-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
Unbound 1.4.18rc1 is available for download: http://unbound.net/downloads/unbound-1.4.18rc1.tar.gz sha1 e1d765195beddb5489029e7ad09d032ffd8563fd sha256 110c19aa28b54b510b2b00941089e8d32fbb0e2320f1c657bdf3347d1d6f63d3 http://unbound.net/downloads/unbound_setup_1.4.18rc1.exe This release has bugfixes, notably two assertion failures. There is a build feature to build with libnss, but only to compile libunbound not the unbound daemon (because of its remote control functions) at this time. You have to link with libldns compiled - --without-ssl, otherwise ldns links with openssl. There is some support for FIPS-compliant mode, where it will understand that some algorithms are not available, those DNSSEC results are then marked 'insecure' (and not 'bogus'). Features implement log-time-ascii on windows. --with-libunbound-only build option, only builds the library and not the daemon and other tools. --with-nss build option (for now, --with-libunbound-only), uses libNSS for crypto operations. disable RSAMD5 if in FIPS mode (for openssl and for libnss). Add flush_bogus option for unbound-control. Bug Fixes Fix libunbound report of errors when in background mode. [bugzilla: 454 ] Fix for ACX_CHECK_COMPILER_FLAG from configure.ac, if CFLAGS is specified at configure time then '-g -O2' is not appended to CFLAGS, so that the user can override them. FIPS_mode openssl does not use arc4random but RAND_pseudo_bytes. fix missing break for GOST DS hash function. implemented forward_first for the root. code review: return value of cache_store can be ignored for better performance in out of memory conditions. patch for unbound_munin_ script to handle arbitrary thread count by Sven Ulland. Fix validation of qtype DS queries that result in no data for non-optout NSEC3 zones. fix edns-buffer-size and msg-buffer-size manpage documentation. fix error handling of alloc failure during rrsig verification. The key-cache bad key ttl is now 60 seconds. [bugzilla: 452 ] fix crash on assert in mesh_state_attachment. Fixes DS NS search to not generate duplicate sub queries. silence warning from swig-generated code (md set but not used in swig initmodule, due to ifdefs in swig-generated code). Fix debian-bugs-658021: Please enable hardened build flags. update iana ports list Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJQERJHAAoJEJ9vHC1+BF+NC4wP/0HCYQIUyI2Qr2WPetw/hsf5 7sFrC1aGr05slCq+ohpKJSVWOvOOf0gIu+6I/ilxRL0qDAJa63KVqxFf4Yb7RnQF /Jcb11WqURJb/a0E8qqBFh+ftFCp7Bd/prFl8ahpg3vjb0omZTv7hWoUCEUnIqAt kGDF+6CqLb37ajiqYYZ5qTUplOWg7jDrffQYo5AVjzOEhUY0c/DjZoAkjJP/pZeK qClumgzzZ1KPFSv7XUM1P7TtJ0kZXhelzLaoCQ6fRI9ZrVGiH0EexwpV4Y3yQZTW OHTpdTDLeSiJTAZxxs1KWSjQgG13anQvXS+SmZgNCPhr0RdHwUV97CYysZ0Dp3AD oUsCcYmZro/57icf8TLuNSUnc5z0ilmdoePej5j7knLmID9BNfREhjLqfCEISWfQ 1oxmRoBstOJTYGCuIGia5EnZKvg5qdJg3jAXQ2nolUOkQQPEUTkyoosyaIqB49tL l7uo9ESs4/Ha+8kP3Wo4pi+KzrrqrJH/G5zmGM1doz42TfhdJf1ydE5j9kPpuB14 0FPUnVgiMFOCtdeCFRHEjPxdFuOICHKgDEB0RaDUpqL8hubtdOUW7wns4oIo0Olr V8NsMpFdEZwFjL6cMh2yD0brcZUTd4DKYJpGoCklv57PsFZICpcQiG9p8sJJ7GCW crJ6t1+wIoZM9/EE9/SO =7gXv -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
