nsd-4.14.3-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

NSD is a complete implementation of an authoritative domain name server, developed
by NLnet Labs, with the purpose of creating more diversity in the DNS landscape.

Provides

• nsd
• config(nsd)
• group(_nsd)
• nsd(x86-64)
• user(_nsd)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• config(nsd) = 4.14.3-1.1
• coreutils
• coreutils
• findutils
• group(_nsd)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.10)(64bit)
• libc.so.6(GLIBC_2.12)(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.15)(64bit)
• libc.so.6(GLIBC_2.16)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.26)(64bit)
• libc.so.6(GLIBC_2.27)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.36)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libevent-2.1.so.7()(64bit)
• libfstrm.so.0()(64bit)
• libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)
• libfstrm.so.0(LIBFSTRM_0.4.0)(64bit)
• libprotobuf-c.so.1()(64bit)
• libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• libsystemd.so.0()(64bit)
• libsystemd.so.0(LIBSYSTEMD_209)(64bit)
• openssl
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• shadow
• shadow
• shadow
• user(_nsd)

License

BSD-3-Clause

Changelog

* Tue Jul 28 2026 Adam Majer <adam.majer@suse.de>
  - Update nsd.keyring
* Fri Jul 03 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
  - update to 4.14.3:
    https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog
    * CVE-2026-12490: Bypass of client certificate verification with transfer over TLS (bsc#1269563)
    * CVE-2026-12246: Out of bounds stack write with crafted APL RR (bsc#1269564)
    * CVE-2026-12245: Denial of DNS over TLS service by any DoT client (bsc#1269565)
    * CVE-2026-12244: Heap overflow and crash with crafted SVCB RR (bsc#1269566)
  - update to 4.14.2:
    https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog
  - update to 4.14.1:
    https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog
  - update to 4.14.0:
    https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog
  - add new Requires for openssl, as this is needed for the
    nsd-control-setup script to generate the certificates
* Tue Nov 18 2025 Marcus Rueckert <mrueckert@suse.de>
  - update to 4.13.0:
    https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog
    https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog
  - enable systemd notify support. New Buildrequires:
    pkgconfig(systemd) pkgconfig(libsystemd)
  - enable dnstap support. New BuildRequires:
    libfstrm-devel libprotobuf-c-devel protobuf-c
  - enable tcp fast open support
  - enable support for >= 2038
* Mon Feb 26 2024 Cristian Rodríguez <crrodriguez@opensuse.org>
  - As far as it is known the kernel has a working recvmmsg
    pass --enable-recvmmsg to configure.
  - Don't --enable-mmap. Replacing malloc may sound attractive but
    all safety checks to prevent corruption included in libc are lost.
* Wed Feb 07 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Provide user/group symbol for user created during pre.
* Mon Jan 29 2024 Dirk Müller <dmueller@suse.com>
  - update to 4.8.0:
    * Fix unit test kill_from_pidfile function for nonexistent
      files because the argument is evaluated before the test
      expression.
    * Fix rr-test to also convert the contents of the just written
      output file.
    * Fix test set to remove -f nsd.db and rm nsd.db commands.
    * Fix test set to remove difffile option.
    * Fix #14: Set timeout to 3s when servicing remaining TCP
      connections.
    * Fix: Always instate write handler after reading queries from
      TCP.
    * Answer first query on connections accepted just before
      reload.
    * Merge #305: faster stats. Statistics can be gathered while a
      reload is in progress.
    * Remove on-disk database.
    * Fix processing of consolidated IXFRs.
    * Fix for interprocess communication to set quit sync command
      from main process explicitly.
    * Merge #281: Proxy protocol. An implementation of PROXYv2 for
      NSD.
    * It can be configured with proxy-protocol-port: portnum with
      the port number of the interface on which proxy traffic is
      handled.
    * The interface can support proxy traffic for UDP, TCP and
      TLS.
    * Fix autoconf 2.69 warnings in configure.
    * Merge #287: Update nsd.conf.5.in.
    * Fix unused variable warning in unit test of udb.
    * Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available
      on Mac/Darwin.
    * Fix unused but set variable warning.
      bind8-stats and --without-ssl are specified.
    * Add missing items to doc/RELNOTES.
* Fri Aug 04 2023 Adam Majer <amajer@suse.com>
  - Adapt spec file to work nicer with containers, like no systemd
  - Fix build for SLE12
* Wed Jun 21 2023 Andrea Manzini <andrea.manzini@suse.com>
  - New upstream release 4.7.0
    This release adds a script for bash autocompletion for nsd-control. Also
    nsd-control can be configured to use unencrypted operation also when
    compiled without openssl. There is also a systemd service unit example
    file contributed. The dnstap log service can be contacted over TCP, with
    the dnstap-ip: ip option. It is also possible to use TLS, with
    dnstap-tls, it is enabled by default, and can be configured with the
    dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
    dnstap-client-cert-file options.
    FEATURES:
    * Fix #267: Allow unencrypted local operation of nsd-control.
    * Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
    * dnstap over TLS, default enabled. Configured with the
      options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
      dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
    BUGFIXES:
      see https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_7_0_REL
* Thu Nov 10 2022 Michael Ströder <michael@stroeder.com>
  - New upstream release 4.6.1
    FEATURES:
  - Set ALPN "dot" token during connection establishment as per RFC9103
    section 7.1 (Thanks Cesar Kuroiwa).
  - Add SVCB dohpath support
    BUG FIXES:
  - Fix static analyzer reports, fix wrong log print when skipping xfr,
    fix to print error on pipe read fail, and assert an xfr is in
    progress during packet checks.
  - Use AC_PROG_CC_STDC with autoconf versions prior to 2.70.
  - Add missing documentation for zone verification.
  - Fix #212: Change commandline control actions to always log.
  - Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work
    on OpenBSD.
  - Change zone parsing to accept non-trailing newline.
* Fri Jul 01 2022 Michael Ströder <michael@stroeder.com>
  - New upstream release 4.6.0
    FEATURES:
  - Port zone-verification from CreDNS to NSD4.
    BUG FIXES:
  - Fix static analyzer reports on ixfrcreate temp file.
  - Fixup wrong ixfrcreate fread return check.

