvLI+uYEWrWVa2X0iV+Oc7aJuA/c3rgAhPxJHCViX4d 3JF2g1dIHwl7d/uuaDI3mMwX3OrlMHHCVJG7CA99Yiw9ptvQ7qoJx7DGREi0abvE 4KgNEOksD4AwukSHJ1mfKiKoNkdCIFva3DrIPdaAgb1SyeJX0Nw= =3F+G -----END PGP SIGNATURE-----
