diff mbox series

unbound: Update to 1.16.2

Message ID 20220801182516.1810-1-matthias.fischer@ipfire.org
State Accepted
Commit ee90ed8271b47dc91fb52b55e2cf81a87a9ac3c3
Headers
Series unbound: Update to 1.16.2 |

Commit Message

Matthias Fischer Aug. 1, 2022, 6:25 p.m. UTC 
  For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

"Features

    Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout.

Bug Fixes

    Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.

    Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing
    for one loop pass'.

    Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT
    on outbound tcp sockets.

    Fix verbose EDE error printout.

    Fix dname count in sldns parse type descriptor for SVCB and HTTPS.

    For windows crosscompile, fix setting the IPV6_MTU socket option
    equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions.

    Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code.

    iana portlist update.

    Update documentation for 'outbound-msg-retry:'.

    Tests for ghost domain fixes."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 config/rootfiles/common/unbound | 2 +-
 lfs/unbound                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

Comments

Peter Müller Aug. 1, 2022, 7:11 p.m. UTC | #1 
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>

> For details see:
> https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2
> 
> "Features
> 
>     Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout.
> 
> Bug Fixes
> 
>     Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
> 
>     Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing
>     for one loop pass'.
> 
>     Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT
>     on outbound tcp sockets.
> 
>     Fix verbose EDE error printout.
> 
>     Fix dname count in sldns parse type descriptor for SVCB and HTTPS.
> 
>     For windows crosscompile, fix setting the IPV6_MTU socket option
>     equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions.
> 
>     Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code.
> 
>     iana portlist update.
> 
>     Update documentation for 'outbound-msg-retry:'.
> 
>     Tests for ghost domain fixes."
> 
> Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
> ---
>  config/rootfiles/common/unbound | 2 +-
>  lfs/unbound                     | 4 ++--
>  2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound
> index 20fe72a57..7fc4f191a 100644
> --- a/config/rootfiles/common/unbound
> +++ b/config/rootfiles/common/unbound
> @@ -11,7 +11,7 @@ etc/unbound/unbound.conf
>  #usr/lib/libunbound.la
>  #usr/lib/libunbound.so
>  usr/lib/libunbound.so.8
> -usr/lib/libunbound.so.8.1.17
> +usr/lib/libunbound.so.8.1.18
>  #usr/lib/pkgconfig/libunbound.pc
>  usr/sbin/unbound
>  usr/sbin/unbound-anchor
> diff --git a/lfs/unbound b/lfs/unbound
> index 539ea5005..5a3c70caf 100644
> --- a/lfs/unbound
> +++ b/lfs/unbound
> @@ -24,7 +24,7 @@
>  
>  include Config
>  
> -VER        = 1.16.1
> +VER        = 1.16.2
>  
>  THISAPP    = unbound-$(VER)
>  DL_FILE    = $(THISAPP).tar.gz
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>  
>  $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>  
> -$(DL_FILE)_BLAKE2 = 722e2d88f66f35459b71cd339f451bf803c836827f9f74540c4ae500b7f682f0e8c89bda34915fb8df289cc524486fab2a04018717e1ae7ad62006be68af1cad
> +$(DL_FILE)_BLAKE2 = 2f7f119d12807ff5c000fd500be72a0825614da3e1f079f9b8d15a651bda2fa0b41599a55c6f76b17ff56120aa61e48042469063f08dd199333520172ca16750
>  
>  install : $(TARGET)
>
diff mbox series

Patch

diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound
index 20fe72a57..7fc4f191a 100644
--- a/config/rootfiles/common/unbound
+++ b/config/rootfiles/common/unbound
@@ -11,7 +11,7 @@  etc/unbound/unbound.conf
 #usr/lib/libunbound.la
 #usr/lib/libunbound.so
 usr/lib/libunbound.so.8
-usr/lib/libunbound.so.8.1.17
+usr/lib/libunbound.so.8.1.18
 #usr/lib/pkgconfig/libunbound.pc
 usr/sbin/unbound
 usr/sbin/unbound-anchor
diff --git a/lfs/unbound b/lfs/unbound
index 539ea5005..5a3c70caf 100644
--- a/lfs/unbound
+++ b/lfs/unbound
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 1.16.1
+VER        = 1.16.2
 
 THISAPP    = unbound-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 722e2d88f66f35459b71cd339f451bf803c836827f9f74540c4ae500b7f682f0e8c89bda34915fb8df289cc524486fab2a04018717e1ae7ad62006be68af1cad
+$(DL_FILE)_BLAKE2 = 2f7f119d12807ff5c000fd500be72a0825614da3e1f079f9b8d15a651bda2fa0b41599a55c6f76b17ff56120aa61e48042469063f08dd199333520172ca16750
 
 install : $(TARGET)