Update net/powerdns to 3.4.5.

PowerDNS Authoritative Server 3.4.5

Bug fixes:
- Be careful reading empty lines in our config parser and prevent
  integer overflow.
- prevent crash after --list-modules (Ruben Kerkhof)
- Limit the maximum length of a qname

Improvements:
- Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
- Detect GCC 5.1 for boost (Ruben Kerkhof)
- Various PKCS#11 fixes and improvements (Aki Tuomi)
- Fix Coverity issues (Aki Tuomi)
- Fix building on OpenBSD (Florian Obser and Ruben Kerkhof)
- Look for mbedtls before polarssl (Ruben Kerkhof)
- Let pkg-config determine botan dependency libs (Ruben Kerkhof)
- Kill some further mallocs and add note to remind us not to add them back
- Move remotebackend-unix test socket to testsdir (Aki Tuomi)
- Defer launch of coprocess until first question (Aki Tuomi)
- pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)


PowerDNS Authoritative Server 3.4.4

Bug fixes:
- Fix rectify-(all)-zones for mixed case domain names
- Fix CVE-2015-1868
- Blocking IO in busy-wait for remote backend (Wieger Opmeer)
- Fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer)
- Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi)
- Fix segfault in zone2lmdb (Ruben Kerkhof)

New Features:
- pdnssec: warn for insecure wildcards in opt-out zones
- TKEY record type (Aki Tuomi)
- Many PKCS#11 improvements (Aki Tuomi)
- Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi)

Improvements:
- Allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on
  one rectify when securing a NSEC3 zone
- Improvements to the config-file parsing (Aki Tuomi)
- Postgresql check should not touch LDFLAGS (Ruben Kerkhof)
- Log error when remote cannot do AXFR (Aki Tuomi)
- Speed improvements when AXFR is disabled (Christian Hofstaedtler)
- NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer)
- Change ifdef to check for __GLIBC__ instead of __linux__ to prevent
  errors with other libc's (James Taylor)
- Try to raise open files before dropping privileges (Aki Tuomi)
- Add newline to carbon error message on auth (Aki Tuomi)
- Make sure we send servfail on error (Aki Tuomi)
- Ship lmdb-example.pl in tarball (Ruben Kerkhof)
- Allocate TCP buffer dynamically, decreasing stack usage
- Throw if getSOA gets non-SOA record

1 files changed, 2 insertions, 11 deletions

diff --git a/net/powerdns/patches/patch-aa b/net/powerdns/patches/patch-aa
index 0193bc795e5..0b13f22db9b 100644
--- a/net/powerdns/patches/patch-aa
+++ b/net/powerdns/patches/patch-aa
@@ -1,19 +1,10 @@
-$NetBSD: patch-aa,v 1.5 2015/03/27 23:37:52 rodent Exp $
+$NetBSD: patch-aa,v 1.6 2015/06/10 16:24:44 fhajny Exp $
 
-Handle CONF_FILES. `hostname -f` is not portable.
+Handle CONF_FILES.
 
 Installation destination for example config file.
 --- pdns/Makefile.in.orig	2015-03-02 13:17:27.000000000 +0000
 +++ pdns/Makefile.in
-@@ -1176,7 +1176,7 @@ misc.cc unix_utility.cc qtype.cc
- pdns_control_LDFLAGS = $(THREADFLAGS)
- @UNIT_TESTS_TRUE@TESTS_ENVIRONMENT = env BOOST_TEST_LOG_LEVEL=message
- build_date = $(shell LC_TIME=C date '+%Y%m%d%H%M%S')
--build_host = $(shell id -u -n)@$(shell hostname -f)
-+build_host = $(shell id -u -n)@$(shell hostname)
- # Do the test in shell, so we don't confuse automake with ifeq/ifneq.
- @RELEASE_BUILD_FALSE@pdns_version = $(shell test -z "$(git_version)" && echo UNKNOWN || echo "git-$(git_version)")
- @RELEASE_BUILD_TRUE@pdns_version = $(PACKAGE_VERSION)
 @@ -1632,18 +1632,18 @@ clean-libtool:
  	-rm -rf .libs _libs
  install-sysconfDATA: $(sysconf_DATA)