Lines Matching full:fix
2 - Fix spelling for the cache-min-negative-ttl entry in the
6 - Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco
8 - Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek,
12 - Fix that for windows the module startup is called and sets up
16 - Fix that alloc stats has strdup checks, it stops debuggers from
18 - Fix testbound for alloc stats strdup in util/alloc.c.
25 - Fix that alloc stats for forwards and hints are printed, and when
30 - Fix dnstap test program, cleans up to have clean memory on exit,
35 - Fix that the worker mem report with alloc stats does not attempt
40 - Fix for #1114: Fix that cache fill for forward-host names is
50 - Fix to document parameters of auth_zone_verify_zonemd_with_key.
58 - Fix #1106: ratelimit-below-domain logs the wrong FROM address.
66 - Fix compile when the compiler does not support the noreturn
68 - Fix to have empty definition when not supported for weak attribute.
69 - Fix uninitialized variable warning in create_tcp_accept_sock.
70 - Fix link of dnstap without openssl.
71 - Fix link of unbound-dnstap-socket without openssl.
76 - Fix dnstap wakeup, a running wakeup timer is left to expire and not
83 - For #1103: Fix to drop mesh state reference for the http2 stream
89 - For #1103: fix to also drop mesh state reference when the discard
99 - Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.
100 - For #1103: fix to also drop mesh state reference when a h2 reply is
111 - Fix that validation reason failure that uses string print uses
114 - Fix shadowed error string variable in validator dnskey handling.
120 - Fix for neater printout for error for missing DS response.
121 - Fix neater printout.
122 - Fix #1099: Unbound core dump on SIGSEGV.
123 - Fix for #1099: Fix to check for deleted RRset when the contents
128 - Fix to print details about the failure to lookup a DNSKEY record
133 - Fix for repeated use of a DNAME record: first overallocate and then
138 - Fix #144: Port ipset to BSD pf tables.
140 - Fix to use modstack_init in zonemd unit test.
141 - Fix to remove unneeded linebreak in fptr_wlist.c.
142 - Fix compile warnings in fptr_wlist.c.
145 - Fix to remove unused include from the readzone test program.
146 - Fix unused variable warning in do_cache_remove.
147 - Fix compile warning in worker pthread id printout.
150 - Fix ip-ratelimit-cookie setting, it was not applied.
158 - Fix pkg-config availability check in dnstap/dnstap.m4 and
162 - Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by
167 - Fix #1091: Build fails with OpenSSL >= 3.0 built with
174 - Fix memory leak in setup of dsa sig.
175 - Fix typos for 'the the' in text.
176 - Fix validation for repeated use of a DNAME record.
181 - Fix memory leak when reload_keep_cache is used and num-threads
183 - Fix memory leak on exit for unbound-dnstap-socket; creates false
187 - Fix to squelch connection reset by peer errors from log. And fix
191 - Fix #1079: tags from tagged rpz zones are no longer honored after
193 - Fix for #1079: fix RPZ taglist in iterator callback that no client
200 - Fix to enable that SERVFAIL is cached, for a short period, for more
202 - Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
205 - Fix unused variable warning on compilation with no thread support.
212 - Fix #1064: Unbound 1.20 Cachedb broken?
215 - Fix #1059: Intermittent DNS blocking failure with local-zone and
220 - Merge #1073: fix null pointer dereference issue in function
222 - Fix to print a parse error when config is read with no name for
224 - Fix for parse end of forward-zone, stub-zone and view.
225 - Fix for #1064: Fix that cachedb expired messages are considered
229 - Merge #1069: Fix unbound-control stdin commands for multi-process
231 - Fix unbound-control commands that read stdin in multi-process
240 - Merge #1070: Fix rtt assignement for low values of
244 - Fix #1071: [FR] Clear both in-memory and cachedb module cache with
251 - Fix when the mesh jostle is exceeded that nameserver targets are
256 - Fix to squelch udp connect errors in the log at low verbosity about
260 - Merge #1062: Fix potential overflow bug while parsing port in
262 - Fix for #1062: declaration before statement, avoid print of null,
266 - Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
276 - Fix doxygen comment for errinf_to_str_bogus.
279 - Fix cachedb with serve-expired-client-timeout disabled. The edns
288 - Fix #876: [FR] can unbound-checkconf be silenced when configuration
292 - Fix configure flto check error, by finding grep for it.
296 - Fix to disable fragmentation on systems with IP_DONTFRAG,
298 - Fix doc unit test for out of directory build.
301 - Fix ci workflow for macos for moved install locations.
309 - Fix edns subnet to sort rrset references when storing messages
313 - Fix #1048: Update ax_pkg_swig.m4 and ax_pthread.m4.
314 - Fix configure, autoconf for #1048.
