Date: Mon, 13 Jun 2016 15:46:52 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 210257] [PATCH] dns/unbound update to 1.5.9 Message-ID: <bug-210257-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D210257 Bug ID: 210257 Summary: [PATCH] dns/unbound update to 1.5.9 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: jaap@NLnetLabs.nl CC: erwin@FreeBSD.org Attachment #171392 maintainer-approval+ Flags: Flags: maintainer-feedback+ Keywords: patch Created attachment 171392 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D171392&action= =3Dedit Patch to update Summary: New IPv6 address for one of the root servers in the default root server configuration. And a number of bug fixes, for CD flags to forwarders, for 0x20 compatibility, for qname-minimisation with DNSSEC. Features: generic edns option parse and store code. Updated L root IPv6 address. User defined pluggable event API for libunbound ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding = to an IP address while the interface or address is down. OpenSSL 1.1.0 portability, --disable-dsa configure option. disable-dnssec-lame-check config option from Charles Walker. Bug Fixes: [bugzilla: 745 ] Fix unbound.py - idn2dname throws UnicodeError when idnname contains trailing dot. configure tests for the weak attribute support by the compiler. [bugzilla: 747 ] Fix assert in outnet_serviced_query_stop. Updated configure and ltmain.sh. Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja. Fixup backend2str for libev. Fix libev usage of dispatch return value. No side effects in tolower() call, in case it is a macro. Fix warnings in ifdef corner case, older or unknown libevent. Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma. Fix ip-transparent for tcp on freebsd. [bugzilla: 746 ] Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not= set CD bit when forwarding to another server. If a trust anchor, no CD bit on t= he first attempt to a forwarder, but CD bit thereafter on repeated attempts to= get DNSSEC. Limit number of QNAME minimisation iterations. Validate QNAME minimised NXDOMAIN responses. If QNAME minimisation is enabled, do cache lookup for QTYPE NS in harden-below-nxdomain. Fix compile of getentropy_linux for SLES11 servicepack 4. Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev. Fix test for openssl to use HMAC_Update for 1.1.0. ERR_remove_state deprecated since openssl 1.0.0. OPENSSL_config is deprecated, removing. Document permit-small-holddown for 5011 debug. [bugzilla: 749 ] Fix unbound-checkconf gets SIGSEGV when use against a malformatted conf file. [bugzilla: 753 ] Fix document dump_requestlist is for first thread. Fix some malformed reponses to edns queries get fallback to nonedns. [bugzilla: 759 ] Fix 0x20 capsforid no longer checks type PTR, for compatibility with ci= sco dns guard. This lowers false positives. Fix sldns with static checking fixes copied from getdns. Fix memory leak in out-of-memory conditions of local zone add. [bugzilla: 761 ] Fix DNSSEC LAME false positive resolving nic.club. [bugzilla: 766 ] Fix dns64 should synthesize results on timeout/errors. No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC signed zones. [bugzilla: 767 ] Fix Reference to an expired Internet-Draft in harden-below-nxdomain documentation. remove memory leak from lame-check patch. [bugzilla: 770 ] Fix Small subgroup attack on DH used in unix pipe on localhost if unbou= nd control uses a unix local named pipe. Document write permission to directory of trust anchor needed. [bugzilla: 768 ] Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report S= hown Up. Close handle before closing WSA. Fix time in case answer comes from cache in ub_resolve_event(). Fix windows service to be created run with limited rights, as a network service account, from Mario Turschmann. [bugzilla: 752 ] Fix retry resource temporarily unavailable on control pipe. iana ports fetched via https. iana portlist update. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-210257-13>