#7001: unbound-1.5.5
-------------------------+-------------------------
Reporter: fo | Owner: blfs-book@…
Type: enhancement | Status: new
Priority: normal | Milestone: 7.9
Component: BOOK | Version: SVN
Severity: normal | Keywords:
-------------------------+-------------------------
[https://www.unbound.net/downloads/unbound-1.5.5.tar.gz]
[https://www.unbound.net/downloads/unbound-1.5.5.zip.asc]
[https://www.unbound.net/downloads/unbound-1.5.5.tar.gz.sha256]
f3bd7d3bc9519e8717abdc35c26cb2d84c3c3a3e2cd657604307e6860b37da5e
[https://unbound.net/download.html]
{{{
Features
• Change default of harden-algo-downgrade to off. This is lenient for
algorithm rollover.
• Added permit-small-holddown config to debug fast 5011 rollover.
• Allow certificate chain files to allow for intermediate
certificates. (thanks Daniel Kahn Gillmor)
• Enable ECDHE for servers. Where available, use
SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to
enable ECDHE. Otherwise, manually offer curve p256. Client
connections should automatically use ECDHE when available. (thanks
Daniel Kahn Gillmor)
• [bugzilla: 699 ]
Feature --enable-pie option to that builds PIE binary.
• [bugzilla: 700 ]
Feature --enable-relro-now option that enables full read-only
relocation.
• [bugzilla: 702 ]
New IPs for for h.root-servers.net.
Bug Fixes
• [bugzilla: 681 ]
Fix setting forwarders with unbound-control forward implicitly
turns on forward-first.
• [bugzilla: 690 ]
Fix that reload fails when so-reuseport is yes after changing
num-threads.
• please afl-gcc (llvm) for uninitialised variable warning.
• Fix mktime in unbound-anchor not using UTC.
• Fix 5011 anchor update timer after reload.
• 5011 implementation does not insist on all algorithms, when
harden-algo-downgrade is turned off.
• Document in the manual more text about configuring locally served
zones.
• Document that local-zone nodefault matches exactly and transparent
can be used to release a subzone.
• [bugzilla: 694 ]
Fix that configure script does not detect LibreSSL 2.2.2
• Fix deadlock for local data add and zone add when unbound-control
list_local_data printout is interrupted.
• [bugzilla: 697 ]
Fix get PY_MAJOR_VERSION failure at configure for python 2.4 to
2.6.
• changed windows setup compression to be more transparent.
• Fix config globbed include chroot treatment, this fixes reload of
globs (patch from Dag-Erling Smørgrav).
• [bugzilla: 705 ]
Fix ub_ctx_set_fwd() return value mishandled on windows.
• Fix minor error in unbound.conf.5.in.
• Fix unbound.conf(5) access-control description for precedence and
default.
• Fix unbound-control flush that does not succeed in removing data.
• MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution
failures.
• iana portlist update.
}}}
--
Ticket URL: <http://wiki.linuxfromscratch.org/blfs/ticket/7001>
BLFS Trac <http://wiki.linuxfromscratch.org/blfs>
Beyond Linux From Scratch
--
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
