Accepting request 527021 from home:stroeder:branches:server:dns
- update to 1.6.6 OBS-URL: https://build.opensuse.org/request/show/527021 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=62
This commit is contained in:
Michael Ströder
Git OBS Bridge
parent
fb979ebd11
commit
d0c46e9ff2
@ -1,3 +1,92 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 4 16:17:44 UTC 2017 - michael@stroeder.com
|
||||
|
||||
- update to 1.6.6
|
||||
|
||||
Features:
|
||||
- unbound-control dump_infra prints port number for address if not 53.
|
||||
- Fix #1344: RFC6761-reserved domains: test. and invalid.
|
||||
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
|
||||
With the -p option unbound does not create a pidfile.
|
||||
- Added stats for queries that have been ratelimited by domain
|
||||
recursion.
|
||||
- Patch to show DNSCrypt status in help output, from Carsten
|
||||
Strotmann.
|
||||
- Fix #1407: Add ECS options check to unbound-checkconf.
|
||||
- Fix #1415: [dnscrypt] shared secret cache, patch from
|
||||
Manu Bretelle.
|
||||
|
||||
Bug Fixes:
|
||||
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
|
||||
- First fix for zero b64 and hex text zone format in sldns.
|
||||
- Better fixup of dnscrypt_cert_chacha test for different escapes.
|
||||
- Fix that infra cache host hash does not change after reconfig.
|
||||
- Fix python example0 return module wait instead of error for pass.
|
||||
- enhancement for hardened-tls for DNS over TLS. Removed duplicated
|
||||
security settings.
|
||||
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
|
||||
on.
|
||||
- Fix #1331: libunbound segfault in threaded mode when context is
|
||||
deleted.
|
||||
- Fix pythonmod link line option flag.
|
||||
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
|
||||
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
|
||||
- Redirect all localhost names to localhost address for RFC6761.
|
||||
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
|
||||
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
|
||||
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
|
||||
config.sub(2016-09-05).
|
||||
- annotate case statement fallthrough for gcc 7.1.1.
|
||||
- flex output from flex 2.6.1.
|
||||
- snprintf of thread number does not warn about truncated string.
|
||||
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
|
||||
unless verbosity is high.
|
||||
- remove warning from windows compile.
|
||||
- Fix compile with libnettle
|
||||
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
|
||||
- Fix #1365: Add Ed25519 support using libnettle.
|
||||
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
|
||||
- Remove unused iter_env member (ip6arpa_dname)
|
||||
- Do not reset rrset.bogus stats when called using stats_noreset.
|
||||
- Do not add rrset_bogus and query ratelimiting stats per thread, these
|
||||
module stats are global.
|
||||
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
|
||||
- Fix #1398: make cachedb secret configurable.
|
||||
- Remove spaces from Makefile.
|
||||
- Fix issue on macOX 10.10 where TCP fast open is detected but not
|
||||
implemented causing TCP to fail. The fix allows fallback to regular
|
||||
TCP in this case and is also more robust for cases where connectx()
|
||||
fails for some reason.
|
||||
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
|
||||
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
|
||||
allocation failure.
|
||||
- Fix #1415: patch to free dnscrypt environment on reload.
|
||||
- iana portlist update
|
||||
- Small fixes for the shared secret cache patch.
|
||||
- Fix WKS records on kvm autobuild host, with default protobyname
|
||||
entries for udp and tcp.
|
||||
- Fix #1414: fix segfault on parse failure and log_replies.
|
||||
- zero qinfo in handle_request, this zeroes local_alias and also the
|
||||
qname member.
|
||||
- new keys and certs for dnscrypt tests.
|
||||
- fixup WKS test on buildhost without servicebyname.
|
||||
- updated contrib/fastrpz.patch to apply with configparser changes.
|
||||
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
|
||||
- Fix #1424: cachedb:testframe is not thread safe.
|
||||
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
|
||||
dnscrypt is not enabled. And cache size configuration option.
|
||||
- Fix #1418: [ip ratelimit] initialize slabhash using
|
||||
ip-ratelimit-slabs.
|
||||
- Recommend 1472 buffer size in unbound.conf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Aug 21 10:38:49 UTC 2017 - michael@stroeder.com
|
||||
|
||||
- update to 1.6.5
|
||||
* Fix install of trust anchor when two anchors are present, makes both
|
||||
valid. Checks hash of DS but not signature of new key. This fixes
|
||||
installs between sep11 and oct11 2017.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Aug 8 19:02:38 UTC 2017 - jengelh@inai.de
|
||||
|
||||
|
||||
@ -24,7 +24,7 @@
|
||||
|
||||
#
|
||||
Name: libunbound-devel-mini
|
||||
Version: 1.6.4
|
||||
Version: 1.6.6
|
||||
Release: 0
|
||||
#
|
||||
#
|
||||
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:df0a88816ec31ccb8284c9eb132e1166fbf6d9cde71fbc4b8cd08a91ee777fed
|
||||
size 5477897
|
||||
3
unbound-1.6.6.tar.gz
Normal file
3
unbound-1.6.6.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:972b14dc33093e672652a7b2b5f159bab2198b0fe9c9e1c5707e1895d4d4b390
|
||||
size 5460482
|
||||
@ -1,3 +1,92 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 4 16:17:44 UTC 2017 - michael@stroeder.com
|
||||
|
||||
- update to 1.6.6
|
||||
|
||||
Features:
|
||||
- unbound-control dump_infra prints port number for address if not 53.
