libldns2-1.7.0-lp151.4.3.1<>,T(^|㿸/=„(hhQ/5;\!0Ձ&pg@˕r8&]5Ȫۍ|?_$`*1L~/0gEX-k2z^l 0缧(?̙iyLjHTtútVټ4)3jVB>zU&{qrs[b6c;Eɮ;c֟&_ĔYXw$I>@)?)d   MDHPTgp}     6 HPZda(8 9 : >&O@&^F&mG&H&I&X&Y&\&]&^&b&c'd(De(If(Ll(Nu(`v(hw(x)y) z)<)L)P)V)Clibldns21.7.0lp151.4.3.1A library for developing the Domain Name Systemldns is a C library that can be used for domain name system (DNS) development. It supports RFCs like the DNSSEC documents, and allows developers to create software conforming to RFCs, as well as experimental software for current Internet Drafts.^|lamb26uopenSUSE Leap 15.1openSUSEBSD-3-Clausehttp://bugs.opensuse.orgSystem/Librarieshttp://www.nlnetlabs.nl/projects/ldns/linuxi586u^|^|5feeb0f7c91a8d56f45305f5850a630e1268ed6b85b8125406ac2b26fb8d3894libldns.so.2.0.0rootrootrootrootldns-1.7.0-lp151.4.3.1.src.rpmlibldns.so.2libldns2libldns2(x86-32)@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcrypto.so.1.1libcrypto.so.1.1(OPENSSL_1_1_0)libssl.so.1.1libssl.so.1.1(OPENSSL_1_1_0)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1^xZS]@Z }Y@YW1@W1@W1@U@S}Adam Majer tchvatal@suse.comvcizek@suse.comjengelh@inai.depmonrealgonzalez@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.dedimstar@opensuse.orgmrueckert@suse.de- bsc_1068709.patch: Fixes a double-free vulnerability (bsc#1068709, CVE-2017-1000232) - bsc_1068711.patch: Fixes a buffer overflow during token parsing (bsc#1068711, CVE-2017-1000231)- Switch directly to python3 in order for us to proceed with py2 obsoletion for future releases * Upstream sadly can build only against one of the two- disable DANE verification when building with openssl < 1.1 to fix build on distributions that have openssl 1.0.x- Update descriptions.- Update to version 1.7.0 * Ldns built with openssl-1.1.0 [bsc#1042653] * Fix #551 change Regent to Copyright holder in BSD license in some of the headings of the file, to match the opensource.org BSD license. * -e option makes ldns-compare-zones exit with status code 2 on difference * Filter out specified RR types with ldns-read-zone -e and -E options * bugfix #563: Correct DNSKEY from DSA private key. * bugfix #562: ldns-keygen match DSA key maximum size with library. And check keysizes with all algorithms. * ldns-verify-zone accepts only one single zonefile as argument. * bugfix #573: ldns-keygen write private keys with mode 0600. * Fix configure to make ldns compile with LibreSSL 2.0 * drill now also accepts dig style -y option (-y <[algo:]name:key> i.s.o. -y ) * OPENPGPKEY draft rr types. Enable with: --enable-rrtype-openpgpkey * bugfix #608: Correct comment about escaped characters * CDS and CDNSKEY rr type from RFC 7344. --enable-rrtype-cds configure option removed * fix: Memory leak in ldns_pkt_rr_list_by_name() * fix: Memory leak in ldns_dname2buffer_wire_compress() * bugfix #613: Allow tab as whitespace too in last rdata field of types of variable length. * bugfix: strip trailing whitespace from $ORIGIN lines in zone files * Let ldns-keygen output .ds files only for KSK keys * Parse RFC7218 TLSA mnemonics, but