Fedora 21 Update: knot-1.6.4-1.fc21

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-10307
2015-06-20 13:43:26
--------------------------------------------------------------------------------

Name        : knot
Product     : Fedora 21
Version     : 1.6.4
Release     : 1.fc21
URL         : http://www.knot-dns.cz
Summary     : An authoritative DNS daemon
Description :
Knot DNS is a high-performance authoritative DNS server implementation.

--------------------------------------------------------------------------------
Update Information:

new upstream release
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jun 18 2015 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.4-1
- new upstream release:
  + fix: lost NOTIFY message if received during zone transfer
  + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP
  + fix: kdig, hide TSIG section with +noall
  + fix: do not set AA flag for AXFR/IXFR queries
  + feature: zone scanner, split long TXT/SPF strings into multiple strings
  + feature: kdig, add +generic dump style option
  + feature: try all servers on failure in multi-master environment
  + improvement: zone dump, do not print class for SOA record for consistency
* Wed Apr  8 2015 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.3-1
- new upstream release:
  + fix: performance drop for NSEC-signed zones
  + fix: proper handling of TCP short-writes
  + fix: possible out-of-bound reads in zone parser and packet parser
  + feature: CDS and CDNSKEY support in zone parser
  + improvement: add defaults for TCP config options into documentation
  + improvement: detailed error message if zone reload fails
* Thu Feb 19 2015 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.2-1
- new upstream release:
  + new config option 'max-tcp-clients'
  + fix possible resource leak when terminating inactive TCP clients
* Tue Jan 20 2015 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.1-3
- service file changes:
  + remove dependency on network.target
  + remove bounding capabilities (breaks reload)
* Sat Dec 13 2014 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.1-2
- new upstream release:
  + DNSSEC: support for Single-Type Signing Scheme
  + fix: journal file growing over configured limit
- service file changes:
  + run as 'knot' user and group
  + set security bounding capabilities
  + change Type to 'notify'
* Thu Oct 30 2014 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.0-2
- default config: run server as unprivileged user
- service file: remove useless startup dependencies
- service file: add bounding capabilities
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update knot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------