321 - Fix cachedb for serve-expired with serve-expired-client-timeout.
334 - Fix makefile dependencies for fake_event.c.
335 - Fix cachedb for serve-expired with serve-expired-reply-ttl.
336 - Fix to not reply serve expired unless enabled for cachedb.
344 - Fix #595: unbound-anchor cannot deal with full disk; it will now
349 - Fix comment syntax for view function views_find_view.
355 - Fix #1040: fix heap-buffer-overflow issue in function cfg_mark_ports
361 - Fix #1035: Potential Bug while parsing port from the "stub-host"
364 - Fix #369: dnstap showing extra responses; for client responses
369 - Fix #1034: DoT forward-zone via unbound-control.
370 - Fix for crypto related failures to have a better error string.
373 - Fix name of unit test for subnet cache response.
374 - Fix #1032: The size of subnet_msg_cache calculation mistake cause
376 - Fix for #1032, add safeguard to make table space positive.
377 - Fix comment in lruhash space function.
378 - Fix to add unit test for lruhash space that exercises the routines.
379 - Fix that when the server truncates the pidfile, it does not follow
381 - Fix that the server does not chown the pidfile.
390 - Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix that
392 - Fix localdata and rpz localdata to match CNAME only if no direct
396 - Fix that rpz CNAME content is limited to the max number of cnames.
397 - Fix rpz, it follows iterator CNAMEs for nsip and nsdname and sets
399 - Fix rpz that copies the cname override completely to the temp
402 - Fix rpz for qtype CNAME after nameserver trigger.
409 - Fix that addrinfo is not kept around but copied and freed, so that
413 - Fix #1029: rpz trigger clientip and action rpz-passthru not working
415 - Fix rpz that the rpz override is taken in case of clientip triggers.
416 Fix that the clientip passthru action is logged. Fix that the
417 clientip localdata action is logged. Fix rpz override action cname
419 - Fix to unify codepath for local alias for rpz cname action override.
420 - Fix rpz for cname override action after nsdname and nsip triggers.
427 - Fix #1021 Inconsistent Behavior with Changing rpz-cname-override
431 - Fix unbound-control-setup.cmd to use 3072 bits so that certificates
432 are long enough for newer OpenSSL versions. This fix is included
434 - Fix TTL of synthesized CNAME when a DNAME is used from cache. This
435 fix is included in 1.19.3rc2.
437 - Fix validator classification of qtype DNAME for positive and
438 redirection answers, and fix validator signature routine for dealing
441 - Fix qname minimisation for reply with a DNAME for qtype CNAME that
443 - Fix doc test so it ignores but outputs unsupported doxygen options.
444 - Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
445 like unbound-control-setup.sh has. This fix is included in 1.19.3rc2.
453 security fix for CVE-2024-1931, Denial of service when trimming
454 EDE text on positive replies. The code repo includes the fix and
459 - Fix for #1022: Fix ede prohibited in access control refused answers.
462 - Fix edns subnet replies for scope zero answers to not get stored
473 - Fix trim of EDE text from large udp responses from spinning cpu.
482 - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited
484 - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
490 - Fix documentation for access-control in the unbound.conf man page.
493 - Fix #1006: Can't find protobuf-c package since #999.
508 - Fix for #997: Print details for SSL certificate failure.
512 - Fix warning for windres on resource files due to redefinition.
515 - Fix to link with libssp for libcrypto and getaddrinfo check for
520 - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
523 - Merge #988: Fix NLnetLabs#981: dump_cache truncates large records.
528 - Fix unit test for #987 change in udp1xxx retry packet send.
535 - Merge #980: DoH: reject non-h2 early. To fix #979: Improve errors
538 - Fix #983: Sha1 runtime insecure change was incomplete.
548 - Fix root_zonemd unit test, it checks that the root ZONEMD verifies,
552 - Fix #974: doc: default number of outgoing ports without libevent.
556 - Fix to sync the tests script file common.sh.
560 - Fix tests to use new common.sh functions, wait_logfile and
564 - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
565 - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
566 - Fix dnstap that assertion failed on logging other than UDP and TCP
573 - Fix #964: config.h.in~ backup file in release tar balls.
580 - Fix unit test parse of origin syntax.
592 - Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
593 - Fix SSL compile failure for other missing definitions in
595 - Fix compilation without openssl, remove unused function warning.
598 - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with
599 suggestion by dukeartem to also fix the udp_ancil with dnscrypt.
618 - Fix to print detailed errors when an SSL IO routine fails via
627 - Merge #955 from buevsan: fix ipset wrong behavior.
628 - Update testdata/ipset.tdir test for ipset fix.