do not output them * Let ldns-dane use SPKI as the default selector i.s.o. Cert * bugfix: Fit left over NSEC3s once more before adding empty non terminals * bugfix #605: Determine default trust anchor location at compile time * bugfix #697: Double free with ldns-dane create * bugfix #623: Do not redefine bool type and boolean values * bugfix #570: Add TLSA, CDS, CDNSKEY and OPENPGPKEY RR types to ldnsx * bugfix #575: ldns_pkt_clone() does not copy timestamp field * bugfix #584: ldns-update fixes. Send update to port 53, bring manpage in sync with the usage text, and don't alter the ldns_resolver passed to ldns_update_soa_zone_mname(). Created a ldns_resolver_clone() function in the process. * bugfix #633: ldns_pkt_clone() parameter isn't const. * bugfix: ldns-dane manpage correction * RFC7553 RR Type URI is supported by default. * Fix ECDSA signature generation, do not omit leading zeroes. * bugfix: Get rid of superfluous newline in ldns-keyfetcher * bugfix: -U option to ldns-signzone to sign with every algorithm * const function parameters whenever possible. * bugfix #725: allow RR-types on the type bitmap window border * Add type CSYNC support, RFC 7477. * Prepare for ED25519, ED448 support: todo convert* routines in dnssec.h, once openssl has support for signing with these algorithms. The dns algorithm number is not yet allocated. These features are not fully implemented yet, openssl (1.1) does not support the algorithms enough to generate keys and sign and verify with them. * Fix drill axfr ipv4/ipv6 queries. * Fix for openssl 1.1.0 API changes. * bugfix #825: Module import breaks with newer SWIG versions. * bugfix #769: Add support for :: in an IPv6 address * bugfix #708: warnings and errors with xcode 6.1/7.0 * bugfix #754: Memory leak in ldns_str2rdf_ipseckey * bugfix #661: Fail NSEC3 signing when NSEC domainname length would overflow. * bugfix #771: hmac-sha224, hmac-sha384 and hmac-sha512 keys. * bugfix #680: ldns fails to reject invalidly formatted RFC 7553 URI RRs. * bugfix #678: Use poll i.s.o. select to support > 1024 fds * Use OpenSSL DANE functions for verification (unless explicitly disabled with --disable-dane-ta-usage). * Bumb .so version * Include OPENPGPKEY RR type by default * rdata processing for SMIMEA RR type * Fix crash in displaying TLSA RR's. * Update ldns-key2ds man page to mention GOST and SHA384 hash functions. * Add sha384 and sha512 tsig algorithm. * Clarify data ownership with consts for tsig parameters. * bugfix: Fix detection of DSA support with OpenSSL >= 1.1.0 * bugfix #1160: Provide sha256 for release tarballs * --enable-gost-anyway compiles GOST support with OpenSSL >= 1.1.0 even when the GOST engine is not available. - Dropped patch ldns-perl-5.22.patch- disable python because the bindings dont match the old python version either- disable perl on sle11 as it needs at least 5.14.2- fix building on SLE11 by disabling gost- Add ldns-perl-5.22.patch: Fix build with perl 5.22.