Date: Sun, 17 Jan 2016 22:43:19 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 206347] dns/unbound update to 1.5.7 [PATCH] Message-ID: <bug-206347-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D206347 Bug ID: 206347 Summary: dns/unbound update to 1.5.7 [PATCH] Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: sem@FreeBSD.org Reporter: jaap@NLnetLabs.nl CC: erwin@FreeBSD.org Flags: maintainer-feedback?(sem@FreeBSD.org) Keywords: patch Assignee: sem@FreeBSD.org Created attachment 165731 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D165731&action= =3Dedit patch to update Current unbound port is dated (version 1.5.5), current version is 1.5.7. Some Upgrade Notes: This release fixes a validation failure for nodata with wildcards and emptynonterminals. Fixes OpenSSL Library compability. Fixes correct response for malformed EDNS queries. And it has Windows changes to make unbound portable possible. For crypto in libunbound there is libnettle support. Qname minimisation is implemented. Use qname-minimisation: yes to enable it. This version sends the full query name when an error is found for intermediate names. It should therefore not fail for names on nonconformant servers. It combines well with harden-below-nxdomain: yes because those nxdomains are probed by the qname minimisation, and that will both stop privacy sensitive traffic and reduce nonsense traffic to authority servers. So consider enabling both. In this implementation IPv6 reverse lookups add several labels per increment, because otherwise those lookups would be very slow. [ Reference https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08 ] More details at <http://unbound.net>; --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-206347-13>