Files

/etc/nsd
/etc/nsd/nsd.conf
/etc/nsd/nsd.conf.sample
/etc/nsd/zones
/run/nsd
/usr/lib/systemd/system/nsd.service
/usr/lib/tmpfiles.d
/usr/lib/tmpfiles.d/nsd.conf
/usr/sbin/nsd
/usr/sbin/nsd-checkconf
/usr/sbin/nsd-checkzone
/usr/sbin/nsd-control
/usr/sbin/nsd-control-setup
/usr/sbin/rcnsd
/usr/share/doc/packages/nsd
/usr/share/doc/packages/nsd/CREDITS
/usr/share/doc/packages/nsd/ChangeLog
/usr/share/doc/packages/nsd/LICENSE
/usr/share/doc/packages/nsd/NEW-CFG-OPTION
/usr/share/doc/packages/nsd/NSD-4-features
/usr/share/doc/packages/nsd/NSD-DATABASE
/usr/share/doc/packages/nsd/NSD-DIFFFILE
/usr/share/doc/packages/nsd/NSD-FOR-BIND-USERS
/usr/share/doc/packages/nsd/NSD-VERIFY-MODS
/usr/share/doc/packages/nsd/README
/usr/share/doc/packages/nsd/README.icc
/usr/share/doc/packages/nsd/README.svn
/usr/share/doc/packages/nsd/RELNOTES
/usr/share/doc/packages/nsd/REQUIREMENTS
/usr/share/doc/packages/nsd/TESTPLAN
/usr/share/doc/packages/nsd/TODO
/usr/share/doc/packages/nsd/UPGRADING
/usr/share/doc/packages/nsd/coding-style
/usr/share/doc/packages/nsd/contrib
/usr/share/doc/packages/nsd/contrib/README
/usr/share/doc/packages/nsd/contrib/autocomplete_nsd-control.bash
/usr/share/doc/packages/nsd/contrib/bind2nsd
/usr/share/doc/packages/nsd/contrib/bind2nsd/COPYING
/usr/share/doc/packages/nsd/contrib/bind2nsd/ChangeLog
/usr/share/doc/packages/nsd/contrib/bind2nsd/MANIFEST
/usr/share/doc/packages/nsd/contrib/bind2nsd/README
/usr/share/doc/packages/nsd/contrib/bind2nsd/TODO
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/Config.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/Key.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/NamedConf.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/NsdConf.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/Parser.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/Tokenizer.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/Utils.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/Zone.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd/__init__.py
/usr/share/doc/packages/nsd/contrib/bind2nsd/chk_version
/usr/share/doc/packages/nsd/contrib/bind2nsd/etc
/usr/share/doc/packages/nsd/contrib/bind2nsd/etc/bind2nsd.conf
/usr/share/doc/packages/nsd/contrib/bind2nsd/install.sh
/usr/share/doc/packages/nsd/contrib/bind2nsd/scripts
/usr/share/doc/packages/nsd/contrib/bind2nsd/scripts/bind2nsd
/usr/share/doc/packages/nsd/contrib/bind2nsd/scripts/nsd-sync
/usr/share/doc/packages/nsd/contrib/bind2nsd/scripts/s64-mkpw
/usr/share/doc/packages/nsd/contrib/bind2nsd/scripts/s64-sync
/usr/share/doc/packages/nsd/contrib/bind2nsd/set_version
/usr/share/doc/packages/nsd/contrib/bind2nsd/setup.py
/usr/share/doc/packages/nsd/contrib/bug390.patch
/usr/share/doc/packages/nsd/contrib/container
/usr/share/doc/packages/nsd/contrib/container/Dockerfile
/usr/share/doc/packages/nsd/contrib/container/README.md
