diff --git a/libunbound-devel-mini.changes b/libunbound-devel-mini.changes index 7c63103..d9a95ae 100644 --- a/libunbound-devel-mini.changes +++ b/libunbound-devel-mini.changes @@ -1,3 +1,62 @@ +------------------------------------------------------------------- +Mon Mar 18 12:16:58 UTC 2019 - Michael Ströder + +- update to 1.9.1 + +Features +- Add local-zone type inform_redirect, which logs like type inform, + and redirects like type redirect. +- Perform canonical sort for 0x20 capsforid compare of replies, + this sorts rrsets in the authority and additional section before + comparison, so that out of order rrsets do not cause failure. +- Print query name with ip_ratelimit exceeded log lines. + Spaces instead of tabs in that log message. +- Print query name and IP address when domain rate limit exceeded. + +Bug Fixes +- Fix #4224: auth_xfr_notify.rpl test broken due to typo +- Fix locking for libunbound context setup with broken port config. +- Fix case in which query timeout can result in marking delegation + as edns_lame_known. +- Set ub_ctx_set_tls call signature in ltrace config file for + libunbound in contrib/libunbound.so.conf. +- improve documentation for tls-service-key and forward-first. +- #10: fixed pkg-config operations, PKG_PROG_PKG_CONFIG moved out of + conditional section, fixes systemd builds, from Enrico Scholz. +- #9: For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks, + still supports the set_id_callback previous API. And for 1.1.0 + no locking callbacks are needed. +- #8: Fix OpenSSL without ENGINE support compilation. +- Wipe TLS session key data from memory on exit. +- Fix that log-replies prints the correct name for local-alias + names, for names that have a CNAME in local-data configuration. + It logs the original query name, not the target of the CNAME. +- Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2. +- Fix that qname minimisation does not skip a label when missing + nameserver targets need to be fetched. +- Fix #4225: clients seem to erroneously receive no answer with + DNS-over-TLS and qname-minimisation. +- Note default for module-config in man page. +- Fix #13: Remove left-over requirements on OpenSSL >= 1.1.0 for + cert name matching, from man page. +- Fix capsforid canonical sort qsort callback. +- Fix pythonmod include and sockaddr_un ifdefs for compile on + Windows, and for libunbound. +- Fix the error for unknown module in module-config is understandable, + and explains it was not compiled in and where to see the list. +- In example.conf explain where to put cachedb module in module-config. +- In man page and example config explain that most modules have to + be listed at the start of module-config. +- Fix #4227: pair event del and add for libevent for tcp_req_info. +- Fix #4229: Unbound man pages lack information, about access-control + order and local zone tags, and elements in views. +- Fix #14: contrib/unbound.init: Fix wrong comparison judgment + before copying. +- Fix for python module on Windows, fix fopen. +- Remove memory leak on pythonmod python2 script file init. +- Remove swig gcc8 python function cast warnings, they are ignored. +- Print correct module that failed when module-config is wrong. + ------------------------------------------------------------------- Fri Dec 28 17:16:01 UTC 2018 - Jan Engelhardt diff --git a/libunbound-devel-mini.spec b/libunbound-devel-mini.spec index c1fdc23..45d4342 100644 --- a/libunbound-devel-mini.spec +++ b/libunbound-devel-mini.spec @@ -24,7 +24,7 @@ # Name: libunbound-devel-mini -Version: 1.8.3 +Version: 1.9.1 Release: 0 # # diff --git a/unbound-1.8.3.tar.gz b/unbound-1.8.3.tar.gz deleted file mode 100644 index 788f200..0000000 --- a/unbound-1.8.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:2b692b8311edfad41e7d0380aac34576060d4176add81dc5db419c79b2a4cecc -size 5629180 diff --git a/unbound-1.9.1.tar.gz b/unbound-1.9.1.tar.gz new file mode 100644 index 0000000..ad6b950 --- /dev/null +++ b/unbound-1.9.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c3c0bf9b86ccba4ca64f93dd4fe7351308ab54293f297a67de5a8914c1dc59c5 +size 5665254 diff --git a/unbound-1.9.1.tar.gz.asc b/unbound-1.9.1.tar.gz.asc new file mode 100644 index 0000000..6f64eae --- /dev/null +++ b/unbound-1.9.1.