-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi,
The 1.5.8rc1 release candidate is available http://www.unbound.net/downloads/unbound-1.5.8rc1.tar.gz sha1 6382f84452523eb134f425a5b19352a883ae70fa sha256 42a076362659f0104a979247835f7c60a3a4c559ab06169c98ba4990aa11a633 pgp http://www.unbound.net/downloads/unbound-1.5.8rc1.tar.gz.asc The release fixes line endings in the unbound-control-setup script, and a potential gost-hash validation failure and handles the ".onion" domain to avoid privacy leakage. Features - - ip-transparent option for FreeBSD with IP_BINDANY socket option. - - insecure-lan-zones: yesno config option, patch from Dag-Erling Smørgrav. - - RR Type CSYNC support RFC 7477, in debug printout and config input. - - RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07). - - [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf, patch from Daisuke Higashi. - - Support RFC7686: handle ".onion" Special-Use Domain. It is blocked by default, and can be unblocked with "nodefault" localzone config. - - ub_ctx_set_stub() function for libunbound to config stub zones. Bug Fixes - - Fix that NSEC3 negative cache is used when there is no salt. - - sorted ubsyms.def file with exported libunbound functions. - - Print understandable debug log when unusable DS record is seen. - - load gost algorithm if digest is seen before key algorithm. - - Fix that "make install" fails due to "text file busy" error. - - Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error. - - wait for sendto to drain socket buffers when they are full. - - Neater cmdline_verbose increment patch from Edgar Pettijohn. - - Made netbsd sendmsg test nonfatal, in case of false positives. - - [bugzilla: 741 ] Fix: log message for dnstap socket connection is more clear. - - [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the chroot. - - Fix cmsg alignment for argument to sendmsg on NetBSD. - - Fix that unbound complains about unimplemented IP_PKTINFO for sendmsg on NetBSD (for interface-automatic). - - [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS. - - Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. - - Fix to simplify empty string checking from Michael McConville. - - [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot be chown'ed. Patch from Simon Deziel. - - Fix test if -pthreads unused to use better grep for portability. - - Fix mingw crosscompile for recent mingw. - - Update aclocal, autoconf output with new versions (1.15, 2.4.6). - - Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined, for Linux glibc 2.20. - - Fixup contrib/aaaa-filter-iterator.patch for moved contents in the source code, so it applies cleanly again. Removed unused variable warnings. - - [bugzilla: 729 ] Fix: omit use of escape sequences in echo since they are not portable (unbound-control-setup). - - remove NULL-checks before free, patch from Michael McConville. - - updated ax_pthread.m4 to version 21 with clang support, this removes a warning from compilation. - - OSX portability, detect if sbrk is deprecated. - - OSX clang, stop -pthread unused during link stage warnings. - - OSX clang new flto check. - - iana portlist update. Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWzs8JAAoJEJ9vHC1+BF+N+rMP+gOntKG/ZEbmLAtUx/JCSpWN Sc/AwNJijIX77FONCRIY1sVrWjATYxY2ePFIl/5YYnQzdEmNjVcrPD2QsuXxQrWj i6Kl2/Pg8+Hnf9dlDEKDcttFvJ+TziWX+IhtvkvhgGrqa2FVy3U7Ub0n0+4IFBuQ heKNEwUgMZJ+AdnvrZ7LwEVbpiKNqUFEW4tn++y8RpnPwXDLs2ErSBHjKP6m6xD/ ROgiyu6Y8YITVFUc2aHSxTyQwoynUBEkARp6AuEriSTcpm9F8xsuS/dOJYKvQRku tQCrROqZ98A9hsf919xMQQBdsBTcbqUTsEaePmW4gPEVJVjPyjkj5a8y2POH9unY WP4hXq3PLCu6AKo5ffXAgjBpjZeYErzeIZ2FNGN0gPs1cSGRSaU59ja0hfB80wo/ Ha81uq0KlYLbywxNpNuVpf6niXKP0XQEcc00iwzaC67uZQdqRnzn1Ts+/2iJDmXe pvycYOP8jT3uH8N6fOCviza47OiTV4f6JjeAnUAVQJYNlvd8+VPPSZhnm3PD1dG5 CKGYO4U902EkHoO1T5Bnahg0lBoodRVx3v/OVfkYtMXEJDHiI1s9D3m3yIOkZeUd bgfpfit6M2nOcI0/52G0YiXKQUdRxm7jcenwmeaIOybKg/tr/GUT+RNyrfbXfkLn 5rkDJAEiLmWscWggw9bK =1tjd -----END PGP SIGNATURE-----
