Adding debian version 3.2.6-1.debian/3.2.6-1debian

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 1676 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..b08fe23
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,1676 @@
+knot (3.2.6-1) unstable; urgency=medium
+
+  * New upstream version 3.2.6
+  * Remove patch included upstream
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 04 Apr 2023 13:54:46 +0200
+
+knot (3.2.5-2) unstable; urgency=medium
+
+  [ Daniel Salzman ]
+  * Update d/changelog: wrap long lines and fix typos
+  * Update d/*NEWS: remove outdated files
+  * Update d/knot.install: install D-Bus config to /usr/share/dbus-1/system.d/
+  * Update d/control: remove inconsistent 'Multi-Arch: same' hinters
+  * Update d/copyright: update some years
+
+  [ Jakub Ružička ]
+  * Add upstream patch fixing errors on modules load
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 28 Feb 2023 18:05:42 +0100
+
+knot (3.2.5-1) unstable; urgency=medium
+
+  * New upstream version 3.2.5
+
+  [ Daniel Salzman ]
+  * Update d/control: remove dependencies linux-libc-dev and libelf-dev
+  * Update d/control: update and unify xdp-dependent architecture exceptions
+  * Update d/libknot.symbols: update symbols files for non-xdp architectures
+  * Update d/control,rules: switch to external libngtcp2
+  * Update d/control: switch from obsolete lsb-base to sysvinit-utils
+  * Update d/knot.init: fix RUNDIR creation without knot.tmpfiles
+  * Update d/knot.init: remove explicit knotd configuration specification
+    to be consistent with knotc
+  * Update d/knot.postinst: change ownership and permissions for /var/lib/knot,
+    /etc/knot, and /etc/knot/knot.conf
+  * Update d/knot.postrm: add missing directories to purge list in postrm script
+  * Update d/*.symbols: add Build-Depends-Package to libknot and libdnssec
+
+  [ Jakub Ružička ]
+  * Update Standards-Version to 4.6.2 (no changes)
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 02 Feb 2023 13:37:42 +0100
+
+knot (3.2.4-1) unstable; urgency=medium
+
+  * New upstream version 3.2.4
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Mon, 12 Dec 2022 11:52:06 +0100
+
+knot (3.2.3-1) unstable; urgency=medium
+
+  * New upstream version 3.2.3
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Mon, 21 Nov 2022 14:31:59 +0100
+
+knot (3.2.2-1) unstable; urgency=medium
+
+  * New upstream version 3.2.2
+  * Update libknot13.symbols
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 01 Nov 2022 12:40:19 +0000
+
+knot (3.2.1-1) unstable; urgency=medium
+
+  * New upstream version 3.2.1
+    - Compatible with libbpf 1.0 (Closes: #1018911)
+  * Add Build-Depends: libxdp-dev where available
+  * Remove patch included upstream
+  * Update libknot13.symbols
+  * Update knot.service from upstream (Closes: #1019583)
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Mon, 12 Sep 2022 16:06:27 +0000
+
+knot (3.2.0-3) unstable; urgency=medium
+
+  * Add Breaks+Replaces for knot-dnssecutils (Closes: #1018944)
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Fri, 02 Sep 2022 13:31:57 +0000
+
+knot (3.2.0-2) unstable; urgency=medium
+
+  * Update libknot13 symbols for arches without XDP
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 01 Sep 2022 15:11:32 +0000
+
+knot (3.2.0-1) unstable; urgency=medium
+
+  [ Debian Janitor ]
+  * Avoid explicitly specifying -Wl,--as-needed linker flag.
+  * Remove constraints unnecessary since buster
+
+  [ Jakub Ružička ]
+  * gbp: use upstream/3.2 branch
+  * Bump SONAMEs: libknot13, libdnssec9
+  * New knot-dnssecutils subpackage
+  * Enable QUIC
+  * Update debian/copyright
+  * Sync descriptions with upstream package
+  * Bump Standards-Version to 4.6.1
+  * Add d/patches/0001-tests-xdp-tcp-fix-under-32bit-platform.patch
+  * Update debian/tests
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Wed, 24 Aug 2022 11:22:33 +0000
+
+knot (3.1.8-1) unstable; urgency=medium
+
+  * new upstream version 3.1.8
+
+  [ Daniel Salzman ]
+  * d/tests/kdig: make the test more stable by using 1.1.1.1 resolver
+  * d/tests/kdig: skip the test if no internet access detected
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 28 Apr 2022 11:40:38 +0000
+
+knot (3.1.7-1) unstable; urgency=medium
+
+  * new upstream version 3.1.7
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Wed, 30 Mar 2022 15:09:49 +0000
+
+knot (3.1.6-1) unstable; urgency=medium
+
+  * new upstream version 3.1.6
+  * d/knot.install: add dbus config file
+  * d/copyright: update copyright for 2022
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 10 Feb 2022 16:20:00 +0000
+
+knot (3.1.5-1) unstable; urgency=medium
+
+  * new upstream version 3.1.5
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 04 Jan 2022 14:59:07 +0000
+
+knot (3.1.4-1) unstable; urgency=medium
+
+  * new upstream version 3.1.4
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 04 Nov 2021 11:27:41 +0000
+
+knot (3.1.3-2) unstable; urgency=medium
+
+  * d/tests: add sleep to ensure the server is reloaded
+
+ -- Daniel Salzman <daniel.salzman@nic.cz>  Thu, 21 Oct 2021 13:31:44 +0000
+
+knot (3.1.3-1) unstable; urgency=medium
+
+  * new upstream version 3.1.3
+
+  [ Daniel Salzman ]
+  * tests: remove obsolete test for kasp_json2lmdb
+  * knot.postinst: fix lintian warning 'maintainer-script-supports-ancient-package-version'
+  * kasp_json2lmdb: remove unused and obsolete script
+  * get_kaspdb: remove unused and obsolete script
+  * get_user: remove unused and obsolete script
+  * control: remove no-longer-needed python dependencies
+  * TODO: update
+  * doc: fix lintian warnings 'embedded-javascript-library'
+
+  [ Libor Peltan ]
+  * tests: add simple test of DNSSEC and keymgr
+
+  [ Jakub Ružička ]
+  * d/copyright: add url-parser copyright
+  * d/control: add Multi-Arch: same to libknot-dev
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 19 Oct 2021 12:02:30 +0000
+
+knot (3.1.2-1) unstable; urgency=medium
+
+  * new upstream version 3.1.2
+  * d/copyright: sync with upstream
+  * d/knot.maintscript: remove obsolete maintscript
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Wed, 08 Sep 2021 15:41:04 +0000
+
+knot (3.1.1-6) unstable; urgency=medium
+
+  * Source-only upload (try #2)
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Wed, 01 Sep 2021 22:44:55 +0000
+
+knot (3.1.1-5) unstable; urgency=medium
+
+  * Source-only upload to allow migration
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Wed, 01 Sep 2021 11:22:33 +0000
+
+knot (3.1.1-4) unstable; urgency=medium
+
+  * Upload to unstable
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 31 Aug 2021 13:13:13 +0000
+
+knot (3.1.1-3) experimental; urgency=medium
+
+  * Bump min symbol versions to 3.1.1
+  * d/control: bump Standards-Version to 4.6.0
+  * d/control: don't require libmnl-dev on archs without XDP
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Wed, 25 Aug 2021 10:42:42 +0000
+
+knot (3.1.1-2) experimental; urgency=medium
+
+  * Remove XDP-specific symbols from unsupported archs
+  * d/control: improve Multi-Arch hints
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 24 Aug 2021 11:11:11 +0000
+
+knot (3.1.1-1) experimental; urgency=medium
+
+  * new upstream version 3.1.1
+  * d/tests: replace `which` with `command -v`
+  * d/knot.service: sync upstream improvements
+  * d/control: update Build-Depends
+  * Bump SONAMEs: libknot12, libzscanner4
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 17 Aug 2021 16:20:00 +0000
+
+knot (3.0.5-1) unstable; urgency=medium
+
+  * new upstream version 3.0.5
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 25 Mar 2021 13:37:00 +0100
+
+knot (3.0.4-2) unstable; urgency=medium
+
+  * Team upload.
