From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: Re: [PATCH] unbound: Update to 1.17.0 Date: Mon, 17 Oct 2022 11:41:40 +0100 Message-ID: <9DB1A7DF-AE69-4FF2-A518-440121203567@ipfire.org> In-Reply-To: <20221014190935.3584603-1-matthias.fischer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8267547228916969158==" List-Id: --===============8267547228916969158== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Reviewed-by: Michael Tremer > On 14 Oct 2022, at 20:09, Matthias Fischer = wrote: >=20 > For details see: > https://nlnetlabs.nl/projects/unbound/download/#unbound-1-17-0 >=20 > "Features >=20 > Merge #753: ACL per interface. (New interface-* configuration options). >=20 > Merge #760: PROXYv2 downstream support. (New proxy-protocol-port configu= ration option). >=20 > Bug Fixes >=20 > Fix #728: alloc_reg_obtain() core dump. Stop double alloc_reg_release > when serviced_create fails. > Fix edns subnet so that scope 0 answers only match sourcemask 0 queries > for answers from cache if from a query with sourcemask 0. > Fix unittest for edns subnet change. > Merge #730 from luisdallos: Fix startup failure on Windows 8.1 due to > unsupported IPV6_USER_MTU socket option being set. > Fix ratelimit inconsistency, for ip-ratelimits the value is the amount > allowed, like for ratelimits. > Fix #734 [FR] enable unbound-checkconf to detect more (basic) errors. > Fix to log accept error ENFILE and EMFILE errno, but slowly, once per > 10 seconds. Also log accept failures when no slow down is used. > Fix to avoid process wide fcntl calls mixed with nonblocking operations > after a blocked write. > Patch from Vadim Fedorenko that adds MSG_DONTWAIT to receive > operations, so that instruction reordering does not cause mistakenly > blocking socket operations. > Fix to wait for blocked write on UDP sockets, with a timeout if it > takes too long the packet is dropped. > Fix for wait for udp send to stop when packet is successfully sent. > Fix #741: systemd socket activation fails on IPv6. > Fix to update config tests to fix checking if nonblocking sockets work > on OpenBSD. > Slow down log frequency of write wait failures. > Fix to set out of file descriptor warning to operational verbosity. > Fix to log a verbose message at operational notice level if a thread is > not responding, to stats requests. It is logged with thread > identifiers. > Remove include that was there for debug purposes. > Fix to check pthread_t size after pthread has been detected. > Convert tdir tests to use the new skip_test functionality. > Remove unused testcode/mini_tpkg.sh file. > Better output for skipped tdir tests. > Fix doxygen warning in respip.h. > Fix to remove erroneous TC flag from TCP upstream. > Fix test tdir skip report printout. > Fix windows compile, the identifier interface is defined in headers. > Fix to close errno block in comm_point_tcp_handle_read outside of ifdef. > Fix static analysis report to remove dead code from the > rpz_callback_from_iterator_module function. > Fix to clean up after the acl_interface unit test. > Merge #764: Leniency for target discovery when under load (for > NRDelegation changes). > Use DEBUG_TDIR from environment in mini_tdir.sh for debugging. > Fix string comparison in mini_tdir.sh. > Make ede.tdir test more predictable by using static data. > Fix checkconf test for dnscrypt and proxy port. > Fix dnscrypt compile for proxy protocol code changes. > Fix to stop responses with TC flag from resulting in partial responses. > It retries to fetch the data elsewhere, or fails the query and in depth > fix removes the TC flag from the cached item. > Fix proxy length debug output printout typecasts. > Fix to stop possible loops in the tcp reuse code (write_wait list and > tcp_wait list). Based on analysis and patch from Prad Seniappan and > Karthik Umashankar. > Fix PROXYv2 header read for TCP connections when no proxied addresses > are provided." >=20 > Signed-off-by: Matthias Fischer > --- > config/rootfiles/common/unbound | 2 +- > lfs/unbound | 4 ++-- > 2 files changed, 3 insertions(+), 3 deletions(-) >=20 > diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbo= und > index 7af787f29..26ce13c3f 100644 > --- a/config/rootfiles/common/unbound > +++ b/config/rootfiles/common/unbound > @@ -11,7 +11,7 @@ etc/unbound/unbound.conf > #usr/lib/libunbound.la > #usr/lib/libunbound.so > usr/lib/libunbound.so.8 > -usr/lib/libunbound.so.8.1.19 > +usr/lib/libunbound.so.8.1.20 > #usr/lib/pkgconfig/libunbound.pc > usr/sbin/unbound > usr/sbin/unbound-anchor > diff --git a/lfs/unbound b/lfs/unbound > index 636fe8bf9..3852c2e6a 100644 > --- a/lfs/unbound > +++ b/lfs/unbound > @@ -24,7 +24,7 @@ >=20 > include Config >=20 > -VER =3D 1.16.3 > +VER =3D 1.17.0 >=20 > THISAPP =3D unbound-$(VER) > DL_FILE =3D $(THISAPP).tar.gz > @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) >=20 > $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) >=20 > -$(DL_FILE)_BLAKE2 =3D b97deade78ab903363e06ff9d71b9895c754378ec276bb17556d= e62c48a88af5fbabd26f97fb47313d1e631fe75dee245aa38fbf42a865ac3e764882a1124a51 > +$(DL_FILE)_BLAKE2 =3D 611c1b96ff84e6dd8f7a592135cc17f416cd810d0f35d27c8ced= d56af069badd8dca112cc5927a1fe50ec3335c377b6bd6fc4e1a6d63a332a90d676e3c23dcef >=20 > install : $(TARGET) >=20 > --=20 > 2.34.1 >=20 --===============8267547228916969158==--