631 - Fix #954: Inconsistent RPZ handling for A record returned along with
646 - Better fix for infinite loop when reading multiple lines of input on
660 - Fix #850: [FR] Ability to use specific database in Redis, with new
664 - Fix #949: "could not create control compt".
665 - Fix that cachedb does not warn when serve-expired is disabled about
667 - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x.
670 - Fix infinite loop when reading multiple lines of input on a broken
674 - Fix edns subnet so that queries with a source prefix of zero cause
676 - Fix that printout of EDNS options shows the EDNS cookie option by
680 - Fix #946: Forwarder returns servfail on upstream response noerror no
687 - Fix misplaced comment.
690 - Fix #942: 1.18.0 libunbound DNS regression when built without
694 - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
698 - Fix to remove two c99 notations.
701 - Fix authority zone answers for obscured DNAMEs and delegations.
704 - Fix send of udp retries when ENOBUFS is returned. It stops looping
709 - Fix to scrub resource records of type A and AAAA that have an
711 - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
712 - Fix to add EDE text when RRs have been removed due to length.
713 - Fix to set ede match in unit test for rr length removal.
714 - Fix to print EDE text in readable form in output logs.
720 - Fix autoconf 2.69 warnings in configure.
721 - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
724 - Fix for WKS call to getservbyname that creates allocation on exit
729 - Fix for version generation race condition that ignored changes.
732 - Fix compile error on NetBSD in util/netevent.h.
736 30 aug 2023, with the fix from 25 aug, fix compile on NetBSD
744 - Fix windows ci workflow to install bison and flex.
745 - Fix for #925: unbound.service: Main process exited, code=killed,
747 - Fix #923: processQueryResponse() THROWAWAY should be mindful of
749 - Fix unit test for unbound-control to work when threads are disabled,
750 and fix cache dump check.
753 - Fix for iter_dec_attempts that could cause a hang, part of
755 - Fix uninitialized memory passed in padding bytes of cmsg to sendmsg.
756 - Fix stat_values test to work with dig that enables DNS cookies.
769 - Fix regional_alloc_init for potential unaligned source of the copy.
770 - Fix ip_ratelimit test to work with dig that enables DNS cookies.
781 - More braces and formatting for Fix for EDNS EDE size calculation to
783 - Fix to use the now cached EDE, if any, for CD_bit queries.
786 - Fix for EDNS EDE size calculation.
799 - Fix unused variable compile warning for kernel timestamps in
803 - Merge #857 from eaglegai: fix potential memory leaks when errors
805 - For #857: fix mixed declarations and code.
820 - For #909: Fix return values.
825 - For #909: Fix RR class comparison.
853 - Fix #906: warning: ‘Py_SetProgramName’ is deprecated.
854 - Fix dereference of NULL variable warning in mesh_do_callback.
863 - Fix python modules with multiple scripts, by incrementing reference
875 - Fix for issue #887 (Timeouts to forward servers on BSD based
885 - Merge #896: Fix: #895: pythonmodule: add all site-packages
887 - Fix #895: python + sysconfig gives ANOTHER path comparing to
889 - Fix for uncertain unit test for doh buffer size events.
892 - Fix unbound-dnstap-socket printout when no query is present.
893 - Fix unbound-dnstap-socket time fraction conversion for printout.
896 - Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR.
897 - Fix to remove unused variables from RPZ clientip data structure.
900 - Fix #888: [FR] Use kernel timestamps for dnstap.
901 - Fix to print debug log for ancillary data with correct IP address.
904 - Fix warning in windows compile, in set_recvtimestamp.
907 - Fix #885: Error: util/configlexer.c: No such file or directory,
909 - Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h.
910 - Fix doxygen in addr_to_nat64 header definition.
917 - Fix RPZ IP responses with trigger rpz-drop on cache entries, that
921 - Fix issue #860: Bad interaction with 0 TTL records and serve-expired
928 - Fix for #882: small changes, date updated in Copyright for
931 - Fix for #882: document variable to stop doxygen warning.
934 - Fix for #878: Invalid IP address in unbound.conf causes Segmentation
939 to RFC 7958, and Fix #874.
942 - Fix build badge, from failing travis link to github ci action link.
945 - Fix for #870: Add test case for the qname minimisation and CNAME.
948 - Fix #870: NXDOMAIN instead of NOERROR rcode when asked for existing
952 - Fix issue #676: Unencrypted query is sent when
958 - Fix issue #851: reserved identifier violation
964 - Fix #812, fix #846, by using the SSL_OP_IGNORE_UNEXPECTED_EOF option
968 - Fix ssl.h include brackets, instead of quotes.
971 - Fix unbound-dnstap-socket test program to reply the finish frame
975 - Fix for #852: Completion of error handling.