+  * Source-only upload to allow migration.
+
+ -- Santiago Ruano Rincón <santiago@debian.org>  Thu, 04 Feb 2021 10:40:06 +0100
+
+knot (3.0.4-1) unstable; urgency=medium
+
+  * new upstream version 3.0.4
+    - Fix segfault when generating new DNSSEC keys on duplicated zones
+      (Closes: #977101)
+  * move dnstap module to subpackage
+  * move geoip module to subpackage
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 21 Jan 2021 15:51:41 +0000
+
+knot (3.0.3-1) unstable; urgency=medium
+
+  [ Jakub Ružička ]
+  * new upstream version 3.0.3
+  * d/patches: remove makefile patch included upstream
+
+  [ Daniel Salzman ]
+  * Improve XDP mode activation
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 15 Dec 2020 07:08:10 -0500
+
+knot (3.0.2-3) unstable; urgency=medium
+
+  * Team upload.
+  * Disable xdp on armel. Create d/libknot11.symbols.armel accordingly.
+  * Disable fastparser on sh4.
+  * Add d/patches/0001-xdp-rework-Makefile.am-to-avoid-make-distcheck-issue.patch
+    (Closes: #973815)
+  * Remove build-deps not available on hurd and kfreebsds: libbpf-dev,
+    libelf-dev linux-libc-dev. Create symbols files accordingly.
+
+ -- Santiago Ruano Rincón <santiago@debian.org>  Thu, 10 Dec 2020 21:59:10 +0100
+
+knot (3.0.2-2) unstable; urgency=low
+
+  * Team upload.
+  * Add debian/salsa-ci.yml.
+  * d/tests/kdig: Add a fallback option to query on port 443 when 853 is
+    unreachable.
+  * Bump Standards-Version to 4.5.1. No changes needed
+  * Bump d/watch version to 4. No changes needed, but makes lintian happier
+  * Bump debhelper-compat to 13
+
+ -- Santiago Ruano Rincón <santiago@debian.org>  Mon, 07 Dec 2020 16:00:37 +0100
+
+knot (3.0.2-1) experimental; urgency=medium
+
+  * New upstream version 3.0.2
+  * debian/libknot11.symbols: add 2 new symbols
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 12 Nov 2020 09:46:41 -0500
+
+knot (3.0.1-1) experimental; urgency=medium
+
+  * New upstream version 3.0.1
+  * Bump SONAMEs: libknot11, libdnssec8
+  * debian/*.symbols: update symbols
+  * debian/*.install: add new files
+  * debian/docs: README is now README.md
+  * debian/knot.service: update from upstream
+  * debian/copyright: remove obsolete lmdb entry
+  * debian/control: update knot-dnsutils description
+  * debian/control: add build deps for XDP support
+  * debian/control: add build dep for DoH support
+  * debian/control: add myself to Uploaders
+  * debian/gbp.conf: use new upstream/3.0 branch
+  * debian/gbp.conf: use debian/experimental branch
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 22 Oct 2020 08:56:49 -0400
+
+knot (2.9.6-1) unstable; urgency=medium
+
+  * New upstream version 2.9.6
+
+ -- Jakub Ružička <jakub.ruzicka@nic.cz>  Tue, 01 Sep 2020 16:30:41 +0200
+
+knot (2.9.5-1) unstable; urgency=medium
+
+  * New upstream version 2.9.5 (Closes: #961075)
+
+ -- Robert Edmonds <edmonds@debian.org>  Mon, 25 May 2020 23:16:17 -0400
+
+knot (2.9.3-1) unstable; urgency=medium
+
+  * new upstream version
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 05 Mar 2020 18:22:48 -0500
+
+knot (2.9.2-5) unstable; urgency=medium
+
+  * move Vcs-Git back to debian/master, since we are not in experimental
+    any more
+  * wrap-and-sort -ast
+  * move kzonecheck into knot-dnsutils (Closes: #925035)
+  * drop unnecessary empty plugin directory (fixed upstream)
+  * debhelper: bump to dh 12
+  * include ${misc:Pre-Depends} for knot, to resolve
+    skip-systemd-native-flag-missing-pre-depends
+  * clean up .pybuild/ as well
+  * drop dbgsym migration
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 28 Feb 2020 17:53:33 -0500
+
+knot (2.9.2-4) unstable; urgency=medium
+
+  [ Robert Edmonds ]
+  * debian/control: Add ">= 5.1" version for python3-yaml build dependency (Closes: #949931)
+
+  [ Ondřej Surý ]
+  * Upload to unstable
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 21 Feb 2020 11:51:46 +0100
+
+knot (2.9.2-3) experimental; urgency=medium
+
+  * debian/rules: Run pybuild's configure step in
+    override_dh_auto_configure-indep
+
+ -- Robert Edmonds <edmonds@debian.org>  Sun, 26 Jan 2020 16:31:16 -0500
+
+knot (2.9.2-2) experimental; urgency=medium
+
+  * Build a python3-libknot package containing the libknot Python bindings
+    (Closes: #913701)
+
+ -- Robert Edmonds <edmonds@debian.org>  Sat, 25 Jan 2020 15:51:36 -0500
+
+knot (2.9.2-1) experimental; urgency=medium
+
+  * New upstream version 2.9.2
+
+  [ Daniel Kahn Gillmor ]
+  * d/control, d/gbp.conf: pointing to DEP-14 debian/experimental branch
+    (revert before releasing to unstable!)
+
+  [ Robert Edmonds ]
+  * debian/gbp.conf: Set "upstream-branch = upstream/2.9"
+  * debian/patches/0002-zonefile-Verify-mtime-against-full-precision-
+    timesta.patch: Remove, applied upstream
+  * Bump SONAMEs: libknot10, libdnssec7, libzscanner3
+  * debian/control: Drop Replaces/Breaks on knot-libs (<< 2.0.1-4)
+  * debian/control: Drop obsolete Replaces/Breaks on old library packages
+  * debian/rules: Set environment variable KNOT_VERSION_FORMAT=release
+  * debian/patches/0001-avoid-git-version-inclusion-in-debian-
+    packages.patch: Remove
+  * debian/*.symbols: Update symbol files for added/removed symbols in new
+    library SONAMEs
+  * debian/*.symbols: Bump minimum versions to 2.9.2 for all symbols
+  * debian/copyright: Fix path to src/contrib/vpool/* files
+  * debian/knot-doc.doc-base: Remove PDF registration
+
+ -- Robert Edmonds <edmonds@debian.org>  Fri, 24 Jan 2020 22:36:09 -0500
+
+knot (2.7.8-1) unstable; urgency=medium
+
+  * New upstream version 2.7.8
+
+  [ Daniel Salzman ]
+  * Remove resolved lintian-overrides
+  * Don't require libcap-ng-dev on kfreebsd-i386, kfreebsd-amd64, and
+    hurd-i386
+  * Update copyright (Closes: #925905)
+  * Fix typo in copyright
+  * Don't include pdf to doc package
+  * Fix unsafe usage of yaml.load() (Closes: #933917)
+
+  [ Diederik de Haas ]
+  * Remove knslookup from description as it is not provided.
