On 04/06/17 16:36, Jonathan Wiltshire wrote: > Control: tag -1 moreinfo > > On Sun, Jun 04, 2017 at 09:58:44AM +0100, ? wrote: >> The dnsmasq package in testing has a serious problem when dns-root-data is >> installed, due to changes in the format of the dns-root-data files. >> The effect is to render dnsmasq unusable. > > Bother. > >> There are several serious bugs filed to this effect, but they should >> really be release-critical, eg 863896 >> >> There are also several bugs in the DNSSEC validation code, which are fixed >> upstream, and really should be in stretch. >> >> Therefore, if we can get dnsmasq-2.77-1, currently in unstable, into Stretch, >> that would be a Good Thing. If not, it will need a point release. > > The delta from testing to unstable right now is not really suitable this > late in the process. I would prefer a targetted fix through t-p-u.
I understand. > > However, I wonder if that format change in dns-root-data risks problems in > other packages. Ondřej, is there any advantage to reverting that (keeping > the RC fix for parse-root-anchors.sh)? > The patch to fix this in dnsmasq is at : http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=44eb875a5ab2e3b862a6b2bc9fbbb919475d2107 (that regexp handles both old and new formats.) Cheers, Simon.