978 - Fix #825: Unexpected behavior with client-subnet-always-forward
991 - Fix to ignore entirely empty responses, and try at another authority.
995 - Fix unit tests for spurious empty messages.
996 - Fix consistency of unit test without roundrobin answers for the
998 - Fix to git ignore the library symbol file that configure can create.
1001 - Fix #841: Unbound won't build with aaaa-filter-iterator.patch.
1007 - Fix acx_nlnetlabs.m4 for -Wstrict-prototypes.
1010 - Fix #833: [FR] Ability to set the Redis password.
1013 - Fix #835: [FR] Ability to use Redis unix sockets.
1031 - Fix test for new default.
1034 - Fix not following cleared RD flags potentially enables amplification
1036 Tsinghua University. The fix stops query loops, by refusing to send
1045 - Fix python module install path detection.
1046 - Fix python version detection in configure.
1049 - Fix #823: Response change to NODATA for some ANY queries since
1051 - Fix wildcard in hyperlocal zone service degradation, reported
1052 by Sergey Kacheev. This fix is included in 1.17.1rc2.
1054 with 1.17.2. 1.17.1 excludes fix #823, it is included forwards.
1060 - Fix windows compile for libunbound subprocess reap comm point closes.
1078 - Fix to wrap Makefile scripts directory in quotes for uninstall.
1081 - Fix #773: When used with systemd-networkd, unbound does not start
1090 - Fix #782: Segmentation fault in stats.c:404.
1093 - Fix for the ignore of tcp events for closed comm points, preserve
1097 - Merge #720 from jonathangray: fix use after free when
1104 - Fix #779: [doc] Missing documention in ub_resolve_event() for
1108 - Complementary fix for distutils.sysconfig deprecation in Python 3.10
1112 - Fix to ignore tcp events for closed comm points.
1113 - Fix to make sure to not read again after a tcp comm point is closed.
1114 - Fix #775: libunbound: subprocess reap causes parent process reap
1123 - Fix that cachedb does not store failures in the external cache.
1140 - Fix PROXYv2 header read for TCP connections when no proxied addresses
1147 - Fix to stop possible loops in the tcp reuse code (write_wait list
1150 - Fix unit test to properly test the reuse_write_wait_pop function.
1153 - Fix to stop responses with TC flag from resulting in partial
1155 query and in depth fix removes the TC flag from the cached item.
1156 - Fix proxy length debug output printout typecasts.
1159 - Fix dnscrypt compile for proxy protocol code changes.
1163 - Fix string comparison in mini_tdir.sh.
1165 - Fix checkconf test for dnscrypt and proxy port.
1172 - Fix static analysis report to remove dead code from the
1174 - Fix to clean up after the acl_interface unit test.
1181 - Fix to remove erroneous TC flag from TCP upstream.
1182 - Fix test tdir skip report printout.
1183 - Fix windows compile, the identifier interface is defined in headers.
1184 - Fix to close errno block in comm_point_tcp_handle_read outside of
1194 - Fix doxygen warning in respip.h.
1206 - Fix to check pthread_t size after pthread has been detected.
1209 - Fix to update config tests to fix checking if nonblocking sockets
1212 - Fix to set out of file descriptor warning to operational verbosity.
1213 - Fix to log a verbose message at operational notice level if a
1218 - Fix to avoid process wide fcntl calls mixed with nonblocking
1223 - Fix to wait for blocked write on UDP sockets, with a timeout if it
1225 - Fix for wait for udp send to stop when packet is successfully sent.
1228 - Fix #741: systemd socket activation fails on IPv6.
1231 - Fix to log accept error ENFILE and EMFILE errno, but slowly, once
1235 - Fix #734 [FR] enable unbound-checkconf to detect more (basic)
1239 - Fix ratelimit inconsistency, for ip-ratelimits the value is the
1243 - Fix edns subnet so that scope 0 answers only match sourcemask 0
1245 - Fix unittest for edns subnet change.
1246 - Merge #730 from luisdallos: Fix startup failure on Windows 8.1 due
1250 - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
1253 - Fix #728: alloc_reg_obtain() core dump. Stop double
1269 - For windows crosscompile, fix setting the IPV6_MTU socket option
1274 - Fix dname count in sldns parse type descriptor for SVCB and HTTPS.
1277 - Fix verbose EDE error printout.
1280 - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
1294 - Fix for correct openssl error when adding windows CA certificates to
1311 - Fix detection of libz on windows compile with static option.
1312 - Fix compile warning for windows compile.
1316 - Fix #704: [FR] Statistics counter for number of outgoing UDP queries
1319 - Fix to not count cached NXDOMAIN for MAX_TARGET_NX.