+
+  [ Santiago Ruano Rincón ]
+  * Revert changes about excluding pdf files in distro/deb/rules, moving
+    them to debian/rules (Closes: #933285)
+
+  [ Robert Edmonds ]
+  * debian/gbp.conf: Set "upstream-branch = upstream/2.7"
+  * debian/gbp.conf: [import-orig] Also filter config.guess, config.sub
+  * debian/patches/0003-correct-kdig-documentation-about-no-crypto.patch:
+    Remove, applied upstream
+  * debian/control: Add myself to Uploaders
+  * debian/control: Bump Standards-Version to 4.5.0 (no changes)
+  * debian/copyright: Fix path to src/libdnssec/contrib/vpool/ files
+
+ -- Robert Edmonds <edmonds@debian.org>  Fri, 24 Jan 2020 19:48:01 -0500
+
+knot (2.7.6-2) unstable; urgency=medium
+
+  * add libsofthsm2 when testing for libdnssec/test_keystore_pkcs11
+  * Check fine-grained timestamps on zonefiles.
+  * Correct documentation about key formats
+  * Standards-Version: bump to 4.3.0 (no changes needed)
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 22 Feb 2019 16:51:08 -0500
+
+knot (2.7.6-1) unstable; urgency=medium
+
+  * new upstream release
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 08 Feb 2019 12:53:57 +0000
+
+knot (2.7.4-1) unstable; urgency=medium
+
+  * new upstream release
+  * drop patch applied upstream
+  * d/upstream/signing-key.asc: minimize OpenPGP certificate
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 14 Nov 2018 01:16:27 -0500
+
+knot (2.7.3-3) unstable; urgency=medium
+
+  * update build-deps and autopkgtest deps
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 08 Nov 2018 08:39:43 +0700
+
+knot (2.7.3-2) unstable; urgency=medium
+
+  * postinst: use runuser instead of su for safety and simplicity
+  * fix get_kaspdb and test it against shipped config (Closes: #912210)
+  * added Build-Depends-Package: libknot-dev to symbols files
+  * cleaner diffs: put dh args on separate lines
+  * added authoritative nameserver autopkgtest
+  * Avoid including git version in debian packages
+  * fix broken python
+  * fix up get_user
+  * autopkgtest: test upgrade/conversion tooling
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 07 Nov 2018 22:55:37 +0700
+
+knot (2.7.3-1) unstable; urgency=medium
+
+  * new upstream release
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 15 Oct 2018 17:21:51 -0400
+
+knot (2.7.2-2) unstable; urgency=medium
+
+  * d/rules: try moving DEB_HOST_ARCH check for -latomic
+  * mips and powerpc both appear to build fine without -latomic
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 29 Aug 2018 16:07:02 -0400
+
+knot (2.7.2-1) unstable; urgency=medium
+
+  * new upstream release
+  * try to fix up architecture selection
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 29 Aug 2018 10:34:56 -0400
+
+knot (2.7.1-3) unstable; urgency=medium
+
+  [ Daniel Salzman ]
+  * remove obsolete dependency libjansson-dev
+  * remove obsolete --with-bash-completions
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 27 Aug 2018 19:18:20 -0400
+
+knot (2.7.1-2) unstable; urgency=medium
+
+  * Standards-Version: bump to 4.2.1 (no changes needed)
+  * add -latomic to riscv64 arch as well
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 27 Aug 2018 19:06:08 -0400
+
+knot (2.7.1-1) unstable; urgency=medium
+
+  * new upstream release
+  * SONAME bumps: move to libknot8, libdnssec6, and libzscanner2
+  * adopted pykeymgr from upstream, renaming to
+    /usr/lib/knot/kasp_json2lmdb
+  * ship manpages with dh_installman
+  * kjournalprint is now a shipped as a system administration utility
+  * avoid more autogened files on package import
+  * drop THANKS, no longer shipped upstream
+  * update symbols files
+  * Standards-Version: bump to 4.2.0 (no changes needed)
+  * clean up kdns-utils description
+  * added libcap-ng to build-deps
+  * move to libidn2
+  * d/copyright: correct license of TAP sources
+  * added build-dep on libmaxminddb-dev for GeoIP module
+  * Only conditionally add -latomic based on the platform
+  * record notes about dynamic modules instead of static modules
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 24 Aug 2018 18:02:44 -0400
+
+knot (2.6.8-2) unstable; urgency=medium
+
+  * d/knot.NEWS: fix spelling (thanks, Lintian!)
+  * refresh patches
+  * Standards-Version: bump to 4.1.5 (no changes needed)
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Tue, 10 Jul 2018 16:14:48 -0400
+
+knot (2.6.8-1) unstable; urgency=medium
+
+  * New upstream version 2.6.8
+
+ -- Daniel Salzman <daniel.salzman@nic.cz>  Tue, 10 Jul 2018 16:23:19 +0200
+
+knot (2.6.7-2) unstable; urgency=medium
+
+  * use knot@packages.debian.org as Maintainer (Closes: #899825)
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 24 May 2018 16:00:33 -0400
+
+knot (2.6.7-1) unstable; urgency=medium
+
+  * New upstream version 2.6.7
+
+ -- Daniel Salzman <daniel.salzman@nic.cz>  Thu, 17 May 2018 13:18:22 +0200
+
+knot (2.6.6-2) unstable; urgency=medium
+
+  [ Daniel Salzman ]
+  * Remove already included patches
+  * Add new symbol to libknot7.symbols
+  * Update changelog for 2.6.6-1 release
+
+  [ Daniel Kahn Gillmor ]
+  * standards-version: bump to 4.1.4 (no changes needed)
+  * clean up libknot7.symbols
+  * prepare debian release
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 23 Apr 2018 02:07:36 -0400
+
+knot (2.6.5-3) unstable; urgency=medium
+
+  * accept suggestions from the Multiarch hinter
+  * d/tests/control: rely on ca-certificates to validate the
+    DNS-over-TLS cert
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Sun, 25 Feb 2018 15:49:46 -0800
+
+knot (2.6.5-2) unstable; urgency=medium
+
+  * re-ship /usr/lib/$(DEB_HOST_MULTIARCH)/knot" (Closes: #891319)
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Sun, 25 Feb 2018 10:17:49 -0800
+
+knot (2.6.5-1) unstable; urgency=medium
+
+  * new upstream release
+
+  [ Daniel Salzman ]
+  * Update uploaders and dependencies in the control file
+  * Downgrade 'Recommends' to 'Suggests' for systemd
+  * Update upstream signing key
+
+  [ Daniel Kahn Gillmor ]
+  * wrap-and-sort -ast
+  * add myself to uploaders
+  * move to debhelper 11
+  * Standards-Version: 4.1.3 (no changes needed)
+  * build-depend on python3-sphinx instead of python-sphinx
+  * d/gbp.conf: clean up, use DEP-14
+  * dh11: apply --fail-missing only to dh_missing
+  * remove doc/modules symlink on clean
+  * Use python3 instead of python2 for helper functions
+  * use python3 for pykeymgr
+  * move knot from python 2 to python 3
+  * Move python3-lmdb to Recommends
