Reviewed-by: Peter Müller peter.mueller@ipfire.org

For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

"Features

Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout.

Bug Fixes

Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.

Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing
for one loop pass'.

Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT
on outbound tcp sockets.

Fix verbose EDE error printout.

Fix dname count in sldns parse type descriptor for SVCB and HTTPS.

For windows crosscompile, fix setting the IPV6_MTU socket option
equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions.

Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code.

iana portlist update.

Update documentation for 'outbound-msg-retry:'.

Tests for ghost domain fixes."

Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org

config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 20fe72a57..7fc4f191a 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.17 +usr/lib/libunbound.so.8.1.18 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index 539ea5005..5a3c70caf 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@

include Config

-VER = 1.16.1 +VER = 1.16.2

THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

-$(DL_FILE)_BLAKE2 = 722e2d88f66f35459b71cd339f451bf803c836827f9f74540c4ae500b7f682f0e8c89bda34915fb8df289cc524486fab2a04018717e1ae7ad62006be68af1cad +$(DL_FILE)_BLAKE2 = 2f7f119d12807ff5c000fd500be72a0825614da3e1f079f9b8d15a651bda2fa0b41599a55c6f76b17ff56120aa61e48042469063f08dd199333520172ca16750

install : $(TARGET)