1325 - Fix for cached 0 TTL records to not trigger prefetching when
1329 - Fix test program dohclient close to use portability routine.
1335 - Fix #663: use after free issue with edns options.
1338 - Fix for loading locally stored zones that have lines with blanks or
1350 - Fix for edns client subnet to respect not looking in its cache when
1357 - Fix #684: [FTBS] configure script error with libmnl on openSUSE 15.3 (and possibly other distributions)
1363 - Fix to silence test for ede error output to the console from the
1365 - Fix ede test to not use default pidfile, and use local interface.
1366 - Fix some lint type warnings.
1369 - Fix typos in config_set_option for the 'num-threads' and
1373 - Fix #678: [FR] modify behaviour of unbound-control rpz_enable zone,
1377 - Fix #417: prefetch and ECS causing cache corruption when used
1386 - Fix #673: DNS over TLS: error: SSL_handshake syscall: No route to
1390 - Fix Python build in non-source directory; based on patch by
1397 - Fix #670: SERVFAIL problems with unbound 1.15.0 running on
1401 - Fix zonemd check to allow unsupported algorithms to load.
1405 - Fix zonemd unsupported algo check.
1406 - Fix zonemd unsupported algo check reason to not copy to next record,
1408 - Fix zonemd unsupported algo check to print unsupported reason before
1410 - Fix zonemd unsupported algo check to set reason to NULL before the
1415 - Fix spelling error in comment in sldns_str2wire_svcparam_key_lookup.
1418 - Fix #651: [FR] Better logging for refused queries.
1421 - Merge PR #648 from eaglegai: fix -q doesn't work when use with
1425 - Fix to describe auth-zone and other configuration at the local-zone
1429 - Fix to ensure uniform handling of spaces and tabs when parsing RRs.
1436 - Fix configure for python to use sysutils, because distutils is
1440 - Fix #637: Integer Overflow in sldns_str2period function.
1441 - Fix for #637: fix integer overflow checks in sldns_str2period.
1449 - Fix compile warnings for printf ll format on mingw compile.
1452 - Fix pythonmod for change in iter_dp_is_useless function prototype.
1455 - Fix #630: Unify the RPZ log messages.
1456 - Merge #623 from rex4539: Fix typos.
1459 - Fix #633: Document unix domain socket support for unbound-control.
1460 - Fix for #633: updated fix with new text.
1461 - Fix edns client subnet to add the option based on the option list,
1462 so that it is not state dependent, after the state fix of #605 for
1464 - Fix for edns client subnet option add fix in removal code, from review.
1467 - Fix to detect that no IPv6 support means that IPv6 addresses are
1470 - Fix check interface existence for support detection in remote lookup.
1473 - Fix that address not available is squelched from the logs for
1479 - Fix for #628: fix rpz-passthru for qname trigger by localzone type.
1482 - Fix #628: A rpz-passthru action is not ending RPZ zone processing.
1485 - Fix #624: Unable to stop Unbound in Windows console (does not
1487 - Fix #618: enabling interface-automatic disables DNS-over-TLS.
1489 - Remove debug info from #618 fix.
1492 - Fix that TCP interface does not use TLS when TLS is also configured.
1495 - Fix #412: cache invalidation issue with CNAME+A.
1498 - Fix for #611: Integer overflow in sldns_wire2str_pkt_scan.
1503 - Merge PR #532 from Shchelk: Fix: buffer overflow bug.
1515 - Fix header comment for doxygen for authextstrtoaddr.
1517 - Fix docker splint test to use more portable uname.
1526 - Fix review comment for use-after-free when failing to send UDP out.
1532 - Fix tls-* and ssl-* documented alternate syntax to also be available
1537 - Fix #599: [FR] RFC 9156 (obsoletes RFC 7816), by noting the new RFC
1544 - Fix #588: Unbound 1.13.2 crashes due to p->pc is NULL in
1549 - Fix #610: Undefine-shift in sldns_str2wire_hip_buf.
1557 - Fix EDNS to upstream where the same option could be attached
1569 - Fix prematurely terminated TCP queries when a reply has the same ID.
1576 - Fix for #596: fix that rpz return message is returned and not just
1579 - Fix unit tests for rpz now that the AA flag returns successfully from
1581 - Fix for #596: add unit test for nsdname trigger and signal unset RA.
1582 - Fix for #596: add unit test for nsip trigger and signal unset RA.
1583 - Fix #598: Fix unbound-checkconf fatal error: module conf
1585 - Fix for #596: Fix rpz-signal-nxdomain-ra to work for clientip
1589 - Fix #596: unset the RA bit when a query is blocked by an unbound
1593 - Fix to add test for rpz-signal-nxdomain-ra.
1594 - Fix #596: only unset RA when NXDOMAIN is signalled.
