-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi,
Unbound 1.5.8 is available: http://www.unbound.net/downloads/unbound-1.5.8.tar.gz sha1 1391888d2e3395d766545cd3dbdf0f1879c48080 sha256 33567a20f73e288f8daa4ec021fbb30fe1824b346b34f12677ad77899ecd09be pgp http://www.unbound.net/downloads/unbound-1.5.8.tar.gz.asc zip http://www.unbound.net/downloads/unbound-1.5.8.zip win http://www.unbound.net/downloads/unbound_setup_1.5.8.exe . The release fixes line endings in the unbound-control-setup script, and a potential gost-hash validation failure and handles the ".onion" domain to avoid privacy leakage. Features - - ip-transparent option for FreeBSD with IP_BINDANY socket option. - - insecure-lan-zones: yesno config option, patch from Dag-Erling Smørgrav. - - RR Type CSYNC support RFC 7477, in debug printout and config input. - - RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07). - - [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf, patch from Daisuke Higashi. - - Support RFC7686: handle ".onion" Special-Use Domain. It is blocked by default, and can be unblocked with "nodefault" localzone config. - - ub_ctx_set_stub() function for libunbound to config stub zones. Bug Fixes - - Fix that NSEC3 negative cache is used when there is no salt. - - sorted ubsyms.def file with exported libunbound functions. - - Print understandable debug log when unusable DS record is seen. - - load gost algorithm if digest is seen before key algorithm. - - Fix that "make install" fails due to "text file busy" error. - - Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error. - - wait for sendto to drain socket buffers when they are full. - - Neater cmdline_verbose increment patch from Edgar Pettijohn. - - Made netbsd sendmsg test nonfatal, in case of false positives. - - [bugzilla: 741 ] Fix: log message for dnstap socket connection is more clear. - - [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the chroot. - - Fix cmsg alignment for argument to sendmsg on NetBSD. - - Fix that unbound complains about unimplemented IP_PKTINFO for sendmsg on NetBSD (for interface-automatic). - - [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS. - - Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. - - Fix to simplify empty string checking from Michael McConville. - - [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot be chown'ed. Patch from Simon Deziel. - - Fix test if -pthreads unused to use better grep for portability. - - Fix mingw crosscompile for recent mingw. - - Update aclocal, autoconf output with new versions (1.15, 2.4.6). - - Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined, for Linux glibc 2.20. - - Fixup contrib/aaaa-filter-iterator.patch for moved contents in the source code, so it applies cleanly again. Removed unused variable warnings. - - [bugzilla: 729 ] Fix: omit use of escape sequences in echo since they are not portable (unbound-control-setup). - - remove NULL-checks before free, patch from Michael McConville. - - updated ax_pthread.m4 to version 21 with clang support, this removes a warning from compilation. - - OSX portability, detect if sbrk is deprecated. - - OSX clang, stop -pthread unused during link stage warnings. - - OSX clang new flto check. - - iana portlist update. Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJW1qBuAAoJEJ9vHC1+BF+NN0EP/RB+s62mgyQQMmCDpr0vHguu kkD61T1SRGHm2C4wSJc7Fbf5Ouo7V2Q2XEJI/LRHHK5HDzKEE5hupe/qJyDw8u5i oD/rc5LQhG6wCr3GoOtSyqYgueHefkGfjb3rQNr0+Nlk72yK7onYnfLZtsw2pqN5 5uieKuCJX9f93+zxbocdFrLsrSlFyYG4bdEktXI+ec5x9pdY06HHVr+F1qOSBW8s WLZrQfUyh4nVyrjDg52ckLpdinW+AHyrsFTcd0FJSuB2ERA40eUrLnEzNdyJoe4o HTsliuW7FzD6AMRL01m8qUV86Zhi1e9o4BgGtxQ6VHKeizpyMyGz+sqLEMYEwXQs 5X3S1cIBBVRYtGpW3p9MxxVUkrjl8zrSd1CpYeA0urXXOfuGn/2bLDUF5b11NDmi UxTeDyypWx6RAhIpa37a7PP8qoe/FBk0uoD1D7EnnD/vYaOco706pNAHPKE6H8R2 BRHjyNnLGjf4wKFe+3kPi3Wzcu1o78PS9nZaxnjglrfZero0hhNma653E663Flcw +sHmh594gO62psjky2tBivgBq6WIa0y1HNdjQUf6HO3LGtUW0/HXiCrn8NVTEOyu 3Bx9XC72sei99HhiNGtaWFa3HjTWdN2zZw4pQHjf1SSwFHlKMTAN0JxEIMQLNyPs DebxRJ1VzvJGqdl2oaa0 =spbX -----END PGP SIGNATURE-----