- update to 1.6.17 * Fix ldns_dnssec_zone_new_frm_fp_l to allow the last parsed line of a zone to be an NSEC3 (or its RRSIG) covering an empty non terminal. * Add --disable-dane option to configure and check availability of the for dane needed X509_check_ca function in openssl. * bugfix #490: Get rid of type-punned pointer warnings. Thanks Adam Tkac. * Make sure executables are linked against libcrypto with the LIBSSL_LDFLAGS. Thanks Leo Baltus. * Miscellaneous prototype fixes. Thanks Dag-Erling Smørgrav. * README now shows preferred way to configure for examples and drill. * Bind to source address for resolvers. drill binds to source with -I. Thanks Bryan Duff. * -T option for ldns-dane that has specific exit status for PKIX validated connections without (secure) TLSA records. * Fix b{32,64}_{ntop,pton} detection and handling. * New RR type TKEY, but without operational practice. * New RR types HIP, NINFO, RKEY, CDS, EUI48, EUI64, URI, CAA and TA. * New output format flag (and accompanying functions) to print certain RR's as unknown type * -u and -U parameter for ldns-read-zone to mark/unmark a RR type for printing as unknown type * bugfix #504: GPOS RR has three rdata fields. Thanks Jelte Jansen. * bugfix #497: Properly test for EOF when reading key files with drill. * New functions: ldns_pkt_ixfr_request_new and ldns_pkt_ixfr_request_new_frm_str. * Use SNI with ldns-dane * bugfix #507: ldnsx Fix use of non-existent variables and not properly referring to instance variable. Patch from shussain. * bugfix #508: ldnsx Adding NSEC3PARAM to known/allowable RR type dictionary. Patch from shussain. * bugfix #517: ldns_resolver_new_frm_fp error when invoked using a NULL file pointer. * Fix memory leak in contrib/python: ldns_pkt.new_query. * Fix buffer overflow in fget_token and bget_token. * ldns-verify-zone NSEC3 checking from quadratic to linear performance. Thanks NIC MX (nicmexico.mx) * ldns-dane setup new ssl session for each new connect to prevent hangs * bugfix #521: drill trace continue on empty non-terminals with NSEC3 * bugfix #525: Fix documentation of ldns_resolver_set_retry * Remove unused LDNS_RDF_TYPE_TSIG and associated functions. * Fix ldns_nsec_covers_name for zones with an apex only. Thanks Miek. * Configure option to build perl bindings: --with-p5-dns-ldns (DNS::LDNS is a contribution from Erik Ostlyngen) * bugfix #527: Move -lssl before -lcrypto when linking * Optimize TSIG digest function name comparison (Thanks Marc Buijsman) * Compare names case insensitive with ldns_pkt_rr_list_by_name and ldns_pkt_rr_list_by_name_and_type (thanks Johannes Naab) * A separate --enable for each draft RR type: --enable-rrtype-ninfo, - -enable-rrtype-rkey, --enable-rrtype-cds, --enable-rrtype-uri and - -enable-rrtype-ta * bugfix #530: Don't sign and verify duplicate RRs (Thanks Jelte Jansen) * bugfix #505: Manpage and usage output fixes (Thanks Tomas Hozza) * Adjust ldns_sha1() so that the input data is not modified (Thanks Marc Buijsman) * Messages to stderr are now off by default and can be reenabled with the --enable-stderr-msgs configure option. - enable rrtype-ninfo, rrtype-rkey, rrtype-cds, rrtype-uri, rrtype-ta - build pyldnsx bindings - build perl bindings - pass the path to our CA store/sbin/ldconfig/sbin/ldconfiglamb26 15852430711.7.0-lp151.4.3.11.7.0-lp151.4.3.1libldns.so.2libldns.so.2.0.