Unbound 1.5.8 release

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

Unbound 1.5.8 is available:
http://www.unbound.net/downloads/unbound-1.5.8.tar.gz
sha1 1391888d2e3395d766545cd3dbdf0f1879c48080
sha256 33567a20f73e288f8daa4ec021fbb30fe1824b346b34f12677ad77899ecd09be
pgp http://www.unbound.net/downloads/unbound-1.5.8.tar.gz.asc
zip http://www.unbound.net/downloads/unbound-1.5.8.zip
win http://www.unbound.net/downloads/unbound_setup_1.5.8.exe .

The release fixes line endings in the unbound-control-setup script, and
a potential gost-hash validation failure and handles the ".onion" domain
to avoid privacy leakage.

Features
- -   ip-transparent option for FreeBSD with IP_BINDANY socket option.
- -   insecure-lan-zones: yesno config option, patch from Dag-Erling
Smørgrav.
- -   RR Type CSYNC support RFC 7477, in debug printout and config input.
- -   RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
- -   [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf,
patch from Daisuke Higashi.
- -   Support RFC7686: handle ".onion" Special-Use Domain. It is blocked
by default, and can be unblocked with "nodefault" localzone config.
- -   ub_ctx_set_stub() function for libunbound to config stub zones.

Bug Fixes
- -   Fix that NSEC3 negative cache is used when there is no salt.
- -   sorted ubsyms.def file with exported libunbound functions.
- -   Print understandable debug log when unusable DS record is seen.
- -   load gost algorithm if digest is seen before key algorithm.
- -   Fix that "make install" fails due to "text file busy" error.
- -   Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error.
- -   wait for sendto to drain socket buffers when they are full.
- -   Neater cmdline_verbose increment patch from Edgar Pettijohn.
- -   Made netbsd sendmsg test nonfatal, in case of false positives.
- -   [bugzilla: 741 ] Fix: log message for dnstap socket connection is
more clear.
- -   [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the
chroot.
- -   Fix cmsg alignment for argument to sendmsg on NetBSD.
- -   Fix that unbound complains about unimplemented IP_PKTINFO for
sendmsg on NetBSD (for interface-automatic).
- -   [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS.
- -   Squelch 'cannot assign requested address' log messages unless
verbosity is high, it was spammed after network down.
- -   Fix to simplify empty string checking from Michael McConville.
- -   [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot
be chown'ed. Patch from Simon Deziel.
- -   Fix test if -pthreads unused to use better grep for portability.
- -   Fix mingw crosscompile for recent mingw.
- -   Update aclocal, autoconf output with new versions (1.15, 2.4.6).
- -   Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined,
for Linux glibc 2.20.
- -   Fixup contrib/aaaa-filter-iterator.patch for moved contents in the
source code, so it applies cleanly again. Removed unused variable
warnings.
- -   [bugzilla: 729 ] Fix: omit use of escape sequences in echo since
they are not portable (unbound-control-setup).
- -   remove NULL-checks before free, patch from Michael McConville.
- -   updated ax_pthread.m4 to version 21 with clang support, this removes
a warning from compilation.
- -   OSX portability, detect if sbrk is deprecated.
- -   OSX clang, stop -pthread unused during link stage warnings.
- -   OSX clang new flto check.
- -   iana portlist update.

Best regards, Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJW1qBuAAoJEJ9vHC1+BF+NN0EP/RB+s62mgyQQMmCDpr0vHguu
kkD61T1SRGHm2C4wSJc7Fbf5Ouo7V2Q2XEJI/LRHHK5HDzKEE5hupe/qJyDw8u5i
oD/rc5LQhG6wCr3GoOtSyqYgueHefkGfjb3rQNr0+Nlk72yK7onYnfLZtsw2pqN5
5uieKuCJX9f93+zxbocdFrLsrSlFyYG4bdEktXI+ec5x9pdY06HHVr+F1qOSBW8s
WLZrQfUyh4nVyrjDg52ckLpdinW+AHyrsFTcd0FJSuB2ERA40eUrLnEzNdyJoe4o
HTsliuW7FzD6AMRL01m8qUV86Zhi1e9o4BgGtxQ6VHKeizpyMyGz+sqLEMYEwXQs
5X3S1cIBBVRYtGpW3p9MxxVUkrjl8zrSd1CpYeA0urXXOfuGn/2bLDUF5b11NDmi
UxTeDyypWx6RAhIpa37a7PP8qoe/FBk0uoD1D7EnnD/vYaOco706pNAHPKE6H8R2
BRHjyNnLGjf4wKFe+3kPi3Wzcu1o78PS9nZaxnjglrfZero0hhNma653E663Flcw
+sHmh594gO62psjky2tBivgBq6WIa0y1HNdjQUf6HO3LGtUW0/HXiCrn8NVTEOyu
3Bx9XC72sei99HhiNGtaWFa3HjTWdN2zZw4pQHjf1SSwFHlKMTAN0JxEIMQLNyPs
DebxRJ1VzvJGqdl2oaa0
=spbX
-----END PGP SIGNATURE-----