1595 - Fix that RPZ does not set RD flag on replies, it should be copied
1603 - Fix #591: Unbound-anchor manpage links to non-existent license file.
1608 - Fix Unbound capitalization in the documentation.
1611 - Fix to pick up other class local zone information before unlock.
1619 - Add code similar to fix for ldns for tab between strings, for
1623 - Merge PR #581 from fobser: Fix -Wmissing-prototypes and -Wshadow
1625 - Fix validator debug output about DS support, print correct algorithm.
1628 - Fix compile warning for if_nametoindex on windows 64bit.
1633 fix below included. The main branch continues as 1.14.1.
1634 - Fix doc/unbound.doxygen to remove obsolete tag warning.
1638 - Merge PR #493 from Jaap: Fix generation of libunbound.pc.
1643 - Merge PR #530 from Shchelk: Fix: dereferencing a null pointer.
1644 - Fix #454: listen_dnsport.c:825: error: ‘IPV6_TCLASS’ undeclared.
1645 - Fix #574: Review fixes for size allocation.
1648 - Fix to remove git tracking and ci information from release tarballs.
1652 - Merge PR #570 from rex4539: Fix typos.
1653 - Fix for #570: regen aclocal.m4, fix configure.ac for spelling.
1654 - Fix to make python module opt_list use opt_list_in.
1655 - Fix #574: unbound-checkconf reports fatal error if interface names
1657 - Fix #574: Review fixes for it.
1658 - Fix #576: [FR] UB_* error codes in unbound.h
1659 - Fix #574: Review fix for spelling.
1666 - Fix for #558: fix loop in comm_point->tcp_free when a comm_point is
1668 - Fix for #558: clear the UB_EV_TIMEOUT bit before adding an event.
1671 - Fix that forward-zone name is documented as the full name of the
1673 - Fix analyzer review failure in rpz action override code to not
1675 - Fix to remove unused code from rpz resolve client and action
1680 - Fix #552: Unbound assumes index.html exists on RPZ host.
1683 - Fix chaos replies to have truncation for short message lengths,
1685 - Fix to protect custom regional create against small values.
1688 - Fix to add example.conf note for outbound-msg-retry.
1695 - Fix crosscompile shell syntax.
1696 - Fix crosscompile windows to use libssp when it exists.
1698 - Fix that on windows, use BIO_set_callback_ex instead of deprecated
1700 - Fix crosscompile script for the shared build flags.
1703 - Fix crosscompile on windows to work with openssl 3.0.0 the
1708 - Fix initialisation errors reported by gcc sanitizer.
1709 - Fix lock debug code for gcc sanitizer reports.
1710 - Fix more initialisation errors reported by gcc sanitizer.
1719 - Fix for #41: change outbound retry to int to fix signed comparison
1721 - Fix root_anchor test to check with new icannbundle date.
1724 - Fix #538: Fix subnetcache statistics.
1727 - Fix tcp fastopen failure when disabled, try normal connect instead.
1730 - Fix #533: Negative responses get cached even when setting
1738 - Fix #536: error: RPZ: name of record (drop.spamhaus.org.rpz.local.)
1740 - Fix the stream wait stream_wait_count_lock and http2 buffer locks
1742 - Fix RPZ locks. Do not unlock zones lock if requested and rpz find
1747 - Fix compile warning in libunbound for listen desetup routine.
1748 - Fix asynclook unit test for setup of lockchecks before log.
1751 - Fix #529: Fix: log_assert does nothing if UNBOUND_DEBUG is
1753 - Fix #531: Fix: passed to proc after free.
1756 - Fix that --with-ssl can use "/usr/include/openssl11" to pass the
1758 - Fix #527: not sending quad9 cert to syslog (and may be more).
1759 - Fix sed script in ssldir split handling.
1766 - Fix to support harden-algo-downgrade for ZONEMD dnssec checks.
1770 - Fix for #431: Squelch permission denied errors for udp connect,
1772 - Fix zonemd verification of key that is not in DNS but in the zone
1774 - zonemd, fix order of bogus printout string manipulation.
1781 - And 1.13.2rc1 became the 1.13.2 with the fix for the python module
1785 - Merge #523: fix: free() call more than once with the same pointer.
1790 - For #519: yacc and lex. And fix python bindings, and test program
1792 - For #519: fix comments for doxygen.
1793 - Fix to print error from unbound-anchor for writing to the key
1798 - Fix #520: Unbound 1.13.2rc1 fails to build python module.
1809 - Fix static analysis warnings about localzone locks that are unused.
1810 - Fix missing locks in zonemd unit test.
1811 - Fix readzone compile under debug config.
1812 - Fix out of sourcedir run of zonemd unit tests.