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12196/openSUSE_Leap_15.1_Update/f6c1550e6f74d997d541b5e98b5dd326-ldns.openSUSE_Leap_15.1_Updatedrpmxz5i586-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=67e170bb59c7798352dbb732eabcd5ac26cc016e, stripped PR R RRRRRRR R ROjҔRyZutf-815ecc8507bd21a17b607c117b12720e269f56cf56624f3c66c2c71da2347c4e2?7zXZ !t/;&]"k%nd(DjPz d)*VI)%,|lU ?7&_YQKVLu+ig|`wTeBRO!z rX7E= 4. L{_1 \)?YW_p*^&KUz#0dw^f#KÌ<79F"#<~!WXt jNM "|&E^Ŋ饌~@КD L]ODm{?pߓ$NƳ)o`܅dm/ٔBO2Tħ/Ϛj]W&wwFc8,%|N֙Z[m!9V2z5bʃCfg^5bBph5,P`ΧS%lE|rH>vҝ ?Ct n dXEhtAn4_1 Uf~ pK"8h!=m45!*PR&W5{#sQk{]~P?25򤜗4*.fUB>RsoeL86D?r~;xa@(de+סU>:%c5]Z2^'mry³tz|"JZmz8}aKefz1p&LX3`zO я(6K Ya4ge$[y_ ϝ%Ii "cj@ԜljL4'="/΅O=B`>ip_lmaZ/xa^LL'ODlZ ay]ְIM;TV#076f<^jDDf c[Z~oⅿ c[}fhKaX鶞ZZI0v[--tX@ͮ8_*2|"̥}K2d uԼma0$GDK zLrLZ">Ew3$MlPkq.xv>gă|P;R8j֙lM3[%T ߁Ób&x>*i'hCGB?A% 2O"[0YPhJ .])*܁;PQPxeڲk5<~n ӂWI&纜UL,Q.e΋|2KJp-R/|'dD,g#VΰchKuEh3/\)+Ż4,S!߶3`Cf:\tD^8H>op}OЩMkc#3uMRaQєĖ]ԢF7?`vJw ܠg8Q+ܾ(6$ –6Z|,LyD(w^kەX+BKy>yFbd*|n!;n`TDcjF=z~t]' 9WwC$Yw7m>'F;ņ)dV10Eds򞞮 43ah5)ˁ-{2ȄmE#j' gXQsψs6hi°.XύP8 ԀRxBgrgC 6~ȃ6 A,3c'3slZj4*QsRohܤI|Qh`LD/ťt=cOE4N}6ԅ"KqQ7fWL58%L"^=% XUzh;b[):뛏 D k5y-:A m~sF0D,thJ8Nh7k6 6n49^Ǣ:tb*aE]YĞA,f+𤋮Ux[J*d*.QT!Ȯcm 6#?yFaO=Y~I<8lՉ:sl;O!V2RkF;i$&h=hcwJ l'`_ͫ6HZfMzv̊~ΈOuU9XuO\A׎G*.tQN62$*φWìu;?"MMΆsv UmZo~.R <ڸҨ6'B[ta0(KtEHL-PnCLfݨcKF"T߆hxT/IsΨKcjT߯ێJ'@r0G1+FŜ"4Gg$ؕ=(~,A|}EyҼ7$dA e!Yg:$rll= ˣ2/59$J/5ʳ:;=zKf7LWqiFեi\C@dzS?yz`ЈOǏ~ЩvM, UO{+5ڤ>G IK9kY~q ZƭbM=}R_hԕmͭT"JpDHr2ԞAؖ22Ol̈́'1NE"ɞ4&x2{.s}A4ν< d;4j4@(1;L}G _qSc(T|ֲx`ͮ/Ҋ %#2.'T([&\6 ,JF@smT.mኵSHa| F:ɜBmoM&P|!η|bq>}h )G{:!`V F5NUkw %ۻNp 'e˶n>8DwT(#3j ۍEq3kӘ#5vw#k([#sHfeAeC{~"Q-Q+ɳqEš+%-IQ):b5W:NcZØ%Մt^ !t}Ƶk"JrCC}œk䭆w|├\<$cE%hҠgNi㨻U9 ԺL-*q!%(6}m{i9~,QXCݥ yn H>vV#iI  -gk2__\䖙6P..PcT}K G>fJZىS{[ @EXє'>S2]%^Aj|)Az"W1pDžV<{*2K`JZX NZ)GU}YHޤߖq'$*ڗ'-OS>JZn߸XT?`ۍ$CI/b"JLdr%Zpknx DMyQ5((z9{h^dzFeldŢ#ϊO7yF]W-`S1\ dCARMRS|d(.Z(͘Oh'y{mp c:ָ{ϸB(v h&dz"aA@/r#D-zMm-uhl}CEpmBu.p2T"!P7P_d)*aԋ;urЂ$VϦM/kZ0_` āX%kpv lR1D͐KS>7ju]=aiU6rsbkj1[[o:'j0gu)z2pbJSSi"A},rZD7 y,,ĿŁTQ H7KOGM}hYrt[w6a$*hFb yzKѮUj%cDQcikS:bgmM3Nxkrh4uDiN%ɩp=A.!z~pg(O?jÏk pwp  ?~98( !t'v>4\"$8Ka.!;̤:'4j7RGѓ:-0P@ｧTQڱ=!.}ӇϑC6\D:4H@$c92.=䞉|@U,2v_^[THP֑mYN%'Lr*2d PbS{ٱJ*}ޤ8e,PTw,r(\iL*<&4XuE҉:bW*J y])s u+_ƚqHT'ӼGuA3<~QWו?MJآaZ/{o湈Bsޚ5ݢ}HEWމ CùKI;C支fyRɫ|͹) S~U_u:9+כeFMFص:G /Hzk #e )i4 gRDa?%C2 8Ҧի)7fɫuhͳsun=)dz4nLave1"E`7h#ߌ*T7nkʑk Jģ1h <,>׮0 %ҭb '\P6RT EKJ ԇu6zmƼne'[uXw :[l`;h$zaĔpY>ih灈j^ 2U]&"VaM$808j^a/z2&,q" FlllJʍr;\566awgGk<1wML2~u(e~vOǐV=lׅkhǦvqžzR^[R'ٹs xa]\䮕Y_vلuBɉ{v!ޱY&^usըW&jn`Q|@t4oXԍe&2b=ʹ,SpJe>bi?H`"y@kXLt96 MEPڀ5A'0UӉ$l+Blڃ2(P>IaJ]t,e`B`fP QGA|=5-\gZNsJj)ZX}OR ٽʫJvj_I9*fI=62sX0ʯO(㫯"W,$e%r5PXo~F`=)~&ejy>P9Vm X!=+)kncsYB`RpbsaȊIcqӪ5- KRm Z#7($!yǵl?fSQ^@I^,?YƭFTZ9 엳jÕ1j>Tໂ91 X{(Ӑ' ;Pjl|{h2r{w_esEի}[#9 )'eaTW'E((pv=1`itpV ы# ;hLm B^ѠbB K%adԍgH%d4Yw!,&xg3p&\ Y ;=8՜z^"׮4 5Lv YZ