From: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Sat, 13 Jun 2026 23:12:28 +0000 (+0200)
Subject: knot: Update to 3.5.5
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=875dae650313b7da81c277db593f6ff5337f0ac4;p=ipfire-2.x.git

knot: Update to 3.5.5

For details see:
https://www.knot-dns.cz/2026-06-12-version-355.html

"Version 3.5.5

Friday, June 12, 2026
Features:

        knotd: support for binding wildcard addresses to a specific network interface
        mod-alias: ALIAS record synthesis from locally served targets (Thanks to Bron Gondwana) !1867

Improvements:

        knotd: zone XFR freeze state is persistent across restarts by storing it in timers
        knotd: optimized rescheduled DNSSEC validation
        knotd: hardened manually triggered DNSSEC validation
        utils: configuration detection fails if the database is empty or inaccessible
        utils: LMDB reader lock table is purged even for read-only access
        utils: errors when writing to stdout are reported
        libs: upgraded embedded libngtcp2 to 1.23.0
        doc: various improvements

Bugfixes:

        knotd: missing mutex lock in server startup check
        knotd: server crashes if the QUIC client limit is lower than the number of UDP workers
        knotd: misleading error log for DS check #969
        knotd: empty catalog database is created when purging orphans
        knotd: false error report when there is no journal during purging orphans
        knotd: the '--' specification doesn't work with 'zone-serial-set' and 'zone-key-rollover'
        knotd: zone backup prevents timer dumping, resulting in inconsistent timers
        knotd: zone reload causes timer dumping to be skipped
        knotd: segfault on SIGTERM if periodic statistics dumping is enabled #972
        knotd: redundant RRSIGs are removed during DNSSEC validation
        knotd: missing AA flag in AXFR and IXFR responses
        libknot: unnecessary increase in library size
        libdnssec: memory leak when PEM key generation fails
        libknot: undefined behavior in QUIC data stream processing
        libknot: assertion failure in QUIC connection handling under high load
        mod-geoip: inconsistent behavior for specific records and ANY queries #971
        redis: incorrect filter parameter parsing in KNOT.UPD.LOAD commands
        redis: database crashes if it's built with jemalloc
        kdig: undefined behavior if both +https and +quic are specified
        kxdpgun: crash when reusing a swept-out QUIC connection"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/lfs/knot b/lfs/knot
index fee499cee..a68619134 100644
--- a/lfs/knot
+++ b/lfs/knot
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.5.4
+VER        = 3.5.5
 
 THISAPP    = knot-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = ddd7b2fdcc2fbd23c3ff3173026883bae4b068eac7b076a641353a0c2f13b525914c6d8df3ea41b339667c28f4f5e70486b51fc7b6eee2de7bdf648b3ec2d3c8
+$(DL_FILE)_BLAKE2 = 5ee478109a26e3b163da169e7e22a03780727528f84953e399f25670d48392b6b407388c38b152bc90399f517b70676168735c1aba4028326237b92cdf904938
 
 install : $(TARGET)