+  * d/TODO: note future debian packaging work
+  * knot-doc: use system jquery and underscore javascript
+  * include upstream VCS in git history
+  * d/control: add Rules-Requires-Root: no
+  * d/changelog: strip trailing whitespace
+  * ship upstream ChangeLog
+  * d/copyright: drop hat-trie, removed upstream
+  * d/*.NEWS: stop using asterisks
+  * stop declaring unnecessary dirs
+  * stop shipping /usr/lib/$(DEB_HOST_MULTIARCH)/knot
+  * add doc-base entry for knot-doc
+  * d/gbp.conf: improve cleanup during import-orig
+  * fix spelling errors in manpages
+  * info: fix direntry and category
+  * add really simple autopkgtest
+
+ -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Thu, 22 Feb 2018 23:38:33 -0800
+
+knot (2.6.4-1) unstable; urgency=medium
+
+  * Update Vcs-* links to salsa.d.o
+  * New upstream version 2.6.4
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 04 Jan 2018 15:02:46 +0000
+
+knot (2.6.3-1) unstable; urgency=medium
+
+  * New upstream version 2.6.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 24 Nov 2017 15:33:43 +0000
+
+knot (2.6.1-2) unstable; urgency=medium
+
+  * Add Breaks/Replaces for libdnssec5/libknot7 to remedy botched 2.6.0-1
+    upload (Closes: #881638)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 13 Nov 2017 19:58:35 +0000
+
+knot (2.6.1-1) unstable; urgency=medium
+
+  * New upstream version 2.6.1
+  * Remove upstream patch for disabling TCP Fastopen
+
+ -- Ondřej Surý <ondrej@debian.org>  Sun, 12 Nov 2017 03:11:26 +0000
+
+knot (2.6.0-3) unstable; urgency=medium
+
+  * kdig: disable TCP Fastopen by default as it breaks TLS connection
+    (Closes: #879079)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 19 Oct 2017 08:22:18 +0000
+
+knot (2.6.0-2) unstable; urgency=medium
+
+  [ John Bond ]
+  * fix get_kasp and get_user to support unquoted ipv6 addresses
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 05 Oct 2017 13:08:26 +0000
+
+knot (2.6.0-1) unstable; urgency=medium
+
+  * New upstream version 2.6.0
+  * Enable strict symbols checking
+  * Bump libknot 6->7 and libdnssec 4->5 SONAMEs and update symbols files
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 29 Sep 2017 19:46:41 +0200
+
+knot (2.5.4-2) unstable; urgency=medium
+
+  * Drop conflicting links to dig, nsupdate and host (Closes: #741645)
+  * Build-Depend on latexmk (Closes: #872203)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 18 Sep 2017 07:11:39 +0200
+
+knot (2.5.4-1) unstable; urgency=medium
+
+  * New upstream version 2.5.4
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 01 Sep 2017 09:03:02 +0200
+
+knot (2.5.3-3) unstable; urgency=medium
+
+  * Simple rebuild to make knot-doc arch:all again.
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 26 Jul 2017 14:41:26 +0200
+
+knot (2.5.3-2) unstable; urgency=medium
+
+  * Disable dh-exec usage as #831786 breaks dh_install --fail-missing
+    (Closes: #869199)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 24 Jul 2017 10:26:09 +0200
+
+knot (2.5.3-1) unstable; urgency=medium
+
+  * New upstream version 2.5.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Sat, 15 Jul 2017 07:26:12 +0200
+
+knot (2.5.2-1) unstable; urgency=medium
+
+  * New upstream version 2.5.2
+  * Remove all patches merged upstream
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 23 Jun 2017 11:46:34 +0200
+
+knot (2.5.1-4) unstable; urgency=medium
+
+  * Create the modules M-A directory to workaround the bug that fails to
+    start knot when modules directory is missing
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 15 Jun 2017 11:32:09 +0200
+
+knot (2.5.1-3) unstable; urgency=medium
+
+  * Enable dnstap module and set default moduledir to multiarch path
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 15 Jun 2017 08:32:34 +0200
+
+knot (2.5.1-2) unstable; urgency=medium
+
+  * Explicitly exclude example.com.zone to support older debhelpers
+  * Add patch to fix duplicate section merging in the config
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 09 Jun 2017 13:47:17 +0200
+
+knot (2.5.1-1) unstable; urgency=medium
+
+  * New upstream version 2.5.1
+  * Remove upstream patches released as Knot DNS 2.5.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 07 Jun 2017 16:04:16 +0200
+
+knot (2.5.0-2) unstable; urgency=medium
+
+  * Add upstream patches to fix old DNSSEC installations
+  * Skip already converted kasp-db directories
+  * Install pykeymgr from upstream tarball
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 07 Jun 2017 14:20:38 +0200
+
+knot (2.5.0-1) unstable; urgency=medium
+
+  * New upstream version 2.5.0
+  * Update maintscript to use dh-exec and remove obsolete cruft
+  * Bump the package names for libknot and libdnssec to match new
+    SOVERSIONs
+  * Simplify d/rules overrides
+  * Remove not-installed files from d/*.install
+  * Install local copy of pykeymgr (not included in the source
+    distribution)
+  * Add python-lmdb for pykeymgr migration utility
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 07 Jun 2017 11:03:22 +0200
+
+knot (2.4.3-1) unstable; urgency=medium
+
+  * New upstream version 2.4.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 11 Apr 2017 21:17:47 +0200
+
+knot (2.4.2-1) unstable; urgency=medium
+
+  * New upstream version 2.4.2
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 23 Mar 2017 11:47:52 +0100
+
+knot (2.4.1-2) unstable; urgency=medium
+
+  * Enable dnstap module
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 27 Feb 2017 11:35:15 +0100
+
+knot (2.4.1-1) unstable; urgency=medium
+
+  * New upstream version 2.4.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 10 Feb 2017 13:54:24 +0100
+
+knot (2.4.0-3) unstable; urgency=medium
+
+  * Fix timeout call syntax in dh_auto_test invocation
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 25 Jan 2017 15:10:04 +0100
+
+knot (2.4.0-2) unstable; urgency=medium
+
+  * Add -latomic to LDFLAGS to fix FTBFS on platforms that need it
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 23 Jan 2017 11:41:59 +0100
+
+knot (2.4.0-1) unstable; urgency=medium
+
+  * Fix gbp.conf to be readable by git config --file debian/gbp.conf on Jessie
+  * New upstream version 2.4.0
+  * Bump libknot SONAME 4->5
+  * Update symbols files for 2.4.0 release
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 20 Jan 2017 12:15:30 +0100
+
+knot (2.3.3-1) unstable; urgency=medium
+
+  [ Daniel Kahn Gillmor ]
+  * Use secure URLs where possible
+  * Clean up debian/copyright.
