Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org>

On 24/04/2023 19:59, Matthias Fischer wrote:
> For details see:
> https://nlnetlabs.nl/projects/unbound/download/#unbound-1-17-1
>
> "Features
>
>      Expose 'statistics-inhibit-zero' as a configuration option; the default
>      value retains Unbound's behavior.
>      Expose 'max-sent-count' as a configuration option; the default value
>      retains Unbound's behavior.
>      Merge #461 from Christian Allred: Add max-query-restarts option.
>      Exposes an internal configuration but the default value retains
>      Unbound's behavior.
>      Merge #569 from JINMEI Tatuya: add keep-cache option to
>      'unbound-control reload' to keep caches.
>
> Bug Fixes
>
>      Merge #768 from fobser: Arithmetic on a pointer to void is a GNU
>      extension.
>      In unit test, print python script name list correctly.
>      testcode/dohclient sets log identity to its name.
>      Clarify the use of MAX_SENT_COUNT in the iterator code.
>      Fix that cachedb does not store failures in the external cache.
>      Merge #767 from jonathangray: consistently use IPv4/IPv6 in
>      unbound.conf.5.
>      Fix to ignore tcp events for closed comm points.
>      Fix to make sure to not read again after a tcp comm point is closed.
>      Fix #775: libunbound: subprocess reap causes parent process reap to
>      hang.
>      iana portlist update.
>      Complementary fix for distutils.sysconfig deprecation in Python 3.10 to
>      commit 62c5039ab9da42713e006e840b7578e01d66e7f2.
>      Fix #779: [doc] Missing documention in ub_resolve_event() for callback
>      parameter was_ratelimited.
>      Ignore expired error responses.
>      Merge #720 from jonathangray: fix use after free when WSACreateEvent()
>      fails.
>      Fix for the ignore of tcp events for closed comm points, preserve the
>      use after free protection features.
>      Fix #782: Segmentation fault in stats.c:404.
>      Add SVCB and HTTPS to the types removed by 'unbound-control flush'.
>      Clear documentation for interactivity between the subnet module and the
>      serve-expired and prefetch configuration options.
>      Fix #773: When used with systemd-networkd, unbound does not start until
>      systemd-networkd-wait-online.service times out.
>      Merge #808: Wrap Makefile script's directory variables in quotes.
>      Fix to wrap Makefile scripts directory in quotes for uninstall.
>      Fix windows compile for libunbound subprocess reap comm point closes.
>      Update github workflows to use checkout v3.
>      Fix wildcard in hyperlocal zone service degradation, reported by Sergey
>      Kacheev."
>
> Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
> ---
>   config/rootfiles/common/unbound | 2 +-
>   lfs/unbound                     | 6 +++---
>   2 files changed, 4 insertions(+), 4 deletions(-)
>
> diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound
> index 26ce13c3f..575c4f500 100644
> --- a/config/rootfiles/common/unbound
> +++ b/config/rootfiles/common/unbound
> @@ -11,7 +11,7 @@ etc/unbound/unbound.conf
>   #usr/lib/libunbound.la
>   #usr/lib/libunbound.so
>   usr/lib/libunbound.so.8
> -usr/lib/libunbound.so.8.1.20
> +usr/lib/libunbound.so.8.1.21
>   #usr/lib/pkgconfig/libunbound.pc
>   usr/sbin/unbound
>   usr/sbin/unbound-anchor
> diff --git a/lfs/unbound b/lfs/unbound
> index 3852c2e6a..789bbded9 100644
> --- a/lfs/unbound
> +++ b/lfs/unbound
> @@ -1,7 +1,7 @@
>   ###############################################################################
>   #                                                                             #
>   # IPFire.org - A linux based firewall                                         #
> -# Copyright (C) 2007-2022  IPFire Team  <info(a)ipfire.org>                     #
> +# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
>   #                                                                             #
>   # This program is free software: you can redistribute it and/or modify        #
>   # it under the terms of the GNU General Public License as published by        #
> @@ -24,7 +24,7 @@
>   
>   include Config
>   
> -VER        = 1.17.0
> +VER        = 1.17.1
>   
>   THISAPP    = unbound-$(VER)
>   DL_FILE    = $(THISAPP).tar.gz
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>   
>   $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>   
> -$(DL_FILE)_BLAKE2 = 611c1b96ff84e6dd8f7a592135cc17f416cd810d0f35d27c8cedd56af069badd8dca112cc5927a1fe50ec3335c377b6bd6fc4e1a6d63a332a90d676e3c23dcef
> +$(DL_FILE)_BLAKE2 = c2dec1608e28302da33ee72144bb8eb16cdff2e949e548f9ea5edb10b370e396085de641446b1f94daeb96a48a02f9361ebae69f72f3d449575fe3ce93dcdb5b
>   
>   install : $(TARGET)
>