|
||||
- Fix #1344: RFC6761-reserved domains: test. and invalid.
|
||||
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
|
||||
With the -p option unbound does not create a pidfile.
|
||||
- Added stats for queries that have been ratelimited by domain
|
||||
recursion.
|
||||
- Patch to show DNSCrypt status in help output, from Carsten
|
||||
Strotmann.
|
||||
- Fix #1407: Add ECS options check to unbound-checkconf.
|
||||
- Fix #1415: [dnscrypt] shared secret cache, patch from
|
||||
Manu Bretelle.
|
||||
|
||||
Bug Fixes:
|
||||
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
|
||||
- First fix for zero b64 and hex text zone format in sldns.
|
||||
- Better fixup of dnscrypt_cert_chacha test for different escapes.
|
||||
- Fix that infra cache host hash does not change after reconfig.
|
||||
- Fix python example0 return module wait instead of error for pass.
|
||||
- enhancement for hardened-tls for DNS over TLS. Removed duplicated
|
||||
security settings.
|
||||
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
|
||||
on.
|
||||
- Fix #1331: libunbound segfault in threaded mode when context is
|
||||
deleted.
|
||||
- Fix pythonmod link line option flag.
|
||||
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
|
||||
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
|
||||
- Redirect all localhost names to localhost address for RFC6761.
|
||||
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
|
||||
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
|
||||
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
|
||||
config.sub(2016-09-05).
|
||||
- annotate case statement fallthrough for gcc 7.1.1.
|
||||
- flex output from flex 2.6.1.
|
||||
- snprintf of thread number does not warn about truncated string.
|
||||
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
|
||||
unless verbosity is high.
|
||||
- remove warning from windows compile.
|
||||
- Fix compile with libnettle
|
||||
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
|
||||
- Fix #1365: Add Ed25519 support using libnettle.
|
||||
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
|
||||
- Remove unused iter_env member (ip6arpa_dname)
|
||||
- Do not reset rrset.bogus stats when called using stats_noreset.
|
||||
- Do not add rrset_bogus and query ratelimiting stats per thread, these
|
||||
module stats are global.
|
||||
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
|
||||
- Fix #1398: make cachedb secret configurable.
|
||||
- Remove spaces from Makefile.
|
||||
- Fix issue on macOX 10.10 where TCP fast open is detected but not
|
||||
implemented causing TCP to fail. The fix allows fallback to regular
|
||||
TCP in this case and is also more robust for cases where connectx()
|
||||
fails for some reason.
|
||||
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
|
||||
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
|
||||
allocation failure.
|
||||
- Fix #1415: patch to free dnscrypt environment on reload.
|
||||
- iana portlist update
|
||||
- Small fixes for the shared secret cache patch.
|
||||
- Fix WKS records on kvm autobuild host, with default protobyname
|
||||
entries for udp and tcp.
|
||||
- Fix #1414: fix segfault on parse failure and log_replies.
|
||||
- zero qinfo in handle_request, this zeroes local_alias and also the
|
||||
qname member.
|
||||
- new keys and certs for dnscrypt tests.
|
||||
- fixup WKS test on buildhost without servicebyname.
|
||||
- updated contrib/fastrpz.patch to apply with configparser changes.
|
||||
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
|
||||
- Fix #1424: cachedb:testframe is not thread safe.
|
||||
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
|
||||
dnscrypt is not enabled. And cache size configuration option.
|
||||
- Fix #1418: [ip ratelimit] initialize slabhash using
|
||||
ip-ratelimit-slabs.
|
||||
- Recommend 1472 buffer size in unbound.conf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Aug 21 10:38:49 UTC 2017 - michael@stroeder.com
|
||||
|
||||
- update to 1.6.5
|
||||
* Fix install of trust anchor when two anchors are present, makes both
|
||||
valid. Checks hash of DS but not signature of new key. This fixes
|
||||
installs between sep11 and oct11 2017.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Aug 8 19:02:38 UTC 2017 - jengelh@inai.de
|
||||
|
||||
|
||||
@ -53,7 +53,7 @@
|
||||
%endif
|
||||
|
||||
Name: unbound
|
||||
Version: 1.6.4
|
||||
Version: 1.6.6
|
||||
Release: 0
|
||||
#
|
||||
#
|
||||
|
||||
Loading…
Reference in New Issue
Block a user