+  * Drop duplicate Source: lines (clears lintian binary-control-field-duplicates-source)
+  * Avoid using asterisk in NEWS (clears lintian debian-news-entry-uses-asterisk)
+  * Knot needs a dependency on lsb-base (clears lintian init.d-script-needs-depends-on-lsb-base)
+  * Filter auto-reconfed files out during future gbp import-orig operations
+  * debian/control: clean up Description: lines
+  * Added Documentation= to knot.service
+
+  [ Ondřej Surý ]
+  * Imported Upstream version 2.3.3
+  * Add kjournalprint to knot package
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 08 Dec 2016 14:49:31 +0100
+
+knot (2.3.2-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.3.2
+  * Add new symbols to libknot4.symbols
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 04 Nov 2016 11:31:33 +0100
+
+knot (2.3.1-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.3.1
+  * Bump libknot3 to libknot4
+  * kzonecheck was moved to /usr/bin
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 10 Oct 2016 12:01:41 +0200
+
+knot (2.3.0-4) unstable; urgency=medium
+
+  * Don't fail if there's no knot user defined
+  * Don't list explicit -c or -C path and let daemon figure it out
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 15 Sep 2016 12:44:57 +0200
+
+knot (2.3.0-3) unstable; urgency=medium
+
+  * Ignore the test results if they don't finish within 5 minutes
+  * Correctly break/replace libzscanner0 that contained libzscanner.so.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 11 Aug 2016 08:49:25 +0200
+
+knot (2.3.0-2) unstable; urgency=medium
+
+  * Move examples to knot-doc package (fix arch-only FTBFS)
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 10 Aug 2016 10:17:17 +0200
+
+knot (2.3.0-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.3.0
+   + Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)
+     (Closes: #830809)
+  * Restructure d/rules so dh_install --fail-missing works again
+  * Upstream bumped SOVERSION to libknot3, libdnssec2 and libzscanner1
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 10 Aug 2016 09:16:35 +0200
+
+knot (2.2.1-2) unstable; urgency=high
+
+  * Add texlive-generic-extra to B-D for missing iftex.sty
+    (Closes: #829428)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 11 Jul 2016 11:47:34 +0200
+
+knot (2.2.1-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.2.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 24 May 2016 17:48:16 +0200
+
+knot (2.2.0-3) unstable; urgency=medium
+
+  * knotc checkconf is not knotc conf-check (Closes: #823574)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 20 May 2016 14:22:11 +0200
+
+knot (2.2.0-2) unstable; urgency=medium
+
+  * Do dbgsym migration of debug symbols
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 27 Apr 2016 17:43:59 +0200
+
+knot (2.2.0-1) unstable; urgency=medium
+
+  * confdb should be in /var/lib/knot/ by default
+  * Imported Upstream version 2.2.0
+  * Add libedit-dev to Build-Depends
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 27 Apr 2016 10:10:10 +0200
+
+knot (2.1.1-2) unstable; urgency=medium
+
+  * Add python to Depends and run wrap-and-sort -a
+  * Parse correct /etc/default/knot instead of /etc/default/knotd
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 15 Apr 2016 17:18:02 +0200
+
+knot (2.1.1-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.1.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 10 Feb 2016 20:01:44 +0100
+
+knot (2.1.0-3) unstable; urgency=medium
+
+  * Add small python helper programs to get values from knot.conf
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 25 Jan 2016 12:44:00 +0100
+
+knot (2.1.0-2) unstable; urgency=medium
+
+  * Revert "Run keymgr init on every upgrade (just to be sure it happens)"
+  * Add support for relative directories in kasp-db
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 14 Jan 2016 11:46:35 +0100
+
+knot (2.1.0-1) unstable; urgency=medium
+
+  * Set knot user home directory to /var/lib/knot
+  * Imported Upstream version 2.1.0
+  * Run keymgr init on every upgrade (just to be sure it happens)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 14 Jan 2016 10:55:26 +0100
+
+knot (2.1.0~rc1-55-gf227348-1) unstable; urgency=medium
+
+  * Add libgnutls28-dev and libjansson-dev as dependencies to libknot-dev
+    to satisfy pkg-config requirements
+  * Imported Upstream version 2.1.0~rc1-55-gf227348
+  * Automatically upgrade all KASP databases found in the configuration
+    and restart the server afterwards when upgrading from 2.0.x to 2.1.x
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 13 Jan 2016 14:03:17 +0100
+
+knot (2.1.0~rc1-52-gd80ce77-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.1.0~rc1-52-gd80ce77
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 12 Jan 2016 16:56:12 +0100
+
+knot (2.0.2-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.0.2
+  * Delete d/p/series as we carry no patches
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 24 Nov 2015 19:59:56 +0100
+
+knot (2.0.1-4) unstable; urgency=medium
+
+  * Split knot-libs into individual library packages
+  * Add knot.default file and use it from systemd and init.d scripts
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 05 Oct 2015 20:34:02 +0200
+
+knot (2.0.1-3) unstable; urgency=medium
+
+  * The upstart conffile ends with .conf, fix the stale conffile removal
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 21 Sep 2015 13:54:42 +0200
+
+knot (2.0.1-2) unstable; urgency=medium
+
+  * Compile the production version with NDEBUG
+  * Remove stale upstart init script via dpkg-maintscript-helper rm_config
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 14 Sep 2015 13:41:29 +0200
+
+knot (2.0.1-1) unstable; urgency=medium
+
+  * Imported Upstream version 2.0.1
+  * Fix the do_tmpfiles() in sysvrc script (Courtesy of Daniel Baumann)
+    (Closes: #796921)
+  * Disable -pedantic as it causes errors to be thrown in the tests
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 03 Sep 2015 10:56:16 +0200
+
+knot (2.0.0-1+0) unstable; urgency=medium
+
+  * Bump the version to workaround ~exp* higher than ~bpo*
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 17 Aug 2015 15:05:37 +0200
+
+knot (2.0.0-1) unstable; urgency=medium
+
+  * New upstream version 2.0.0
+   + Bugfixes:
+    - Fix lost NOTIFY message if received during zone transfer
+    - Disable fast zone parser when compiled in Clang (workaround for Clang bug)
+    - kdig: Record correct dnstap SocketProtocol when retrying over TCP
+    - kdig: Hide TSIG section with +noall
+    - Do not set AA flag for AXFR/IXFR queries
+   + Features:
+    - DNSSEC: separate library, switch to GnuTLS, new utilities
+    - DNSSEC: basic KASP support (generate initial keys, ZSK rollover)
+    - Configuration: New text format in YAML, binary store in LMDB
+    - Zone parser: Split long TXT/SPF strings into multiple strings
+    - kdig: Add generic dump style option (+generic)
+    - Try all master servers in multi-master environment
+    - Improved remotes and ACLs (multiple addresses, multiple keys)
+    - Basic support for zone file patterns (%s to substitute zone name)
+    - Disable zone file synchronization by setting 'zonefile_sync' to '-1'
+    - knsupdate: Add input prompt in interactive mode and 'quit' command
+    - knsupdate: Allow TSIG algorithm specification in interactive prompt
+   + Improvements:
+    - Zone dump: Do not write class for SOA record (unified with other RR types)
+    - Zone dump: Do not write master server address into the zone file
+    - Documentation: Manual pages are included in HTML and PDF
+  * Install knot1to2 configuration file conversion tool
+  * Automatically convert knot.conf with some safety-checks
+  * Add note about the conversion to debian/knot.NEWS
+  * Make the build libsystem-{daemon,journal}-dev friendly to allow Ubuntu
+    and backported builds
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 17 Aug 2015 11:56:43 +0200
+
+knot (2.0.0-1~exp2) experimental; urgency=medium
+
+  * Update prepare-environment to match the new config file syntax
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 30 Jul 2015 09:26:52 +0200
