Simon, please let me know what would be the fixed version number and I'll issue an update to dns-root-data to have "Breaks: dnsmasq (<< <fixed_version>)".
Cheers, -- Ondřej Surý <ond...@sury.org> Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver On Sun, Jun 4, 2017, at 19:54, Simon Kelley wrote: > > > On 04/06/17 16:36, Jonathan Wiltshire wrote: > > Control: tag -1 moreinfo > > > > On Sun, Jun 04, 2017 at 09:58:44AM +0100, ? wrote: > >> The dnsmasq package in testing has a serious problem when dns-root-data is > >> installed, due to changes in the format of the dns-root-data files. > >> The effect is to render dnsmasq unusable. > > > > Bother. > > > >> There are several serious bugs filed to this effect, but they should > >> really be release-critical, eg 863896 > >> > >> There are also several bugs in the DNSSEC validation code, which are fixed > >> upstream, and really should be in stretch. > >> > >> Therefore, if we can get dnsmasq-2.77-1, currently in unstable, into > >> Stretch, > >> that would be a Good Thing. If not, it will need a point release. > > > > The delta from testing to unstable right now is not really suitable this > > late in the process. I would prefer a targetted fix through t-p-u. > > I understand. > > > > > However, I wonder if that format change in dns-root-data risks problems in > > other packages. Ondřej, is there any advantage to reverting that (keeping > > the RC fix for parse-root-anchors.sh)? > > > > The patch to fix this in dnsmasq is at : > > http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=44eb875a5ab2e3b862a6b2bc9fbbb919475d2107 > > (that regexp handles both old and new formats.) > > Cheers, > > Simon. > >