<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Is there a package repository on which I can get this version (1.24.0) without having to bring down the source code and "Make" it? This would be a repository for Ubuntu 22.04 or thereabouts. The one I have now (by using "apt update") only has ver 1.13.1. I am wondering if some of my problems might be "version" related. </p>
<p><br /></p>
<p>Thanks very much.</p>
<p><br /></p>
<p>Regards,<br />Arnold</p>
<p><br /></p>
<p><br /></p>
<p id="reply-intro">On 2025-09-18 07:00, unbound-users-request@lists.nlnetlabs.nl wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Send Unbound-users mailing list submissions to<br /> <a href="mailto:unbound-users@lists.nlnetlabs.nl">unbound-users@lists.nlnetlabs.nl</a><br /><br />To subscribe or unsubscribe via the World Wide Web, visit<br /> <a href="https://lists.nlnetlabs.nl/mailman/listinfo/unbound-users" target="_blank" rel="noopener noreferrer">https://lists.nlnetlabs.nl/mailman/listinfo/unbound-users</a><br />or, via email, send a message with subject or body 'help' to<br /> <a href="mailto:unbound-users-request@lists.nlnetlabs.nl">unbound-users-request@lists.nlnetlabs.nl</a><br /><br />You can reach the person managing the li<br /> <a href="mailto:unbound-users-owner@lists.nlnetlabs.nl">unbound-users-owner@lists.nlnetlabs.nl</a><br /><br />When replying, please edit your Subject line so it is more specific<br />than "Re: Contents of Unbound-users digest..."<br /><br /><br />Today's Topics:<br /><br /> 1. Unbound 1.24.0 released (Wouter Wijngaards)<br /><br /><br />----------------------------------------------------------------------<br /><br />Message: 1<br />Date: Thu, 18 Sep 2025 10:33:06 +0200<br />From: Wouter Wijngaards <<a href="mailto:wouter@nlnetlabs.nl">wouter@nlnetlabs.nl</a>><br />To: <a href="mailto:unbound-users@lists.nlnetlabs.nl">unbound-users@lists.nlnetlabs.nl</a>, <a href="mailto:maintainers@lists.nlnetlabs.nl">maintainers@lists.nlnetlabs.nl</a><br />Subject: Unbound 1.24.0 released<br />Message-ID: <<a href="mailto:bb1920ba-9733-3b32-9035-fb314e148cbd@nlnetlabs.nl">bb1920ba-9733-3b32-9035-fb314e148cbd@nlnetlabs.nl</a>><br />Content-Type: text/plain; charset=UTF-8; format=flowed<br /><br />Hi,<br /><br />Unbound 1.24.0 is available:<br /><a href="https://nlnetlabs.nl/downloads/unbound/unbound-1.24.0.tar.gz" target="_blank" rel="noopener noreferrer">https://nlnetlabs.nl/downloads/unbound/unbound-1.24.0.tar.gz</a><br />sha256 147b22983cc7008aa21007e251b3845bfcf899ffd2d3b269253ebf2e27465086<br />pgp <a href="https://nlnetlabs.nl/downloads/unbound/unbound-1.24.0.tar.gz.asc" target="_blank" rel="noopener noreferrer">https://nlnetlabs.nl/downloads/unbound/unbound-1.24.0.tar.gz.asc</a><br /><br />This release features increased defaults, num.valops statistic,<br />unbound-control cache_lookup, and bug fixes.<br /><br />The default value increase for num-queries-per-thread is to make<br />saturation of the task queue more resource intensive and less<br />practical. Thanks to Shiming Liu, Network and Information Security<br />Lab, Tsinghua University for the report.<br /><br />The default value increase for so-sndbuf is to mitigate a cross-layer<br />issue where the UDP socket send buffers are exhausted waiting for<br />ARP/NDP resolution. Thanks to Reflyable for the report.<br /><br />To help the server start more easily, the setsockopt for sndbuf buffer<br />size prints a warning instead of a failure to start the server if it<br />can not set the buffer size. This change has been added after RC1.<br /><br />Various cache -slabs options are auto-configured if not specified<br />in the config file. It uses a power of two close to the number of<br />threads. When the option is specified in the config file that value<br />is used instead.<br /><br />An extra statistic is added to track the number of signature validation<br />operations by the validator, `num.valops`.<br /><br />The unbound-control `cache_lookup` command prints cache information for<br />names in the domain given. This prints similar to dump_cache, but only<br />names under the zone(s) specified. Because of that it locks the caches<br />for a much shorter time, and this is good for server responsiveness.<br /><br />The `sock-queue-timeout` option is adapted to work on FreeBSD as well<br />as Linux.