2024-02-19 07:02:37 by Adam Ciarcinski | Files touched by this commit (2) | |
Log message: py-dns: updated to 2.6.1 2.6.1 Dnspython 2.6.1 is now available on PyPI. See What’s New for details. This is a bug fix release for 2.6.0 where the “TuDoor” fix erroneously suppressed legitimate Truncated exceptions. This caused the stub resolver to timeout instead of failing over to TCP when a legitimate truncated response was received over UDP. This release addresses the potential DoS issue discussed in the “TuDoor” paper (CVE-2023-29483). The dnspython stub resolver is vulnerable to a potential DoS if a bad-in-some-way response from the right address and port forged by an attacker arrives before a legitimate one on the UDP port dnspython is using for that query. |
2024-02-17 11:20:45 by Adam Ciarcinski | Files touched by this commit (3) | |
Log message: py-dns: updated to 2.6.0 2.6.0 Dnspython 2.6.0 is now available on PyPI. See What’s New for details. This \ release addresses the potential DoS issue discussed in the “TuDoor” paper \ (CVE-2023-29483). The dnspython stub resolver is vulnerable to a potential DoS \ if a bad-in-some-way response from the right address and port forged by an \ attacker arrives before a legitimate one on the UDP port dnspython is using for \ that query. In this situation, dnspython might switch to querying another \ resolver or give up entirely, possibly denying service for that resolution. |
2024-01-21 21:25:31 by Thomas Klausner | Files touched by this commit (3) | |
Log message: py-dns: update to 2.5.0. 2.5.0 Dnspython now uses hatchling for builds. Asynchronous destinationless sockets now work on Windows. Cython is no longer supported due to various typing issues. Dnspython now explicitly canonicalizes IPv4 and IPv6 addresses. Previously it was possible for non-canonical IPv6 forms to be stored in a AAAA address, which would work correctly but possibly cause problmes if the address were used as a key in a dictionary. The number of messages in a section can be retrieved with section_count(). Truncation preferences for messages can be specified. The length of a message can be automatically prepended when rendering. dns.message.create_response() automatically adds padding when required by RFC 8467. The TLS verify parameter is now supported by dns.query.tls(), and the DoH and DoT Nameserver subclasses. The MutableMapping used to store content in a zone may now be specified by a factory when subclassing. Factories may also be provided for writable verisons and immutable versions. dns.name.Name now has predecessor() and successor() methods implementing RFC 4471. QUIC has had a number of bug fixes and also now supports session tickets for faster session resumption. The NSEC3 class now has a next_name() method for retrieving the next name as a dns.name.Name. Windows WMI interface detection should be more robust. |
2023-10-28 21:57:26 by Thomas Klausner | Files touched by this commit (516) | |
Log message: python/wheel.mk: simplify a lot, and switch to 'installer' for installation This follows the recommended bootstrap method (flit_core, build, installer). However, installer installs different files than pip, so update PLISTs for all packages using wheel.mk and bump their PKGREVISIONs. |
2023-08-09 22:19:09 by Adam Ciarcinski | Files touched by this commit (2) | |
Log message: py-dns: updated to 2.4.2 2.4.2 Async queries could wait forever instead of respecting the timeout if the \ timeout was 0 and a packet was lost. The timeout is now respected. Restore HTTP/2 support which was accidentally broken during the https \ refactoring done as part of 2.4.0. When an inception time and lifetime are specified, the signer now sets the \ expiration to the inception time plus lifetime, instead of the current time plus \ the lifetime. |
2023-07-27 08:48:15 by Adam Ciarcinski | Files touched by this commit (2) | |
Log message: py-dns: updated to 2.4.1 2.4.1 This is a bug fix release, see What’s New for the details. |
2023-07-19 12:56:21 by Thomas Klausner | Files touched by this commit (3) | |
Log message: py-dns: update to 2.4.0. Dnspython 2.4.0 is now available on PyPI. See What’s New! Thank you to all the contributors to this release. Special thanks to Jakob Schlyter for writing zone signing code and also refactoring the DNSSEC code to allow new algorithms to be added more easily. Dnspython 2.4.0 requires Python 3.8 or later. Also note that this release drops support for curio and requests (DoH is now done exclusively with httpx). |
2023-05-03 20:45:05 by Thomas Klausner | Files touched by this commit (3) | |
Log message: py-dns: update to 2.3.0. 2.3.0 Python 3.7 or newer is required. Type annotations are now integrated with the source code and cover far more of the library. The get_soa() method has been added to dns.zone.Zone. The minimum TLS version is now 1.2. EDNS padding is now supported. Messages with EDNS enabled and with a non-zero pad option will be automatically padded appropriately when converted to wire format. dns.zone.from_text() and dns.zone.from_file() now have an allow_directives parameter to allow finer control over how directives in zonefiles are processed. A preliminary implementation of DNS-over-QUIC has been added, and will be available if the aioquic library is present. See dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py for more info. This API is subject to change in future releases. For asynchronous I/O, both asyncio and Trio are supported, but Curio is not. DNSSEC signing support has been added to the dns.dnssec module, along with a number of functions to help generate DS, CDS, and CDNSKEY RRsets. Thank you very much Jakob Schlyter! Curio asynchronous I/O support is deprecated as of this release and will be removed in a future release. The resolver object's nameserver field is planned to become a property in dnspython 2.4. Writing to this field other than by direct assignment is deprecated, and so is depending on the mutability and form of the iterable returned when it is read. |
2022-08-24 12:10:30 by Thomas Klausner | Files touched by this commit (1) | |
Log message: py-dns: update patterns now that pkgsrc versions are new enough |
2022-08-24 00:04:09 by Thomas Klausner | Files touched by this commit (3) | |
Log message: py-dns: update to 2.2.1. Python 3 only, upstream does not maintain a changelog any longer. |