/usr/share/doc/packages/nsd/contrib/container/entrypoint.sh
/usr/share/doc/packages/nsd/contrib/container/nsd.conf
/usr/share/doc/packages/nsd/contrib/nsd-tmpfiles.conf
/usr/share/doc/packages/nsd/contrib/nsd-tmpfiles.conf.in
/usr/share/doc/packages/nsd/contrib/nsd.init
/usr/share/doc/packages/nsd/contrib/nsd.openrc
/usr/share/doc/packages/nsd/contrib/nsd.openrc.conf
/usr/share/doc/packages/nsd/contrib/nsd.openrc.in
/usr/share/doc/packages/nsd/contrib/nsd.service
/usr/share/doc/packages/nsd/contrib/nsd.spec
/usr/share/doc/packages/nsd/contrib/nsd.zones2nsd.conf
/usr/share/doc/packages/nsd/contrib/nsd_munin_
/usr/share/doc/packages/nsd/contrib/patch_for_s6_startup_and_other_service_supervisors.diff
/usr/share/doc/packages/nsd/differences.pdf
/usr/share/doc/packages/nsd/differences.tex
/usr/share/doc/packages/nsd/manual
/usr/share/doc/packages/nsd/manual/catalog-zones.rst
/usr/share/doc/packages/nsd/manual/conf.py.in
/usr/share/doc/packages/nsd/manual/configuration.rst
/usr/share/doc/packages/nsd/manual/index.rst
/usr/share/doc/packages/nsd/manual/installation.rst
/usr/share/doc/packages/nsd/manual/manpages
/usr/share/doc/packages/nsd/manual/manpages/nsd-checkconf.rst
/usr/share/doc/packages/nsd/manual/manpages/nsd-checkzone.rst
/usr/share/doc/packages/nsd/manual/manpages/nsd-control.rst
/usr/share/doc/packages/nsd/manual/manpages/nsd.conf.rst
/usr/share/doc/packages/nsd/manual/manpages/nsd.rst
/usr/share/doc/packages/nsd/manual/reference
/usr/share/doc/packages/nsd/manual/reference/configure-options.rst
/usr/share/doc/packages/nsd/manual/reference/log-diagnosis.rst
/usr/share/doc/packages/nsd/manual/reference/rfc-compliance.rst
/usr/share/doc/packages/nsd/manual/requirements.txt
/usr/share/doc/packages/nsd/manual/resources
/usr/share/doc/packages/nsd/manual/resources/css
/usr/share/doc/packages/nsd/manual/resources/css/dark.css
/usr/share/doc/packages/nsd/manual/resources/css/light.css
/usr/share/doc/packages/nsd/manual/resources/favicon.ico
/usr/share/doc/packages/nsd/manual/resources/nsd-duotone-white.png
/usr/share/doc/packages/nsd/manual/resources/nsd-duotone-white.svg
/usr/share/doc/packages/nsd/manual/running
/usr/share/doc/packages/nsd/manual/running/interfaces.rst
/usr/share/doc/packages/nsd/manual/running/logging.rst
/usr/share/doc/packages/nsd/manual/running/tuning.rst
/usr/share/doc/packages/nsd/manual/running/using-tsig.rst
/usr/share/doc/packages/nsd/manual/running/zone-expiry.rst
/usr/share/doc/packages/nsd/manual/xdp.rst
/usr/share/doc/packages/nsd/manual/zonefile.rst
/usr/share/man/man5/nsd.conf.5.gz
/usr/share/man/man8/nsd-checkconf.8.gz
/usr/share/man/man8/nsd-checkzone.8.gz
/usr/share/man/man8/nsd-control.8.gz
/usr/share/man/man8/nsd.8.gz
/var/lib/nsd
/var/lib/nsd/ixfr.db
/var/lib/nsd/nsd.db
/var/lib/nsd/xfrd.state
/var/log/nsd
/var/log/nsd/nsd.log

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Aug 3 00:14:01 2026