<br /><br />Features<br />- Increase default to `num-queries-per-thread: 2048`, when unbound is<br /> compiled with libevent. It makes saturation of the task queue more<br /> resource intensive and less practical. Thanks to Shiming Liu,<br /> Network and Information Security Lab, Tsinghua University for the<br /> report.<br />- Merge #1276: Auto-configure '-slabs' values.<br />- Change default for so-sndbuf to 1m, to mitigate a cross-layer<br /> issue where the UDP socket send buffers are exhausted waiting<br /> for ARP/NDP resolution. Thanks to Reflyable for the report.<br />- Adjusted so-sndbuf default to 4m.<br />- Merge #1289 from Roland van Rijswijk-Deij: Add extra statistic to<br /> track the number of signature validation operations.<br /> Adds 'num.valops' to extended statistics.<br />- Fix #1303: [FR] Disable TLSv1.2.<br />- unbound-control cache_lookup <domains> prints the cached rrsets<br /> and messages for those.<br />- unbound-control cache_lookup +t allows tld and root names. And<br /> subnet cache contents are printed.<br />- Fix #1319: [FR] zone status for Unbound auth-zones.<br /><br />Bug Fixes<br />- Fix #1272: assertion failure testcode/unitverify.c:202.<br />- Merge #1275: Use macros for the fr_check_changed* functions.<br />- Fix for parallel build of dnstap protoc-c output.<br />- Fix dnstap to use protoc.<br />- Sync unbound and unbound-checkconf log output for unknown modules.<br />- Fix #1281: forward-zone "name: ." conflicts with auth-zone "name: ."<br /> in 1.23.0, but worked in 1.22.0.<br />- Fix #1283: Unsafe usage of atoi() while parsing the configuration<br /> file.<br />- Merge #1280: Fix auth nsec3 code. Fixes NSEC3 code to not break on<br /> broken auth zones that include unsigned out of zone (above apex)<br /> data. Could lead to hang while trying to prove a wildcard answer.<br />- Fix #1284: NULL pointer deref in az_find_nsec_cover() (latent bug)<br /> by adding a log_assert() to safeguard future development.<br />- Fix #1282: log-destaddr fail on long ipv6 addresses.<br />- Fix config of slab values when there is no config file.<br />- Fix for cname chain length with qtype ANY and qname minimisation.<br /> Thanks to Jim Greenwood from Nominet for the report.<br />- Merge #1285: RST man pages. It introduces restructuredText man pages<br /> to sync the online and source code man page documentation.<br /> The templated man pages (*.in) are still part of the repo but<br /> generated with docutils from their .rst counterpart.<br /> Documentation on how to generate those (mainly for core developers)<br /> is in README.man.<br />- Add more checks about respip in unbound-checkconf.<br /> Also fixes #310: unbound-checkconf not reporting RPZ configuration<br /> error.<br />- Fix #1288: [FR] Improve fuzzing of unbound by adapting the netbound<br /> program.<br />- Small manpage corrections for the 'disable-dnssec-lame-check' option.<br />- Fix unbound-anchor certificate file read for line ends and end of<br /> file.<br />- Fix comment for the dname_remove_label_limit_len function.<br />- iana portlist updated.<br />- Fix bitwise operators in conditional expressions with parentheses.<br />- Fix conditional expressions with parentheses for bitwise and.<br />- Fix header return value description for skip_pkt_rrs and<br /> parse_edns_from_query_pkt.<br />- Fix to check control-interface addresses in unbound-checkconf.<br />- Fix #1295: Windows 32-bit binaries download seems to be missing dll<br /> dependency.<br />- Fix for consistent use of local zone CNAME alias for configured auth<br /> zones. Now it also applies to downstream configured auth zones.<br />- Fix #1296: DNS over QUIC depends on a very outdated version of<br /> ngtcp2. Fixed so it works with ngtcp2 1.13.0 and OpenSSL 3.5.0.<br />- Merge #1297: edns-subnet: fix NULL_AFTER_DEREF on subnetmod.<br />- Fix rrset cache create allocation failure case.<br />- Fix #1293: EDE 6 is attached to insecure cached answers when client<br /> sends the CD bit.<br />- Fix #1247: forward-first: ssl handshake failed on root nameservers.<br />- For #1247, turn off fetch-policy for delegation when looking into<br /> parent side name servers that may not update the addresses and hit<br /> NXNS limits.<br />- For #1247, replay test (added tcp_transport to<br /> outnet_serviced_query).<br />- Merge #1299: Fix typos.<br />- Generate ltmain.sh and configure again.<br />- Fix #1300: Is 'sock-queue-timeout' a linux only feature.<br />- For #1300: implement sock-queue-timeout for FreeBSD as well.