+
+knot (2.0.0-1~exp1) experimental; urgency=medium
+
+  * New upstream version 2.0.0
+   + Bugfixes:
+    - Fix lost NOTIFY message if received during zone transfer
+    - Disable fast zone parser when compiled in Clang (workaround for Clang bug)
+    - kdig: Record correct dnstap SocketProtocol when retrying over TCP
+    - kdig: Hide TSIG section with +noall
+    - Do not set AA flag for AXFR/IXFR queries
+   + Features:
+    - DNSSEC: separate library, switch to GnuTLS, new utilities
+    - DNSSEC: basic KASP support (generate initial keys, ZSK rollover)
+    - Configuration: New text format in YAML, binary store in LMDB
+    - Zone parser: Split long TXT/SPF strings into multiple strings
+    - kdig: Add generic dump style option (+generic)
+    - Try all master servers in multi-master environment
+    - Improved remotes and ACLs (multiple addresses, multiple keys)
+    - Basic support for zone file patterns (%s to substitute zone name)
+    - Disable zone file synchronization by setting 'zonefile_sync' to '-1'
+    - knsupdate: Add input prompt in interactive mode and 'quit' command
+    - knsupdate: Allow TSIG algorithm specification in interactive prompt
+   + Improvements:
+    - Zone dump: Do not write class for SOA record (unified with other RR types)
+    - Zone dump: Do not write master server address into the zone file
+    - Documentation: Manual pages are included in HTML and PDF
+  * Install knot1to2 configuration file conversion tool
+  * Automatically convert knot.conf with some safety-checks
+  * Add note about the conversion to debian/knot.NEWS
+  * Make the build libsystem-{daemon,journal}-dev friendly to allow Ubuntu
+    and backported builds
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 29 Jun 2015 10:40:45 +0200
+
+knot (1.6.1-1) unstable; urgency=medium
+
+  * New upstream version 1.6.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 30 Dec 2014 09:50:54 +0100
+
+knot (1.6.0-1) unstable; urgency=medium
+
+  * New upstream version 1.6.0
+  * Switch to network-online.target to mitigate some network not-yet-ready races
+  * Recommend systemd due journald enabled logging (Closes: #766596)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 24 Oct 2014 12:41:32 +0200
+
+knot (1.6.0~rc2-1) unstable; urgency=medium
+
+  * New upstream version 1.6.0~rc2
+  * Update patches for 1.6.0~rc2 release
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 17 Oct 2014 17:32:30 +0200
+
+knot (1.6.0~rc1-1) unstable; urgency=medium
+
+  * New upstream version 1.6.0~rc1
+  * Knot needs lmdb for persistent timers
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 13 Oct 2014 23:06:56 +0200
+
+knot (1.5.3-1) unstable; urgency=medium
+
+  * Move knot-libs to Section: net (Closes: #760795)
+  * New upstream version 1.5.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Sep 2014 17:00:08 +0200
+
+knot (1.5.2-1) unstable; urgency=high
+
+  * Update Vcs-Urls to point to anonscm.debian.org
+  * New upstream version 1.5.2
+    + [CVE-2014-0486]: Fixed remote crash with crafted DNS message
+  * Update patches for 1.5.2 release
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 08 Sep 2014 11:11:56 +0200
+
+knot (1.5.1-3) unstable; urgency=high
+
+  * More arch/indep build rules splitting to fix binary-arch-only builds
+  * Add lintian override to override warning about internal libraries in
+    knot-libs
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 26 Aug 2014 09:43:05 +0200
+
+knot (1.5.1-2) unstable; urgency=medium
+
+  * Enable full hardening via debhelper >= 9
+  * Enable IDN in knot-dnsutils and knot-host packages
+  * Enable systemd libraries only on linux-any
+  * Split arch and indep builds to build the documentation just once
+  * Drop ragel from build depends to allow arm64 builds
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 25 Aug 2014 15:54:34 +0200
+
+knot (1.5.1-1) unstable; urgency=medium
+
+  * New upstream version 1.5.1
+  * Enable systemd notification mechanism
+  * Enable systemd journal enhanced logging
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 20 Aug 2014 10:45:18 +0200
+
+knot (1.5.0-1) unstable; urgency=medium
+
+  * New upstream version 1.5.0
+   + Features:
+    - Pluggable query processing modules
+    - Synthetic IPv4/IPv6 reverse/forward records (optional module)
+    - dnstap support in both utilities & server (optional module)
+    - NOTIFY message support and new TSIG section in kdig
+    - Multi-master support
+    - edns-client-subnet support in kdig
+    - Optional asynchronous startup (config "asynchronous-start")
+    - DDNS forwarding reimplemented
+   + Improvements:
+    - Query processing and core functionality overhaul
+    - Performance and reduced memory footprint
+    - Faster zone events scheduling
+    - RFC compliant queries/responses in some corner cases
+    - Log messages
+    - New documentation (Sphinx)
+    - Transfer sizes logged in bytes if needed
+    - Logging outgoing NOTIFY messages
+    - Logging unauthorized incoming NOTIFYs
+    - Preempt task queue for faster reload
+    - Lazy zone file write after zone transfer (governed by "zonefile-sync")
+   + Bugfixes:
+    - Close zone transfer after SERVFAIL response
+    - Incremental to full zone transfer fallback, wrong log message
+    - Zone events corner cases, reload replanning
+    - Zone flush planning after bootstrap
+    - Incorrect incoming AXFR message sizes
+    - DDNS signing changes were freed too soon, posibility of stale data
+    - knotc remote control key handling
+  * Debian packaging:
+   + d/control: New documentation is using sphinx
+   + d/control: New knot-libs package containing internal shared libraries
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 09 Jul 2014 13:08:26 +0200
+
+knot (1.4.6+hotfix-1) unstable; urgency=medium
+
+  * New upstream version 1.4.6+hotfix
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 22 May 2014 15:39:07 +0200
+
+knot (1.4.6-1) unstable; urgency=medium
+
+  * New upstream version 1.4.6
+  * Update patches for 1.4.6 release
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 22 May 2014 13:15:14 +0200
+
+knot (1.4.5-2) unstable; urgency=high
+
+  * Re-upload to fix botched amd64 upload in 1.4.5-1
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 22 Apr 2014 14:58:30 +0200
+
+knot (1.4.5-1) unstable; urgency=high
+
+  * New upstream version 1.4.5
+   + Fix possible weakness in TSIG signature checking
+  * Refresh patches for 1.4.5 release
+  * Use dh-autoreconf to regenerate autotools files
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 14 Apr 2014 15:11:12 +0200
+
+knot (1.4.4-1) unstable; urgency=medium
+
+  * New upstream version 1.4.4
+   + Server is logging remote control commands
+   + 'knotc reload' doesn't refresh unchanged zones
+   + 'knotc -f refresh' forces zone retransfer
+   + Fixed missing notifications after DDNS/automatic resign
+   + Zone is rebootstrapped if the zone file is unreadable
+   + Progressive bootstrap retry backoff
+   + Zone file parser now allows asterisk as part of the label
+   + Fix journal maximum entry size
+   + Sign DNSKEYs in non-apex nodes as regular RR sets
+   + Various spelling and typo fixes (Courtesy of Robert Edmonds)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 27 Mar 2014 15:49:54 +0100
+
+knot (1.4.3-2) unstable; urgency=medium
+
+  * Add support for autotools-dev and dh-systemd
+  * Enable parallel builds in dh invocation
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 18 Feb 2014 13:44:13 +0100
+
+knot (1.4.3-1) unstable; urgency=low
+
+  * New upstream version 1.4.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 18 Feb 2014 13:03:42 +0100
+
+knot (1.4.2-1) unstable; urgency=low
+
+  * New upstream version 1.4.2
+  * Update OpenSSL << 1.0.0 compatibility patch
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 27 Jan 2014 16:14:33 +0100
+
+knot (1.4.1-2) unstable; urgency=low
+
+  * Add patch to remove the requirement for OpenSSL 1.0.0 to build on
+    Debian squeeze, be warned though that the OpenSSL before 1.0.0 might
+    manifest some threading errors and crashes, so you really should
+    upgrade your system to Debian wheezy.
