From f05d3077b950cc694a244962ce0984a9a493e2f9 Mon Sep 17 00:00:00 2001
From: Petr Špaček <petr.spacek@nic.cz>
Date: Feb 27 2017 19:15:05 +0000
Subject: new upstream release 1.2.3


---

diff --git a/.gitignore b/.gitignore
index 00babab..368a55d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /knot-resolver-*.tar.xz
 /knot-resolver-1.2.0-rc3.tar.xz.asc
 /knot-resolver-1.2.0.tar.xz.asc
+/knot-resolver-1.2.3.tar.xz.asc
diff --git a/knot-resolver.spec b/knot-resolver.spec
index 2a47754..54fa5de 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -3,8 +3,8 @@
 # comment out this define using #%% if it is not a pre-release version
 # %% define PRERELEASE rc3
 Name:           knot-resolver
-Version:        1.2.0
-Release:        %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist}.1
+Version:        1.2.3
+Release:        %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist}
 Summary:        Caching full DNS Resolver
 
 License:        GPLv3
@@ -154,6 +154,22 @@ exit 0
 %{_libdir}/libkres.so
 
 %changelog
+* Mon Feb 27 2017 Petr Spacek <petr.spacek@nic.cz> - 1.2.3-1
+- new upstream release
+ + security: a cached negative answer from a CD query would be reused
+   to construct response for non-CD queries, resulting in Insecure status
+   instead of Bogus.
+ + fix: lua: make the map command check its arguments
+ + fix: -k argument processing to avoid out-of-bounds memory accesses
+ + fix: lib/resolve: fix zonecut fetching for explicit DS queries
+ + fix: hints: more NULL checks
+ + fix: TA bootstrapping for multiple TAs in the IANA XML file
+ + fix: Disable storing GLUE records into the cache even in the
+ + fix: (non-default) QUERY_PERMISSIVE mode
+ + fix: iterate: skip answer RRs that don't match the query
+ + fix: layer/iterate: some additional processing for referrals
+ + fix: lib/resolve: zonecut fetching error was fixed
+
 * Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-2.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
 
diff --git a/sources b/sources
index 307f08e..3cc3035 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-1.2.0.tar.xz.asc) = 435e34d3cc6932b3d58256f78f2630446b47b4504a61fcaac2cf7bd331a0bc028163fb7542fdbd510ed675e7dc9ab39dfd7dad532a56ea588aa10fe5425d9f9f
-SHA512 (knot-resolver-1.2.0.tar.xz) = 56440d3c3fbdfa8a43cefa334da7ec3c9bbc24291e3d342b3d50947876a39aea674de3c22cc331f63d3dd2c942fef75a57d01a2fc11377ba220acde510e0611f
+SHA512 (knot-resolver-1.2.3.tar.xz.asc) = 57fe776805570f151106665a99e80197790a42abe6871086c7e904608bb139e63f488bdf20d14b176424739f16f3fb62cdb6fc2aa12a49d5bf89db6f56e211b7
+SHA512 (knot-resolver-1.2.3.tar.xz) = a37a3a996e5dd595c88ebc823eff55dad6d11fa0ea3ded1ae18aa7588c92260e1011d877b522fdc724045fbd27fda5eea6ea800b47bd7247790ad1bdac06a371