<br />- Fix layout of comm_point_udp_ancil_callback.<br />- Fix to improve dnstap discovery on Fedora.<br />- Fix detection of SSL_CTX_set_tmp_ecdh function.<br />- For #1301: configure cant find SSL_is_quic in OpenSSL 3.5.1.<br />- For #1289: test num.valops in existing stat_values.tdir.<br />- For #1289: add num.valops in the unbound-control man page.<br />- Add unit tests for non-ecs aggregation.<br />- Fix to not set rlimits in the unit tests.<br />- iana portlist updated.<br />- Redis checks for server down and throttles reconnects.<br />- Fix redis cachedb module gettimeofday init failure.<br />- Fix testbound test program to accurately output packets from hex.<br />- Fix #1309: incorrectly reclaimed tcp handler can cause data<br /> corruption and segfault.<br />- Fix to use assertions for consistency checks in #1309 reclaimed<br /> tcp handlers.<br />- Fix edns subnet, so that the subquery without subnet is stored in<br /> global cache if the querier used 0.0.0.0/0 and the name and address<br /> do not receive subnet treatment. If the name and address are<br /> configured for subnet, it is stored in the subnet cache.<br />- Fix dname_str for printout of long names. Thanks to Jan Komissar<br /> for the fix.<br />- Fix that edns-subnet failure to create a subquery errors as<br /> servfail, and not formerror.<br />- Fix to whitespace in dname_str.<br />- Fix that unbound-control dump_cache releases the cache locks<br /> every so often, so that the server stays responsive.<br />- Fix to remove debug from cache_lookup.<br />- Fix to unlock cache_lookup message for malformed records.<br />- Fix to increase responsiveness of dump_cache.<br />- Fix to decouple file descriptor activity and cache lookups in<br /> dump_cache.<br />- Fix cache_lookup subnet printout to wipe zero part of the prefix.<br />- Fix cache_lookup subnet print to not print messages without rrsets<br /> and perform in-depth check on node in the addrtree.<br />- Fix to check for extraneous command arguments for unbound-control,<br /> when the command takes no arguments but there are arguments present.<br />- Fix #1317: Unbound starts too early. Add<br /> Wants=network-online.target under [Unit] in unbound.service.<br />- Fix for #1317: Fix contrib/unbound.service comment path for<br /> systemd network configuration.<br />- For #1318: Fix compile warnings for DoH compile on windows.<br />- Fix sha1 enable environment variable in test code on windows.<br />- Fix that the zone acquired timestamp is set after the<br /> zonefile is read.<br />- Fix ports workflow to install expat for macos.<br />- Fix unbound-control dump_cache for double unlock of lruhash table.<br />- Fix setup_listen_sslctx warning for nettle compile.<br />- Limit the number of consecutive reads on an HTTP/2 session.<br /> Thanks to Gal Bar Nahum for exposing the possibility of infinite<br /> reads on the session.<br />- Fix for #1324: Fix to free edns options scratch in ratelimit case.<br />- Fix #1235: Outdated Python2 code in<br /> unbound/pythonmod/examples/log.py.<br />- Fix #1324: Memory leak in 'msgparse.c' in<br /> 'parse_edns_options_from_query(...)'.<br />- Fix indentation in tcp-mss option parsing.<br />- For #1328: make depend.<br />- Update documentation for using "SET ... EX" in Redis.<br />- Document max buffer sizes for Redis commands.<br />- Update man pages.<br />- Fix #1332: CNAME chains are sometimes not followed when RPZs add a<br /> local CNAME rewrite.<br /><br />Changes after RC1<br />- Update contrib/aaaa-filter-iterator.patch so it applies on 1.24.0.<br />- Small debug output improvement when attaching an EDE.<br />- Fix to print warning for when so-sndbuf setsockopt is not granted.<br />- Too many quotes for the EDE message debug printout.<br /><br />Best regards, Wouter<br /><br /><br />------------------------------<br /><br />Subject: Digest Footer<br /><br />_______________________________________________<br />Unbound-users mailing list<br /><a href="mailto:Unbound-users@lists.nlnetlabs.nl">Unbound-users@lists.nlnetlabs.nl</a><br /><a href="https://lists.nlnetlabs.nl/mailman/listinfo/unbound-users" target="_blank" rel="noopener noreferrer">https://lists.nlnetlabs.nl/mailman/listinfo/unbound-users</a><br /><br /><br />------------------------------<br /><br />End of Unbound-users Digest, Vol 69, Issue 8<br />********************************************</div>
</blockquote>
<p><br /></p>
</body></html>