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 23 Jan 2014 16:53:03 +0100
+
+knot (1.4.1-1) unstable; urgency=low
+
+  * New upstream version 1.4.1
+    + Empty APL record support
+    + 'zonestatus' when using immediate zone syncing
+    + Immediate zone syncing after reload
+    + Race condition writing time values to zone file
+    + Require OpenSSL >= 1.0.0
+  * Don't use dh-autoreconf, upstream uses recent enough autotools
+  * Bump standards version to 3.9.5
+  * Run the tests on every arch without the condition, but don't fail
+    anywhere
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 13 Jan 2014 18:00:18 +0100
+
+knot (1.4.0-1) unstable; urgency=low
+
+  * New major upstream version 1.4.0
+    + Experimental automatic DNSSEC signing
+    + Fastest ragel parser enabled by default
+    + Reduced memory usage
+    + Zone SOA SERIAL policies (INCREMENT, UNIXTIME) for DDNS and
+      automatic DNSSEC signing
+    + IDN support in Knot utilities (kdig, knsupdate, ...)
+    + DNSSEC: support for GOST algorithm
+    + Support for DNSSEC key pre-publication
+  * Remove PATH_MAX patch, it's already included in upstream
+  * Run the tests on all archs, but don't fail the build if the tests fail
+    on broken archs
+  * Update watch file to match (alpha|beta|rc)\d* versions
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 06 Jan 2014 11:00:07 +0100
+
+knot (1.4.0~rc2-1) experimental; urgency=low
+
+  * New upstream version 1.4.0~rc2
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 13 Dec 2013 17:53:26 +0100
+
+knot (1.4.0~rc1-1) experimental; urgency=low
+
+  * Disable tests on GNU Hurd
+  * New upstream version 1.4.0~rc1
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 25 Nov 2013 16:19:27 +0100
+
+knot (1.4.0~beta-1) experimental; urgency=low
+
+  * New upstream version 1.4.0~beta
+  * Update patches for 1.4.0~beta release
+  * Disable fastparser since the ragel is broken in one test
+  * Add knsec3hash to knot package
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 29 Oct 2013 12:25:49 +0100
+
+knot (1.3.4-1) unstable; urgency=low
+
+  * Disable tests on GNU Hurd
+  * New upstream version 1.3.4
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 13 Dec 2013 17:23:52 +0100
+
+knot (1.3.3-1) unstable; urgency=low
+
+  * New upstream version 1.3.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 28 Oct 2013 11:40:13 +0100
+
+knot (1.3.2-3) unstable; urgency=low
+
+  * Add ufw applications.d rule for Knot DNS
+  * Disable recvmmsg on GNU Hurd (since recvmmsg is not implemented on GNU
+    Hurd and will always fail)
+  * Enable fastparser (requires Ragel)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 11 Oct 2013 17:23:35 +0200
+
+knot (1.3.2-2) unstable; urgency=low
+
+  * Define #PATH_MAX to make GNU Hurd happy
+  * Don't enable LTO, it doesn't play well with debugging symbols
+
+ -- Ondřej Surý <ondrej@debian.org>  Sun, 06 Oct 2013 01:57:13 +0200
+
+knot (1.3.2-1) unstable; urgency=low
+
+  * New upstream version 1.3.2
+  * Enable link-time-optimizations by default
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 30 Sep 2013 15:04:01 +0200
+
+knot (1.3.1-1) unstable; urgency=low
+
+  * New upstream version 1.3.1
+  * Add new debian/watch file (Courtesy of Debian QA)
+  * Bump standards to 3.9.4
+  * Stop using /lib/init/vars.sh, we don't use $VERBOSE anymore anyway
+  * Drop syslog.target as it is not needed anymore
+  * Remove SSE detection patch as it was merged upstream
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 27 Aug 2013 14:27:44 +0200
+
+knot (1.3.0-2) unstable; urgency=low
+
+  * Disable SSE detection in the packaged version of Knot DNS
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 16 Aug 2013 13:04:39 +0200
+
+knot (1.3.0-1) unstable; urgency=low
+
+  * New upstream version 1.3.0
+  * Remove upstream patch from 1.3.0~rc5-2 as it is included in
+    this release.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 05 Aug 2013 17:01:23 +0200
+
+knot (1.3.0~rc5-2) unstable; urgency=low
+
+  * Pull some pre 1.3.0 patches (mainly to test before release):
+   + Initialize secondary groups for user <user>.<group>.
+   + Reworked CH TXT records support (RFC 4892).
+   + Fixed inactive xfers may be disconnected depending on the previous
+     result.
+   + Add server starting information to log.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 05 Aug 2013 10:39:48 +0200
+
+knot (1.3.0~rc5-1) unstable; urgency=low
+
+  * New upstream version 1.3.0~rc5
+  * Remove last upstream patch, all our changes have been merged. Yay\!
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 29 Jul 2013 17:15:56 +0200
+
+knot (1.3.0~rc4-2) unstable; urgency=low
+
+  * Disable tests on big endian architectures (but the code still needs to
+    be fixed)
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 23 Jul 2013 14:07:39 +0200
+
+knot (1.3.0~rc4-1) unstable; urgency=low
+
+  * New upstream version 1.3.0~rc4
+  * Add upstream patch to honour CONFIG_DIR
+  * Remove now obsolete patch to run as knot:knot
+  * The knot/ is now added by upstream to @sysconfdir@
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jul 2013 15:15:05 +0200
+
+knot (1.3.0~rc3-2) unstable; urgency=low
+
+  * Add proper support for upstart and systemd along with sysvinit
+  * Add /usr/lib/knot/prepare-environment script which will parse
+    knot configuration file and properly create rundir and set
+    correct permissions to configured values in /etc/knot/knot.conf
+  * Remove /etc/default/knot since the values are now parsed
+    directly from the configuration file
+  * Add /var/lib/knot to knot.dirs, so it gets created on package
+    install
+  * Drop checking for $VERBOSE variable and properly log start/stop from
+    sysvinit script
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 02 Jul 2013 13:08:33 +0200
+
+knot (1.3.0~rc3-1) unstable; urgency=low
+
+  * New upstream version 1.3.0~rc3
+  * Packaging changes:
+    + Use --fail-missing to check for all new files
+    + Remove obsolete patches and update installed conffile with latest
+      options
+    + Don't install knot-zcompile as it is no more
+    + Install minimal example configuration file as /etc/knot/knot.conf
+    + Add --disable-silent-rules to configure invocation
+    + Add patch to fix missing $(DESTDIR) in src/Makefile.am
+    + Set --with-rundir and --with-storage to correct locations
+    + Run under knot:knot by default (create and delete knot user)
+    + Add knot-dnsutils and knot-host packages
+    + Add patch to move knot-{host,dnsutils} manpages to correct location
+    + Add samples/knot.{full,keys}.conf and example zone to examples.
+  * Add knot-doc package with generated documentation (PDF and HTML)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 28 Jun 2013 12:59:55 +0200
+
+knot (1.2.0-2) unstable; urgency=low
+
+  * /etc/init.d/knot now sources /etc/default/knot instead of
+    /etc/init.d/knotd (Closes: #707683)
+  * Pull upstream fix for pidfile creation before dropping priviledges
+    (Closes: #707685)
+  * Enable SSE2 support again (we will simply not support anything older
+    than Pentium M)
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 26 Jun 2013 14:41:04 +0200
+
+knot (1.2.0-1) unstable; urgency=low
+
+  * Imported Upstream version 1.2.0
+   + Final release.
+   + Some small memory leaks fixes.
