Accepting request 686172 from home:stroeder:branches:server:dns

update to 1.9.1

OBS-URL: https://build.opensuse.org/request/show/686172
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=102
This commit is contained in:
Michael Ströder 2019-03-18 20:08:16 +00:00 committed by Git OBS Bridge
parent 0898e5036a
commit 72c24a8616
7 changed files with 139 additions and 5 deletions

View File

@ -1,3 +1,62 @@
-------------------------------------------------------------------
Mon Mar 18 12:16:58 UTC 2019 - Michael Ströder <michael@stroeder.com>
- update to 1.9.1
Features
- Add local-zone type inform_redirect, which logs like type inform,
and redirects like type redirect.
- Perform canonical sort for 0x20 capsforid compare of replies,
this sorts rrsets in the authority and additional section before
comparison, so that out of order rrsets do not cause failure.
- Print query name with ip_ratelimit exceeded log lines.
Spaces instead of tabs in that log message.
- Print query name and IP address when domain rate limit exceeded.
Bug Fixes
- Fix #4224: auth_xfr_notify.rpl test broken due to typo
- Fix locking for libunbound context setup with broken port config.
- Fix case in which query timeout can result in marking delegation
as edns_lame_known.
- Set ub_ctx_set_tls call signature in ltrace config file for
libunbound in contrib/libunbound.so.conf.
- improve documentation for tls-service-key and forward-first.
- #10: fixed pkg-config operations, PKG_PROG_PKG_CONFIG moved out of
conditional section, fixes systemd builds, from Enrico Scholz.
- #9: For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks,
still supports the set_id_callback previous API. And for 1.1.0
no locking callbacks are needed.
- #8: Fix OpenSSL without ENGINE support compilation.
- Wipe TLS session key data from memory on exit.
- Fix that log-replies prints the correct name for local-alias
names, for names that have a CNAME in local-data configuration.
It logs the original query name, not the target of the CNAME.
- Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2.
- Fix that qname minimisation does not skip a label when missing
nameserver targets need to be fetched.
- Fix #4225: clients seem to erroneously receive no answer with
DNS-over-TLS and qname-minimisation.
- Note default for module-config in man page.
- Fix #13: Remove left-over requirements on OpenSSL >= 1.1.0 for
cert name matching, from man page.
- Fix capsforid canonical sort qsort callback.
- Fix pythonmod include and sockaddr_un ifdefs for compile on
Windows, and for libunbound.
- Fix the error for unknown module in module-config is understandable,
and explains it was not compiled in and where to see the list.
- In example.conf explain where to put cachedb module in module-config.
- In man page and example config explain that most modules have to
be listed at the start of module-config.
- Fix #4227: pair event del and add for libevent for tcp_req_info.
- Fix #4229: Unbound man pages lack information, about access-control
order and local zone tags, and elements in views.
- Fix #14: contrib/unbound.init: Fix wrong comparison judgment
before copying.
- Fix for python module on Windows, fix fopen.
- Remove memory leak on pythonmod python2 script file init.
- Remove swig gcc8 python function cast warnings, they are ignored.
- Print correct module that failed when module-config is wrong.
-------------------------------------------------------------------
Fri Dec 28 17:16:01 UTC 2018 - Jan Engelhardt <jengelh@inai.de>

View File

@ -24,7 +24,7 @@
#
Name: libunbound-devel-mini
Version: 1.8.3
Version: 1.9.1
Release: 0
#
#

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:2b692b8311edfad41e7d0380aac34576060d4176add81dc5db419c79b2a4cecc
size 5629180

3
unbound-1.9.1.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:c3c0bf9b86ccba4ca64f93dd4fe7351308ab54293f297a67de5a8914c1dc59c5
size 5665254

16
unbound-1.9.1.tar.gz.asc Normal file
View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=K9DS
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,62 @@
-------------------------------------------------------------------
Mon Mar 18 12:16:58 UTC 2019 - Michael Ströder <michael@stroeder.com>
- update to 1.9.1
Features
- Add local-zone type inform_redirect, which logs like type inform,
and redirects like type redirect.
- Perform canonical sort for 0x20 capsforid compare of replies,
this sorts rrsets in the authority and additional section before
comparison, so that out of order rrsets do not cause failure.
- Print query name with ip_ratelimit exceeded log lines.
Spaces instead of tabs in that log message.
- Print query name and IP address when domain rate limit exceeded.
Bug Fixes
- Fix #4224: auth_xfr_notify.rpl test broken due to typo
- Fix locking for libunbound context setup with broken port config.
- Fix case in which query timeout can result in marking delegation
as edns_lame_known.
- Set ub_ctx_set_tls call signature in ltrace config file for
libunbound in contrib/libunbound.so.conf.
- improve documentation for tls-service-key and forward-first.
- #10: fixed pkg-config operations, PKG_PROG_PKG_CONFIG moved out of
conditional section, fixes systemd builds, from Enrico Scholz.
- #9: For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks,
still supports the set_id_callback previous API. And for 1.1.0
no locking callbacks are needed.
- #8: Fix OpenSSL without ENGINE support compilation.
- Wipe TLS session key data from memory on exit.
- Fix that log-replies prints the correct name for local-alias
names, for names that have a CNAME in local-data configuration.
It logs the original query name, not the target of the CNAME.
- Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2.
- Fix that qname minimisation does not skip a label when missing
nameserver targets need to be fetched.
- Fix #4225: clients seem to erroneously receive no answer with
DNS-over-TLS and qname-minimisation.
- Note default for module-config in man page.
- Fix #13: Remove left-over requirements on OpenSSL >= 1.1.0 for
cert name matching, from man page.
- Fix capsforid canonical sort qsort callback.
- Fix pythonmod include and sockaddr_un ifdefs for compile on
Windows, and for libunbound.
- Fix the error for unknown module in module-config is understandable,
and explains it was not compiled in and where to see the list.
- In example.conf explain where to put cachedb module in module-config.
- In man page and example config explain that most modules have to
be listed at the start of module-config.
- Fix #4227: pair event del and add for libevent for tcp_req_info.
- Fix #4229: Unbound man pages lack information, about access-control
order and local zone tags, and elements in views.
- Fix #14: contrib/unbound.init: Fix wrong comparison judgment
before copying.
- Fix for python module on Windows, fix fopen.
- Remove memory leak on pythonmod python2 script file init.
- Remove swig gcc8 python function cast warnings, they are ignored.
- Print correct module that failed when module-config is wrong.
-------------------------------------------------------------------
Thu Feb 28 14:33:05 UTC 2019 - Rubén Torrero Marijnissen <rtorreromarijnissen@suse.com>

View File

@ -58,7 +58,7 @@
%endif
Name: unbound
Version: 1.8.3
Version: 1.9.1
Release: 0
#
#