baserev update by copy to link target

• Files Changed
• Browse Source

- Skip some tests
  * that require a working resolver and external DNS resolution
  * that require an openssl3 version with support for
    ECDSA with deterministic signature (RFC 6979)"

• Files Changed
• Browse Source

- Update to version 2.7.0
  * dns.query.https() and dns.asyncquery.https() now support
    HTTP/3 and the http_version parameter may be used to specify
    which version to use.
  * If the cryptography module is installed, then dnspython will
    now create deterministic ECDSA signatures by default.
  * The RESINFO and WALLET RdataTypes are now supported.
  * The COOKIE and Report-Channel EDNS0 options are now supported.
  * All supported RdataTypes can now be imported at a single time
    rather than lazily on first use by calling
    dns.rdata.load_all_types().
  * The SVCB and HTTPS records now support the ohttp parameter.
  * xfr() and inbound_xfr() now share a common implementation.
  * Tokens are now supported for QUIC and HTTP/3.
  * dns.message.from_wire() now saves the input wire format in the
    Message’s “wire” attribute. Likewise,
    dns.message.Message.to_wire() now records the generated wire
    format in that attribute.
  * The dns.message.Message object now has a get_options() helper
    to retrieve EDNS0 options of a specified type, and an
    extended_errors() helper to retrieve the list of EDE options
    in a message (if any).
  * dns.message.make_response() now has a copy mode which controls
    how sections are copied. By default, a copy mode appropriate
    for the opcode is used.
    This is currently dns.message.CopyMode.QUESTION for all opcodes
  * If an IP address is used as the hostname in a URL, the https
    query code now passes the sni_hostname to httpx as this is
    required to get httpx to validate the certificate and check for
    an IP subject alternative name.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 2.6.1
  * The Tudoor fix ate legitimate Truncated exceptions, preventing
    the resolver from failing over to TCP and causing the query to
    timeout.
- Update to version 2.6.0
  * As mentioned in the “TuDoor” paper and the associated
    CVE-2023-29483, the dnspython stub resolver is vulnerable to a
    potential DoS if a bad-in-some-way response from the right
    address and port forged by an attacker arrives before a
    legitimate one on the UDP port dnspython is using for that
    query.
    This release addresses the issue by adopting the recommended
    mitigation, which is ignoring the bad packets and continuing to
    listen for a legitimate response until the timeout for the
    query has expired.
  * Added support for the NSID EDNS option.
  * Dnspython now looks for version metadata for optional packages
    and will not use them if they are too old. This prevents
    possible exceptions when a feature like DoH is not desired in
    dnspython, but an old httpx is installed along with
    dnspython for some other purpose.
  * The DoHNameserver class now allows GET to be used instead of
    the default POST, and also passes source and source_port
    correctly to the underlying query methods.
- Update to version 2.5.0
  * Dnspython now uses hatchling for builds.
  * Cython is no longer supported due to various typing issues.
  * Dnspython now explicitly canonicalizes IPv4 and IPv6 addresses.
    Previously it was possible for non-canonical IPv6 forms to be
    stored in a AAAA address, which would work correctly but

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Don't use curio.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to version 2.4.2:
 * Async queries could wait forever instead of respecting the timeout if the timeout was
   0 and a packet was lost.  The timeout is now respected.
 * Restore HTTP/2 support which was accidentally broken during the https refactoring done
   as part of 2.4.0.
 * When an inception time and lifetime are specified, the signer now sets the expiration
   to the inception time plus lifetime, instead of the current time plus the lifetime.
- update to version 2.4.1:
 * Importing dns.dnssecalgs without the cryptography module installed no longer causes
   an ImportError.
 * A number of timeout bugs with the asyncio backend have been fixed.
 * DNS-over-QUIC for the asyncio backend now works for IPv6.
 * Dnspython now enforces that the candidate DNSKEYs for DNSSEC signatures
   have protocol 3 and have the ZONE flag set.  This is a standards compliance issue more
   than a security issue as the legitimate authority would have to have published
   the non-compliant keys as well as updated their DS record in order for the records
   to validate (the DS digest includes both flags and protocol).  Dnspython will not
   make invalid keys by default, but does allow them to be created and used
   for testing purposes.
 * Dependency specifications for optional features in the package metadata have been
   improved.
- update to version 2.4.0:
 * Python 3.8 or newer is required.
 * The stub resolver now uses instances of ``dns.nameserver.Nameserver`` to represent
   remote recursive resolvers, and can communicate using
   DNS over UDP/TCP, HTTPS, TLS, and QUIC.  In additional to being able to specify
   an IPv4, IPv6, or HTTPS URL as a nameserver, instances of ``dns.nameserver.Nameserver``
   are now permitted.
 * The DNS-over-HTTPS bootstrap address no longer causes URL rewriting.
 * DNS-over-HTTPS now only uses httpx; support for requests has been dropped.  A source

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

SR for python stack proposal

• Files Changed
• Browse Source

- add sle15_python_module_pythons (jsc#PED-68)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Clean up SPEC file

• Files Changed
• Browse Source

- Update to version 2.3.0
  * The get_soa() method has been added to dns.zone.Zone.
  * The minimum TLS version is now 1.2.
  * EDNS padding is now supported. Messages with EDNS enabled and
    with a non-zero pad option will be automatically padded
    appropriately when converted to wire format.
  * dns.zone.from_text() and dns.zone.from_file() now have an
    allow_directives parameter to allow finer control over how
    directives in zonefiles are processed.
  * A preliminary implementation of DNS-over-QUIC has been added,
    and will be available if the aioquic library is present. See
    dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py
    for more info. This API is subject to change in future releases
    For asynchronous I/O, both asyncio and Trio are supported,
    but Curio is not.
  * DNSSEC signing support has been added to the dns.dnssec module,
    along with a number of functions to help generate DS, CDS, and
    CDNSKEY RRsets.
  * Curio asynchronous I/O support is deprecated as of this release
    and will be removed in a future release.
  * The resolver object’s nameserver field is planned to become a
    property in dnspython 2.4. Writing to this field other than by
    direct assignment is deprecated, and so is depending on the
    mutability and form of the iterable returned when it is read.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Include in filelist directories with their content.

• Files Changed
• Browse Source

Fix files list

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 2.2.1:
 * dns.zone.from_text failed if relativize was False and an origin was
   specified in the parameters.
 * A number of types permitted an empty "rest of the rdata".
 * L32, L64, LP, and NID were missing from dns/rdtypes/ANY/__init__.py
 * The type definition for dns.resolver.resolve_address() was incorrect.
 * dns/win32util.py erroneously had the executable bit set.
 * The type definition for a number of asynchronous query routines was
   missing the default of None for the backend parameter.
 * dns/tsigkeyring.py didn't import dns.tsig.
 * A number of rdata types that have a "rest of the line" behavior for
   the last field of the rdata erroneously permitted an empty string.
 * Timeout intervals are no longer reported with absurd precision in
   exception text.

• Files Changed
• Browse Source