Hello community, here is the log from the commit of package unbound for openSUSE:Factory checked in at 2018-12-19 13:25:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/unbound (Old) and /work/SRC/openSUSE:Factory/.unbound.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "unbound" Wed Dec 19 13:25:07 2018 rev:31 rq:657319 version:1.8.3 Changes: -------- --- /work/SRC/openSUSE:Factory/unbound/libunbound-devel-mini.changes 2018-11-06 14:01:42.235662658 +0100 +++ /work/SRC/openSUSE:Factory/.unbound.new.28833/libunbound-devel-mini.changes 2018-12-19 13:25:08.769255437 +0100 @@ -1,0 +2,86 @@ +Tue Dec 11 19:59:00 UTC 2018 - Michael Ströder <[email protected]> + +- update to 1.8.3 fixes crash bug introduced in 1.8.2 + in the dns64 processing. + +------------------------------------------------------------------- +Wed Dec 5 11:12:42 UTC 2018 - Michael Ströder <[email protected]> + +- update to 1.8.2 + +Features +- Add fast-server-permil and fast-server-num options. +- Deprecate low-rtt and low-rtt-permil options. +- Change fast-server-num default to 3. +- Fix #4154: make ECS_MAX_TREESIZE configurable, with + the max-ecs-tree-size-ipv4 and max-ecs-tree-size-ipv6 options. +- Fix #4190: Please create a "ANY" deny option, adds the option + deny-any: yes in unbound.conf. This responds with an empty message + to queries of type ANY. +- Fix #4126: RTT_band too low on VSAT links with 600+ms latency, + adds the option unknown-server-time-limit to unbound.conf that + can be increased to avoid the problem. +- Add min-client-subnet-ipv6 and min-client-subnet-ipv4 options. +- Support SO_REUSEPORT_LB in FreeBSD 12 with the so-reuseport: yes + option in unbound.conf. +- Add unbound-control view_local_datas command, like local_datas. + +Bug Fixes +- dnscrypt.c removed sizeof to get array bounds. +- Fix testlock code to set noreturn on error routine. +- Remove unused variable from contrib fastrpz/rpz.c and + remove unused diagnostic pragmas that themselves generate warnings +- clang analyze test is used only when assertions are enabled. +- Squelch EADDRNOTAVAIL errors when the interface goes away, + this omits 'can't assign requested address' errors unless + verbosity is set to a high value. +- Set default for so-reuseport to no for FreeBSD. It is enabled + by default for Linux and DragonFlyBSD. The setting can + be configured in unbound.conf to override the default. +- iana port update. +- Squelch log of failed to tcp initiate after TCP Fastopen failure. +- Fix #4192: unbound-control-setup generates keys not readable by + group. +- check that the dnstap socket file can be opened and exists, print + error if not. +- Add markdel function to ECS slabhash. +- Limit ECS scope returned to client to the scope used for caching. +- Fix #4191: NXDOMAIN vs SERVFAIL during dns64 PTR query. +- Fix #4141: More randomness to rrset-roundrobin. +- Fix #4132: Openness/closeness of RANGE intervals in rpl files. +- remade makefile dependencies. +- Fix #4152: Logs shows wrong time when using log-time-ascii: yes. +- Scrub NS records from NXDOMAIN responses to stop fragmentation + poisoning of the cache. +- Scrub NS records from NODATA responses as well. +- Add patch from Jan Vcelak for pythonmod, + add sockaddr_storage getters, add support for query callbacks, + allow raw address access via comm_reply and update API documentation. +- Removed compile warnings in pythonmod sockaddr routines. +- With ./configure --with-pyunbound --with-pythonmodule + PYTHON_VERSION=3.6 or with 2.7 unbound can compile and unit tests + succeed for the python module. +- pythonmod logs the python error and traceback on failure. +- ignore debug python module for test in doxygen output. +- review fixes for python module. +- Fix #4209: Crash in libunbound when called from getdns. +- auth zone zonefiles can be in a chroot, the chroot directory + components are removed before use. +- Fix that empty zonefile means the zonefile is not set and not used. +- Fix to not set GLOB_NOSORT so the unbound.conf include: files are + sorted and in a predictable order. +- Fix #4193: Fix that prefetch failure does not overwrite valid cache + entry with SERVFAIL. +- Fix DNS64 to not store intermediate results in cache, this avoids + other threads from picking up the wrong data. The module restores + the previous no_cache_store setting when the the module is finished. +- Fix #4208: 'stub-no-cache' and 'forward-no-cache' not work. +- New and better fix for Fix #4193: Fix that prefetch failure does + not overwrite valid cache entry with SERVFAIL. +- auth-zone give SERVFAIL when expired, fallback activates when + expired, and this is documented in the man page. +- stat count SERVFAIL downstream auth-zone queries for expired zones. +- Update contrib fastrpz patch for latest release. +- Fix chroot auth-zone fix to remove chroot prefix. + +------------------------------------------------------------------- unbound.changes: same change Old: ---- unbound-1.8.1.tar.gz New: ---- unbound-1.8.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libunbound-devel-mini.spec ++++++ --- /var/tmp/diff_new_pack.9SQWsG/_old 2018-12-19 13:25:10.745253031 +0100 +++ /var/tmp/diff_new_pack.9SQWsG/_new 2018-12-19 13:25:10.745253031 +0100 @@ -24,7 +24,7 @@ # Name: libunbound-devel-mini -Version: 1.8.1 +Version: 1.8.3 Release: 0 # # ++++++ unbound.spec ++++++ --- /var/tmp/diff_new_pack.9SQWsG/_old 2018-12-19 13:25:10.781252987 +0100 +++ /var/tmp/diff_new_pack.9SQWsG/_new 2018-12-19 13:25:10.785252983 +0100 @@ -58,7 +58,7 @@ %endif Name: unbound -Version: 1.8.1 +Version: 1.8.3 Release: 0 # # ++++++ unbound-1.8.1.tar.gz -> unbound-1.8.3.tar.gz ++++++ ++++ 18620 lines of diff (skipped)