1813 - Fix libnettle zonemd unit test.
1814 - Fix unit test zonemd_reload for use in run_vm.
1825 - Fix sign comparison warning on FreeBSD.
1833 - Fix verbose printout failure in tcp reuse unit test.
1836 - Fix #515: Compilation against openssl 3.0.0 beta2 is failing to
1838 - For #515: Fix compilation with openssl 3.0.0 beta2, lib64 dir and
1843 - Merge #513: Stream reuse, attempt to fix #411, #439, #469. This
1850 - Fix readzone unknown type print for memory resize.
1853 - Fix that ldns_zone_new_frm_fp_l counts the line number for an empty
1862 - Fix for #510: in depth, use ifdefs for windows api event calls.
1863 - Fix spelling in doc/unbound.doxygen comment.
1864 - Fix spelling in localzone.h comment.
1865 - Fix unbound-control local_data and local_datas to print detailed
1867 - review fix to remove duplicate error printout.
1869 - Fix from lint for ignored return value.
1870 - Fix for older parsers for function call in serve expired get cached.
1876 - Fix compiler warnings for #491.
1877 - Fix clang-analysis warnings for testcode/readzone.c.
1880 - Fix Wunused-result compile warnings.
1887 - Fix #506: Python Module Seems to Leak Memory if it Experiences an
1891 - Fix up permissions on rpl data file in tests.
1892 - Fix testbound newline treatment in moment_read and tempfile write.
1893 - Fix configure grep for reuseport default for failure.
1894 - Fix compat ctime_r return value
1895 - Fix configure does not require pkg-config if not needed.
1896 - Fix unit test in the ctime_r calls for autotrust and in testbound.
1897 - Fix auth zone download on windows to unlink before rename.
1903 - Fix #503: DNS over HTTPS response truncated.
1904 - Fix warnings reported by the gcc analyzer.
1907 - Fix #495: Documentation or implementation of "verbosity" option.
1910 - Fix a number of warnings reported by the gcc analyzer.
1916 - Fix configure nonblocking test and onmingw test to use host.
1919 - Fix #500: SPEC file in version 1.13.1 references version 1.4;
1921 - Fix contrib/unbound.spec, fixed url and comment.
1926 - Fix #413 (based on patch by k-ronny): unbound: does not compile
1931 - Fix unused variable warning when compiling with --enable-dnstap.
1934 - Merge #448 from shoeper: Update unbound-control.8.in, fix
1936 - Fix #425: Document auth-zone supports communication with DNS
1940 - Fix test for zonemd-check option.
1952 - Fix #492: module-config respip missing in unbound.conf.5.in man
1954 - For #492: Fix font highlighting for the man page on emacs.
1960 - Fix for #411, #439, #469: Reset the DNS message ID when moving queries
1965 - Fix #489: Compile using MSYS2 MinGW 64-bit.
1968 - Fix that auth-zone zonefiles use last TTL if no TTL is specified.
1974 - Fix #485: Unbound occasionally reports broken stats.
1979 - Fix for #367: only attempt to get the interface for queries that are no
1986 - Fix to squelch tcp socket bind failures when the interface is gone.
1990 - Fix #481: Fix comment in configuration file.
1997 - Fix compiler warning for signed/unsigned comparison for
2001 - Fix #474: always_null and others inside view.
2010 - Fix #468: OpenSSL 1.0.1 can no longer build Unbound.
2011 - Further fix for #468: detect SSL_CTX_set_alpn_protos for build with
2013 - Fix that testcode dohclient has OpenSSL initialisation calls.
2016 - Fix documentation comment for files previously residing in checkconf/.
2020 - Fix that nxdomain synthesis does not happen above the stub or
2024 - Fix (increase) verbosity level for iterator error log in
2028 - Fix permission denied sendto log, squelch the log messages
2035 - Fix for #411: Depth protect for crash on deleted element timeout.
2039 - Fix to stop IPv6 PMTU discovery.
2045 - Fix stack-protector change to not override other CFLAGS options.
2052 - Fix #429: Also fix end of transfer for http download of auth zones.
2055 - Fix deprecation test to work for iOS TVOS and WatchOS, it uses
2057 - Travis, fix script to fail when tasks fail.
2058 - Travis, fix warning in ubsan compile.
2059 - Fix configure Targetconfiditionals.h header check, to use compile.
2060 - Fix that cachedb does not produce empty object files when disabled.
2072 - Fix unused-function warning when compiling with --enable-dnscrypt.
2073 - Fix for #367: fix memory leak when cannot bind to listening port.
2080 - Fix compile error in listen_dnsport on Android.
2081 - Fix memory leak reported by asan in rpz SOA record query name.
