Hello community, here is the log from the commit of package unbound for openSUSE:Factory checked in at 2020-02-25 16:00:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/unbound (Old) and /work/SRC/openSUSE:Factory/.unbound.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "unbound" Tue Feb 25 16:00:47 2020 rev:44 rq:778122 version:1.10.0 Changes: -------- --- /work/SRC/openSUSE:Factory/unbound/libunbound-devel-mini.changes 2019-12-23 22:43:56.113989277 +0100 +++ /work/SRC/openSUSE:Factory/.unbound.new.26092/libunbound-devel-mini.changes 2020-02-25 16:01:01.355947138 +0100 @@ -1,0 +2,110 @@ +Thu Feb 20 21:40:10 UTC 2020 - Michael Ströder <mich...@stroeder.com> + +- update to 1.10.0 + +Features: +- Merge RPZ support into master. Only QNAME and Response IP triggers are + supported. +- Added serve-stale functionality as described in + draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used + to configure the behavior. +- Updated cachedb to honor `serve-expired-ttl`; Fixes #107. +- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies + come with a configurable TTL value (`serve-expired-reply-ttl`). +- Merge #135 from Florian Obser: Use passed in neg and key cache + if non-NULL. +- Fix #153: Disable validation for DSA algorithms. RFC 8624 compliance. +- Merge PR#151: Fixes for systemd units, by Maryse47, Edmonds + and Frzk. Updates the unbound.service systemd file and adds a portable + systemd service file. +- Merge PR#154; Allow use of libbsd functions with configure option + --with-libbsd. By Robert Edmonds and Steven Chamberlain. +- Merge PR#148; Add some TLS stats to unbound_munin_. By Fredrik Pettai. +- Merge PR#156 from Alexander Berkes; Added unbound-control + view_local_datas_remove command. + +Bug Fixes: +- Fix typo to let serve-expired-ttl work with ub_ctx_set_option(), by + Florian Obser +- Update mailing list URL. +- Fix #140: Document slave not downloading new zonefile upon update. +- Downgrade compat/getentropy_solaris.c to version 1.4 from OpenBSD. + The dl_iterate_phdr() function introduced in newer versions raises + compilation errors on solaris 10. +- Changes to compat/getentropy_solaris.c for, + ifdef stdint.h inclusion for older systems. ifdef sha2.h inclusion + for older systems. +- Fix 'make test' to work for --disable-sha1 configure option. +- Fix out-of-bounds null-byte write in sldns_bget_token_par while + parsing type WKS, reported by Luis Merino from X41 D-Sec. +- Updated sldns_bget_token_par fix for also space for the zero + delimiter after the character. And update for more spare space. +- Fix #138: stop binding pidfile inside chroot dir in systemd service + file. +- Fix the relationship between serve-expired and prefetch options, + patch from Saksham Manchanda from Secure64. +- Fix unreachable code in ssl set options code. +- Removed the dnscrypt_queries and dnscrypt_queries_chacha tests, + because dnscrypt-proxy (2.0.36) does not support the test setup + any more, and also the config file format does not seem to have the + appropriate keys to recreate that setup. +- Fix crash after reload where a stats lookup could reference old key + cache and neg cache structures. +- Fix for memory leak when edns subnet config options are read when + compiled without edns subnet support. +- Fix auth zone support for NSEC3 records without salt. +- Merge PR#150 from Frzk: Systemd unit without chroot. It add + contrib/unbound_nochroot.service.in, a systemd file for use with + chroot: "", see comments in the file, it uses systemd protections + instead. It was superceded by #151, the unbound_portable.service + file. +- Merge PR#155 from Robert Edmonds: contrib/libunbound.pc.in: Fixes + to Libs/Requires for crypto library dependencies. +- iana portlist updated. +- Fix to silence the tls handshake errors for broken pipe and reset + by peer, unless verbosity is set to 2 or higher. +- Merge PR#147; change rfc reference for reserved top level dns names. +- Fix #157: undefined reference to `htobe64'. +- Fix subnet tests for disabled DSA algorithm by default. +- Update contrib/fastrpz.patch for clean diff with current code. +- updated .gitignore for added contrib file. +- Add build rule for ipset to Makefile +- Add getentropy_freebsd.o to Makefile dependencies. +- Fix memory leak in error condition remote.c +- Fix double free in error condition view.c +- Fix memory leak in do_auth_zone_transfer on success +- Stop working on socket when socket() call returns an error. +- Check malloc return values in TLS session ticket code +- Fix fclose on error in TLS session ticket code. +- Add assertion to please static analyzer +- Fixed stats when replying with cached, cname-aliased records. +- Added missing default values for redis cachedb backend. +- Fix num_reply_addr counting in mesh and tcp drop due to size + after serve_stale commit. +- Fix to create and destroy rpz_lock in auth_zones structure. +- Fix to lock zone before adding rpz qname trigger. +- Fix to lock and release once in mesh_serve_expired_lookup. +- Fix to put braces around empty if body when threading is disabled. +- Fix num_reply_states and num_detached_states counting with + serve_expired_callback. +- Cleaner code in mesh_serve_expired_lookup. +- Document in unbound.conf manpage that configuration clauses can be + repeated in the configuration file. +- Document 'ub_result.was_ratelimited' in libunbound. +- Fix use after free on log-identity after a reload; Fixes #163. +- Fix with libnettle make test with dsa disabled. +- Fix contrib/fastrpz.patch to apply cleanly. Fix for serve-stale + fixes, but it does not compile, conflicts with new rpz code. +- Fix to clean memory leak of respip_addr.lock when ip_tree deleted. +- Fix compile warning when threads disabled. +- Fix spelling in unbound.conf.5.in. +- Stop unbound-checkconf from insisting that auth-zone and rpz + zonefiles have to exist. They can not exist, and download later. +- contrib/drop2rpz: perl script that converts the Spamhaus DROP-List + in RPZ-Format, contributed by Andreas Schulze. +- Remove unused variable. +- Add respip to supported module-config options in unbound-checkconf. +- Updated contrib/unbound_smf23.tar.gz with Solaris SMF service for + Unbound from Yuri Voinov. + +------------------------------------------------------------------- unbound.changes: same change Old: ---- unbound-1.9.6.tar.gz New: ---- unbound-1.10.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libunbound-devel-mini.spec ++++++ --- /var/tmp/diff_new_pack.SkI2sq/_old 2020-02-25 16:01:05.179931621 +0100 +++ /var/tmp/diff_new_pack.SkI2sq/_new 2020-02-25 16:01:05.187931588 +0100 @@ -24,7 +24,7 @@ # Name: libunbound-devel-mini -Version: 1.9.6 +Version: 1.10.0 Release: 0 # # ++++++ unbound.spec ++++++ --- /var/tmp/diff_new_pack.SkI2sq/_old 2020-02-25 16:01:05.247931345 +0100 +++ /var/tmp/diff_new_pack.SkI2sq/_new 2020-02-25 16:01:05.259931296 +0100 @@ -36,7 +36,7 @@ %define piddir /run Name: unbound -Version: 1.9.6 +Version: 1.10.0 Release: 0 # # ++++++ unbound-1.9.6.tar.gz -> unbound-1.10.0.tar.gz ++++++ ++++ 28908 lines of diff (skipped)
