-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 12 Jan 2023 18:28:54 +0300 Source: unbound Architecture: source Version: 1.17.1-1 Distribution: unstable Urgency: medium Maintainer: unbound packagers <unbound@packages.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1024422 Changes: unbound (1.17.1-1) unstable; urgency=medium . [ Michael Tokarev ] * new upstream release. Release notes: . This release fixes a number of bugs. There are also new configuration options that by default do not change the existing behaviour of Unbound. . With `statistics-inhibit-zero` the printout of zero values by stats can be controlled. Similarly with `max-sent-count` and `max-query-restarts` the iterator behaviour can be controlled. The maximum CNAME chain length that is accepted can be changed by increasing the `max-query-restarts` number. This takes more time to follow those elements. . The keep-cache option allows reloads to change configuration whilst keeping the cache memory intact, making the cache hot for good response times after the change has completed. . The release contains an additional fix for service downgrade due to wrong hash values for wildcards in a hyperlocal zone, that was reported by Sergey Kacheev. . Features - Expose 'statistics-inhibit-zero' as a configuration option; the default value retains Unbound's behavior. - Expose 'max-sent-count' as a configuration option; the default value retains Unbound's behavior. - Merge #461 from Christian Allred: Add max-query-restarts option. Exposes an internal configuration but the default value retains Unbound's behavior. - Merge #569 from JINMEI Tatuya: add keep-cache option to 'unbound-control reload' to keep caches. . Bug Fixes - Merge #768 from fobser: Arithmetic on a pointer to void is a GNU extension. - In unit test, print python script name list correctly. - testcode/dohclient sets log identity to its name. - Clarify the use of MAX_SENT_COUNT in the iterator code. - Fix that cachedb does not store failures in the external cache. - Merge #767 from jonathangray: consistently use IPv4/IPv6 in unbound.conf.5. - Fix to ignore tcp events for closed comm points. - Fix to make sure to not read again after a tcp comm point is closed. - Fix #775: libunbound: subprocess reap causes parent process reap to hang. - iana portlist update. - Complementary fix for distutils.sysconfig deprecation in Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2. - Fix #779: [doc] Missing documentation in ub_resolve_event() for callback parameter was_ratelimited. - Ignore expired error responses. - Merge #720 from jonathangray: fix use after free when WSACreateEvent() fails. - Fix for the ignore of tcp events for closed comm points, preserve the use after free protection features. - Fix #782: Segmentation fault in stats.c:404. - Add SVCB and HTTPS to the types removed by 'unbound-control flush'. - Clear documentation for interactivity between the subnet module and the serve-expired and prefetch configuration options. - Fix #773: When used with systemd-networkd, unbound does not start until systemd-networkd-wait-online.service times out. - Merge #808: Wrap Makefile script's directory variables in quotes. - Fix to wrap Makefile scripts directory in quotes for uninstall. - Fix windows compile for libunbound subprocess reap comm point closes. - Update github workflows to use checkout v3. - Fix wildcard in hyperlocal zone service degradation, reported by Sergey Kacheev. . * lintian-overrides fixes/additions . [ Helmut Grohne ] * Fix FTCBFS: export _PYTHON_SYSCONFIGDATA_NAME. (Closes: #1024422) Checksums-Sha1: 1ca6e81d2fefb2fbb7096139a55714713c52a385 2843 unbound_1.17.1-1.dsc 90da3bb8883931e30384057722dd9d1df4286f46 6244773 unbound_1.17.1.orig.tar.gz 6b754d1c792a1f6d01d6706a75777b87d434b134 833 unbound_1.17.1.orig.tar.gz.asc 6fc9d1898cf0be8301ea561544e26daabaaf437d 29784 unbound_1.17.1-1.debian.tar.xz 355df0dd0b14092c4373df4047ff295715c7d896 7607 unbound_1.17.1-1_source.buildinfo Checksums-Sha256: f9dcc2d949f6c7939785830984b76c12e391a06b10b9acbb8bf5425e378cd1a8 2843 unbound_1.17.1-1.dsc ee4085cecce12584e600f3d814a28fa822dfaacec1f94c84bfd67f8a5571a5f4 6244773 unbound_1.17.1.orig.tar.gz b66a35d11545a1334b8aec1848c8c7ee0e01ef4a2950f2260a7c26b6fd61bfbf 833 unbound_1.17.1.orig.tar.gz.asc 46935f1c9908ba865fa1a5f66d280af98821b132dcba193008f3fe0133f2e595 29784 unbound_1.17.1-1.debian.tar.xz e02437aa0c04848d91d788b7740d0cb137e6ebc564a48b26a296c7aa64eb3879 7607 unbound_1.17.1-1_source.buildinfo Files: fce9db364abafca62fdf4b776ad8c28c 2843 net optional unbound_1.17.1-1.dsc bb96df2dc579c11ada537dbc52781abc 6244773 net optional unbound_1.17.1.orig.tar.gz 8a6399230741197bdd17cc7e7686fe31 833 net optional unbound_1.17.1.orig.tar.gz.asc f83ab91b51b3b2285d03686d259209ec 29784 net optional unbound_1.17.1-1.debian.tar.xz 38f686a7b82267a21a6ec3c72a01d10b 7607 net optional unbound_1.17.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmPAJ8sPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZFs8H/1dgXOMJ8gLQryOTeoNSYtS3Sm0eqshoQglV 7ApHFIMMSlk89l/ZxCqMwb4O1LEpUYHQq8wDlNyXH6jVycDMWdubU4kxFAy22jjN imQlcfyac9JKggxv3wiIUsAeKvdiaaAIa6i1Go6opP/q9Ik+egTSJ+vph6uR6Dz3 +gDH1JskZmQRo4T/+RUEIxL4XIdFrHFnDtIj/j2fNZBtEB58iB6HKQSPN298Mmp2 +bRAPeMSCVhWWjXHl3611HVs6NYfH/c2emT6FhoftEb0DwSzLoy/hyQFyNQirJCB +Sl9ZX1MYjomIEuDhQnoM9bWV4DbftRE1EpE5KS5tTu19NCD1Z8= =cagK -----END PGP SIGNATURE-----
