Unbound 1.5.8rc1 prerelease

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

The 1.5.8rc1 release candidate is available
http://www.unbound.net/downloads/unbound-1.5.8rc1.tar.gz
sha1 6382f84452523eb134f425a5b19352a883ae70fa
sha256 42a076362659f0104a979247835f7c60a3a4c559ab06169c98ba4990aa11a633
pgp http://www.unbound.net/downloads/unbound-1.5.8rc1.tar.gz.asc

The release fixes line endings in the unbound-control-setup script, and
a potential gost-hash validation failure and handles the ".onion" domain
to avoid privacy leakage.

Features
- -   ip-transparent option for FreeBSD with IP_BINDANY socket option.
- -   insecure-lan-zones: yesno config option, patch from Dag-Erling
Smørgrav.
- -   RR Type CSYNC support RFC 7477, in debug printout and config input.
- -   RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
- -   [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
patch from Daisuke Higashi.
- -   Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
by default, and can be unblocked with "nodefault" localzone config.
- -   ub_ctx_set_stub() function for libunbound to config stub zones.

Bug Fixes
- -   Fix that NSEC3 negative cache is used when there is no salt.
- -   sorted ubsyms.def file with exported libunbound functions.
- -   Print understandable debug log when unusable DS record is seen.
- -   load gost algorithm if digest is seen before key algorithm.
- -   Fix that "make install" fails due to "text file busy" error.
- -   Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
- -   wait for sendto to drain socket buffers when they are full.
- -   Neater cmdline_verbose increment patch from Edgar Pettijohn.
- -   Made netbsd sendmsg test nonfatal, in case of false positives.
- -   [bugzilla: 741 ] Fix: log message for dnstap socket connection is
more clear.
- -   [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
chroot.
- -   Fix cmsg alignment for argument to sendmsg on NetBSD.
- -   Fix that unbound complains about unimplemented IP_PKTINFO for
sendmsg on NetBSD (for interface-automatic).
- -   [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
- -   Squelch 'cannot assign requested address' log messages unless
verbosity is high, it was spammed after network down.
- -   Fix to simplify empty string checking from Michael McConville.
- -   [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
be chown'ed. Patch from Simon Deziel.
- -   Fix test if -pthreads unused to use better grep for portability.
- -   Fix mingw crosscompile for recent mingw.
- -   Update aclocal, autoconf output with new versions (1.15, 2.4.6).
- -   Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
for Linux glibc 2.20.
- -   Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
source code, so it applies cleanly again. Removed unused variable
warnings.
- -   [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
they are not portable (unbound-control-setup).
- -   remove NULL-checks before free, patch from Michael McConville.
- -   updated ax_pthread.m4 to version 21 with clang support, this removes
a warning from compilation.
- -   OSX portability, detect if sbrk is deprecated.
- -   OSX clang, stop -pthread unused during link stage warnings.
- -   OSX clang new flto check.
- -   iana portlist update.

Best regards, Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=1tjd
-----END PGP SIGNATURE-----