unbound-1.5.4

[Fernando de Oliveira]

​https://www.unbound.net/downloads/unbound-1.5.4.tar.gz

​https://www.unbound.net/downloads/unbound-1.5.4.tar.gz.sha256

a1e1c1a578cf8447cb51f6033714035736a0f04444854a983123c094cc6fb137

​https://unbound.net/download.html

Features

  •  Patch from Stephane Lapie for ASAHI Net that implements
     aaaa-filter, added to contrib/aaaa-filter-iterator.patch.

Bug Fixes

  •  Fix that CD flag disables DNS64 processing, returning the DNSSEC
     signed AAAA denial.
  •  Fix compat/getentropy_win.c check if CryptGenRandom works and no
     immediate exit on windows.
  •  Fix crash on multiple thread random usage on systems without
     arc4random.
  •  Fix log at high verbosity and memory allocation failure.
  •  Fix libunbound undefined symbol errors for main.
  •  Patch from Robert Edmonds to build pyunbound python module
     differently. No versioninfo, with -shared and without $(LIBS).
  •  Patch from Robert Edmonds fixes hyphens in unbound-anchor man page.
  •  Removed 'increased limit open files' log message that is written to
     console. It is only written on verbosity 4 and higher. This keeps
     system bootup console cleaner.
  •  Patch from James Raftery, always print stats for rcodes 0..5.
     [bugzilla: 627 ]
  •  Fix SSL_CTX_load_verify_locations return code not properly checked.
  •  Fix makefile for build from noexec source tree.
  •  Add include to getentropy_linux.c, fixing debian build.
     [bugzilla: 632 ]
  •  Fix that unbound fails to build on AArch64, protects getentropy
     compat code from calling sysctl if it is has been removed.
  •  Fix CVE-2014-8602: denial of service by making resolver chase
     endless series of delegations.

[bdubbs@…]

Fixed at revision 16237.