From 0ff1a10ccb1fb1805dbe408fd45ad7777b01e30e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= <petr.spacek@nic.cz>
Date: Mon, 10 Jul 2017 14:43:19 +0200
Subject: [PATCH] new upstream release (2.4.5)

---
 .gitignore |  1 +
 knot.spec  | 69 +++++++++++++++++++++++++++++++++++++++++++++++++++++-
 sources    |  4 ++--
 3 files changed, 71 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 9c1a046..5f3441a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /knot-*.tar.xz
 /knot-2.4.0.tar.xz.asc
 /knot-2.4.1.tar.xz.asc
+/knot-2.4.5.tar.xz.asc
diff --git a/knot.spec b/knot.spec
index 282c432..ff257f3 100644
--- a/knot.spec
+++ b/knot.spec
@@ -3,7 +3,7 @@
 
 Summary: High-performance authoritative DNS server
 Name: knot
-Version: 2.4.1
+Version: 2.4.5
 Release: 1%{?dist}
 License: GPLv3
 Group: System Environment/Daemons
@@ -202,6 +202,73 @@ exit 0
 %{_pkgdocdir}/html
 
 %changelog
+* Mon Jul 10 2017 Petr Spacek <petr.spacek@nic.cz> - 2.4.5-1
+New upstream release: 2.4.5
+
+Knot DNS 2.4.5 (2017-06-23)
+===========================
+
+Security:
+---------
+ - Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!)
+
+Bugfixes:
+---------
+ - Corner case journal fixes (huge changesets, OpenWRT operation)
+
+Knot DNS 2.4.4 (2017-06-05)
+===========================
+
+Improvements:
+-------------
+ - Improved error handling in kjournalprint
+
+Bugfixes:
+---------
+ - Zone flush not replanned upon unsuccessful flush
+ - Journal inconsistency after deleting deleted zone
+ - Zone events not rescheduled upon server reload (Thanks to Mark Warren)
+ - Unreliable LMDB mapsize detection in kjournalprint
+ - Some minor issues found by AddressSanitizer
+
+Knot DNS 2.4.3 (2017-04-11)
+===========================
+
+Improvements:
+-------------
+ - New 'journal-db-mode' optimization configuration option
+ - The default TSIG algorithm for utilities input is HMAC-SHA256
+ - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor)
+ - Added some more semantic checks on the knotc configuration operations
+
+Bugfixes:
+---------
+ - Missing 'zone' keyword in the YAML output
+ - Missing trailing dot in the keymgr DS owner output
+ - Journal logs 'invalid parameter' in several cases
+ - Some minor journal-related problems
+
+Knot DNS 2.4.2 (2017-03-23)
+===========================
+
+Features:
+---------
+ - Zscanner can store record comments placed on the same line
+ - Knotc status extension with version, configure, and workers parameters
+
+Improvements:
+-------------
+ - Significant incoming XFR speed-up in the case of many zones
+
+Bugfixes:
+---------
+ - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL
+ - User-driven zscanner parsing logic inconsistency
+ - Lower serial at master doesn't trigger any errors
+ - Queries with too long DNAME substitution do not return YXDOMAIN response
+ - Incorrect elapsed time in the DDNS log
+ - Failed to process forwarded DDNS request with TSIG
+
 * Mon Feb 27 2017 Petr Spacek <petr.spacek@nic.cz> - 2.4.1-1
 - new upstream release:
   + fix: Transfer of a huge rrset goes into an infinite loop
diff --git a/sources b/sources
index ddefb3a..356e7cd 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-2.4.1.tar.xz.asc) = c2c7fede20592922c4ec79bfbc05f7662f0fd68420d8e085cf20112f99392fb358db5896c008fae73d15671815f028504ac5ac335ffdee99d2ff40f2d2f3904f
-SHA512 (knot-2.4.1.tar.xz) = 2b3e6c1a187538b218e3e915aaa91bc38ad4cdecb0f03f31b29bfa83c620d117c169a580ddcc8a33e6422109b422c72f3cf79f2a8d1e10e613edfe4437b4b29c
+SHA512 (knot-2.4.5.tar.xz.asc) = 0ee880ca5397eeb839476cc708fdba98ee488d9933c127b6f993488dec4d085bbd4561d8acd2fa67f77214ceed13658ec21ee2b415dec2a0660409fa42fafe99
+SHA512 (knot-2.4.5.tar.xz) = db4919dbe2dc688f401e6611d784d47e1d40a0f8ec8c8cd6240d89ab9dd2ce7dd1976ac7cb24c712ed8aa074e0026ff0a10e9d6d5e685929d271ae554d9a1cff