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 03 Apr 2013 09:16:25 +0200
+
+knot (1.2.0~rc4-1) unstable; urgency=low
+
+  * Imported Upstream version 1.2.0~rc4
+   + knotc 'zonestatus' command
+   + Changing logfile ownership before dropping privileges
+   + knotc respects 'control' section from configuration
+   + RRL: resolved bucket collisions
+   + RRL: updated bucket mapping to conform RRL technical memo
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 22 Mar 2013 15:35:50 +0100
+
+knot (1.2.0~rc3-1) unstable; urgency=low
+
+  * Imported Upstream version 1.2.0~rc3
+    + New functionality: Response Rate Limiting as a response to
+      reflection DNS DDoS attacks in the wild
+    + Add missing RRSIG in ANY queries
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 01 Mar 2013 13:24:28 +0100
+
+knot (1.2~rc2-1) unstable; urgency=low
+
+  * Imported Upstream version 1.2~rc2
+  * Fix git location
+  * Update patches for 1.2 release
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 18 Feb 2013 12:40:01 +0100
+
+knot (1.1.3-1) unstable; urgency=low
+
+  * Imported Upstream version 1.1.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 20 Dec 2012 10:50:41 +0100
+
+knot (1.1.3~rc1-1) unstable; urgency=low
+
+  * Imported Upstream version 1.1.3~rc1
+   + Fixed answering DS queries (RRSIGs not together with DS, AA bit
+     missing).
+   + Fixed setting ARCOUNT in some error responses with EDNS enabled.
+   + Fixed crash when compiling zone zone with NSEC3PARAM but no NSEC3
+     and semantic checks enabled.
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 07 Dec 2012 11:19:35 +0100
+
+knot (1.1.2-1) unstable; urgency=low
+
+  * Imported Upstream version 1.1.2
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 21 Nov 2012 14:45:34 +0100
+
+knot (1.1.2~rc1-1) unstable; urgency=low
+
+  * Imported Upstream version 1.1.2~rc1
+  * Update patches for new release
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 14 Nov 2012 14:04:17 +0100
+
+knot (1.1.1-1) unstable; urgency=low
+
+  * Imported Upstream version 1.1.1
+  * Update and remove obsolete patches for new release
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 31 Oct 2012 10:42:09 +0100
+
+knot (1.1.0-5) unstable; urgency=low
+
+  * Disable SSE2 instruction set, might solve some strange crashes.
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 10 Oct 2012 13:09:54 +0200
+
+knot (1.1.0-4) unstable; urgency=low
+
+  * Disable extra hardening via dpkg-buildflags, which is not needed
+    by debhelper 9, but breaks builds on squeeze
+  * Install man5 and knot.info documentation
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Sep 2012 16:43:26 +0200
+
+knot (1.1.0-3) unstable; urgency=low
+
+  * Bump dependency on debhelper >= 9
+  * Bump standards version to 3.9.3
+  * Fix installation of manpages to correct directories
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Sep 2012 16:02:11 +0200
+
+knot (1.1.0-2) unstable; urgency=low
+
+  * Disable AM_MAINTAINER_MODE and re-run autoreconf -fi
+  * Enable hardening build by default
+  * Update pidfile patch to 1.1.0
+  * Cope with default MultiArch in dh_compat==9 and don't install
+    unittests* binaries
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Sep 2012 15:32:53 +0200
+
+knot (1.1.0-1) unstable; urgency=low
+
+  * Imported Upstream version 1.1.0
+   - User manual now available.
+   - Optionally disable ANY queries for authoritative answers.
+   - Dropping identical records in zone and incoming transfers.
+   - Support for '/' in zone names.
+   - Generating journal from reloaded zone (EXPERIMENTAL).
+   - Outgoing-only interfaces in configuration file.
+   - Following DNAME if the synthetized name is in the same zone.
+   - IXFR-in optimized.
+   - Many zones loading optimized.
+   - Signing SOA with TSIG queries when checking zone version with master.
+  * Enable maintainer mode to generate version.texi as a workaround.
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 31 Aug 2012 16:27:07 +0200
+
+knot (1.0.6-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.6
+   - Add NSEC/NSEC3 for all wildcard CNAMEs in the response.
+   - Fixed potential problems with RCU synchronization.
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 13 Jun 2012 15:31:52 +0200
+
+knot (1.0.5-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.5
+   - Fixed bug with creating journal files which didn't get merged
+     by accident
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 17 May 2012 12:25:27 +0200
+
+knot (1.0.4-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.4
+   - Speed-up loading of many zones due parallelization
+   - Support for TLSA resource record (Type 52)
+   - New commands knotc checkzone and knotc refresh (forced update)
+   - Fixed responses to CNAME queries if the canonical name was also
+     an alias
+   - Fixed crash when NS or MX points to an alias
+   - Fixed crash when bootstraping/compiling a lot of zones
+   - Significant speed-up and memory usage reduction of IXFR-in
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 16 May 2012 09:33:26 +0200
+
+knot (1.0.3-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.3
+   - Fixed bug in non-EDNS0 queries over TCP
+   - Zone compilation time regression fixed
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 18 Apr 2012 09:06:57 +0200
+
+knot (1.0.2-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.2
+   - Bugfix release
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 13 Apr 2012 16:09:11 +0200
+
+knot (1.0.1-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.1
+   - Implemented jitter to REFRESH/RETRY timers
+   - Fixed problem with creating IXFR journal for bootstrapped zone
+   - Fixed race condition in processing NOTIFY/SOA queries
+   - Fixed improper assignment of TSIG algorithm type
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 09 Mar 2012 20:18:37 +0100
+
+knot (1.0.0-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0.0
+  * Update pidfile patch
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 29 Feb 2012 18:46:13 +0100
+
+knot (1.0~rc1-1) unstable; urgency=low
+
+  * Imported Upstream version 1.0~rc1
+  * Move knotd.pid to /var/run where it belongs
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 15 Feb 2012 21:12:56 +0100
+
+knot (0.9.1-3) unstable; urgency=low
+
+  * Install files into knot package (broken build after added debug
+    package)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 23 Jan 2012 15:01:42 +0100
+
+knot (0.9.1-2) unstable; urgency=low
+
+  * Build knot-dbg package with debug symbols
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 23 Jan 2012 13:27:20 +0100
+
+knot (0.9.1-1) unstable; urgency=low
+
+  * Imported Upstream version 0.9.1
+    + RRSet rotation functionality added
+    + New pseudo-random number generator (new BSD licensed)
+    + Fixed build on BSD
+    + Fixes in parsing and dumping of some RR types
+  * Add correct git-buildpackage configuration
+  * Update copyright for new PRNG
+
+ -- Ondřej Surý <ondrej@debian.org>  Sat, 21 Jan 2012 15:47:30 +0100
+
+knot (0.9-1) unstable; urgency=low
+
+  * Imported Upstream version 0.9
+    + Add TSIG support
+    + Several smaller bugfixes
+  * Add correct git-buildpackage configuration
+  * Imported Upstream version 0.9.1
+  * Update copyright for new PRNG
+
+ -- Ondřej Surý <ondrej@debian.org>  Sat, 21 Jan 2012 15:46:54 +0100
+
+knot (0.8.1-1) unstable; urgency=low
+
+  * Imported Upstream version 0.8.1
+    + Correctly handle SPF resource records
+    + Fix wrong text dumping of unknown records.
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 01 Dec 2011 16:27:44 +0100
+
+knot (0.8-1) unstable; urgency=low
+
+  * Initial release (Closes: #647461)
+  * Add some dependencies in the init.d script
+  * Add flex and bison to b-d
+  * Add versioned dependency on liburcu
+  * Daemonize on the start
+  * Update copyright file to include all licenses
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 16 Nov 2011 07:14:55 +0100