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIcBAABCAAGBQJch24IAAoJEJ9vHC1+BF+N3NQP/Ane7g05frDdtInQtve5bj+X +ST0qi3caj0Ek1lz5gTsunJUNWJINqrD6M2rXdGpiftZVV935fJeaF9osDKa8Q1Co +YWP+oeIh7GlQOHJeaY0mgLhlnrNxKRx8DOBhMdS7HHXWQXmIbzYVfWwRbsqWBQRj +AZBXR2AVCiACnZSk/RHnfT3hrOn3PfeQz9/iUENv4ypfLuwfIREAVw0qbgOYgXI2 +aaETdMQcgib4JWYAyDJAUTpvcuYx/+A4gxv2FZid8NoxotxKWt9ICKu0mreMzweM +sbrp3o3KbqTKzeXnDvcJ2QXEtKaCwq1WP+vkFNl66ox0BaqHx20OQvnL37FJ522c +BnD3aaaOBXiiDHCoNZmq8tRFeCzA/4+pOmvtnp+uMh0o/F6ZMMWnSQxqoKaEkxMI +sBGLSCI+zAsVLqrUx+BCpCst3xl0iS4BdiUewC5l/PgQi8IcYluCHOkMMqaOgqMo +15tM55VV4JgMxKnEmAJrLxVx7FizKeB0hs4J+GEVf9acOxBcHYAhRBB1ukRU+9Uc +gNo7Jz9RUjR4TkOmRK3T9Vbpx3wrCng5VNe4Lgic1LieIb4CejjgR0XVZ4GWX0qh +eTGQyNLRUwed/fN9gyD51eYVy2D72Ir+f7/JesExCfl6K2r7ogmYv3GIx9mGfyT/ +cyzVRcRiHXO97ektlFol +=K9DS +-----END PGP SIGNATURE----- diff --git a/unbound.changes b/unbound.changes index e051cf9..a542c17 100644 --- a/unbound.changes +++ b/unbound.changes @@ -1,3 +1,62 @@ +------------------------------------------------------------------- +Mon Mar 18 12:16:58 UTC 2019 - Michael Ströder + +- update to 1.9.1 + +Features +- Add local-zone type inform_redirect, which logs like type inform, + and redirects like type redirect. +- Perform canonical sort for 0x20 capsforid compare of replies, + this sorts rrsets in the authority and additional section before + comparison, so that out of order rrsets do not cause failure. +- Print query name with ip_ratelimit exceeded log lines. + Spaces instead of tabs in that log message. +- Print query name and IP address when domain rate limit exceeded. + +Bug Fixes +- Fix #4224: auth_xfr_notify.rpl test broken due to typo +- Fix locking for libunbound context setup with broken port config. +- Fix case in which query timeout can result in marking delegation + as edns_lame_known. +- Set ub_ctx_set_tls call signature in ltrace config file for + libunbound in contrib/libunbound.so.conf. +- improve documentation for tls-service-key and forward-first. +- #10: fixed pkg-config operations, PKG_PROG_PKG_CONFIG moved out of + conditional section, fixes systemd builds, from Enrico Scholz. +- #9: For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks, + still supports the set_id_callback previous API. And for 1.1.0 + no locking callbacks are needed. +- #8: Fix OpenSSL without ENGINE support compilation. +- Wipe TLS session key data from memory on exit. +- Fix that log-replies prints the correct name for local-alias + names, for names that have a CNAME in local-data configuration. + It logs the original query name, not the target of the CNAME. +- Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2. +- Fix that qname minimisation does not skip a label when missing + nameserver targets need to be fetched. +- Fix #4225: clients seem to erroneously receive no answer with + DNS-over-TLS and qname-minimisation. +- Note default for module-config in man page. +- Fix #13: Remove left-over requirements on OpenSSL >= 1.1.0 for + cert name matching, from man page. +- Fix capsforid canonical sort qsort callback. +- Fix pythonmod include and sockaddr_un ifdefs for compile on + Windows, and for libunbound. +- Fix the error for unknown module in module-config is understandable, + and explains it was not compiled in and where to see the list. +- In example.conf explain where to put cachedb module in module-config. +- In man page and example config explain that most modules have to + be listed at the start of module-config. +- Fix #4227: pair event del and add for libevent for tcp_req_info. +- Fix #4229: Unbound man pages lack information, about access-control + order and local zone tags, and elements in views. +- Fix #14: contrib/unbound.init: Fix wrong comparison judgment + before copying. +- Fix for python module on Windows, fix fopen. +- Remove memory leak on pythonmod python2 script file init. +- Remove swig gcc8 python function cast warnings, they are ignored. +- Print correct module that failed when module-config is wrong. + ------------------------------------------------------------------- Thu Feb 28 14:33:05 UTC 2019 - Rubén Torrero Marijnissen diff --git a/unbound.spec b/unbound.spec index 3495ce8..22af8b7 100644 --- a/unbound.spec +++ b/unbound.spec @@ -58,7 +58,7 @@ %endif Name: unbound -Version: 1.8.3 +Version: 1.9.1 Release: 0 # #