2084 - Fix for #447: squelch connection refused tcp connection failures
2088 - Fix #441: Minimal NSEC range not accepted for top level domains.
2091 - Fix parse of LOC RR type for decimetres.
2099 - Fix spurious errors about "Could not generate request: out of
2104 - Fix for #367: rc_ports don't have ub_sock; skip cleaning up.
2107 - Fix: Resolve interface names on control-interface too.
2113 - Fix to allow rpz with wildcard that applies to all TLDs at once.
2116 - Fix #384: (1) A minor request to improve the log (2) A minor bug in one
2124 - Fix function documentation.
2125 - Fix unit test for added ulimit checks.
2126 - spelling fix in header.
2129 - Fix for zonemd, that domain-insecure zones work without dnssec.
2130 - Fix for zonemd, do not reject insecure result from trust anchor
2134 - Fix #431: Squelch permission denied errors for tcp connect
2136 - Fix for zonemd, that nxdomain for the chain of trust is allowed
2146 - Fix doxygen and pydoc warnings.
2147 - Fix #429: rpz: url: with https: broken (regression in 1.13.1).
2151 - Fix #422: IPv6 fallback issues when IPv6 is not properly
2153 - Fix to make tests work with support indicators set for iterator.
2154 - Fix build on Python 3.10.
2161 - Fix for Python 3.9, no longer use deprecated functions of
2172 - Fix dynlibmod link on rhel8 for -ldl inclusion.
2173 - Fix windows dependency on libssp.dll because of default stack
2175 - Fix indentation of root anchor for use by windows install script.
2178 - Attempt to fix NULL keys in the reuse_tcp tree; relates to #411.
2181 - Fix for doxygen 1.8.20 compatibility.
2185 - Fix to use correct type for label count in rpz routine.
2186 - Fix empty clause warning in config_file nsid parse.
2187 - Fix to use correct type for label count in ipdnametoaddr rpz routine.
2188 - Fix empty clause warning in edns pass for padding.
2189 - Fix fwd ancil test post script when not supported.
2201 - Fix compile of unbound-dnstap-socket without dnstap installed.
2208 - Fix TTL of SOA record for negative answers (localzone and
2216 - Fix #404: DNS query with small edns bufsize fail.
2217 - Fix declaration before statement and signed comparison warning in
2225 - Fix for #93: dynlibmodule import library is named libunbound.dll.a.
2230 - Fix for #93: dynlibmodule link fix for Windows.
2233 - Fix #397: [Feature request] add new type always_null to local-zone
2235 - Fix so local zone types always_nodata and always_deny can be used
2242 - For #391: fix indentation.
2245 - Fix clang analysis warning.
2248 - Fix #379: zone loading over HTTP appears to have buffer issues.
2250 - Fix #387: client-subnet-always-forward seems to effectively bypass
2254 - Fix #385: autoconf 2.70 impacts unbound build
2259 - For #376: Fix that comm point event is not double removed or double
2264 - Fix error cases when udp-connect is set and send() returns an error
2268 - Fix #371: unbound-control timeout when Unbound is not running.
2269 - Fix to squelch permission denied and other errors from remote host,
2275 - Fix missing prototypes in the code.
2282 - Fix #360: for the additionally reported TCP Fast Open makes TCP
2285 - Fix #356: deadlock when listening tcp.
2286 - Fix unbound-dnstap-socket to not use log routine from interrupt
2288 - Fix on windows to ignore connection failure on UDP, unless verbose.
2289 - Fix for #283: fix stream reuse and tcp fast open.
2290 - Fix update, with write event check with streamreuse and fastopen.
2293 - Fix #358: Squelch udp connect 'no route to host' errors on low
2297 - Fix assertion failure on double callback when iterator loses
2302 fix from 2 dec 2020. The code repo continues for 1.13.1 in
2306 - Fix compile warning for type cast in http2_submit_dns_response.
2307 - Fix when use free buffer to initialize rbtree for stream reuse.
2308 - Fix compile warnings for windows.
2309 - Fix compile warnings in rpz initialization.
2310 - Fix contrib/metrics.awk for FreeBSD awk compatibility.
2314 - Fix to omit UDP receive errors from log, if verbosity low.
2317 - Fix that after failed read, the readagain cannot activate.
2322 - Fix udp-connect on FreeBSD, do send calls on connected UDP socket.
2323 - Better fix for reuse tree comparison for is-tls sockets. Where
2326 - Fix memory leak for edns client tag opcode config element.
2327 - Attempt fix for libevent state in tcp reuse cases after a packet
2329 - Fix readagain and writeagain callback functions for comm point
2339 - Fix one port unit test for udp-connect.
2341 - Fix crash when TLS connection is closed prematurely, when
2343 - Fix padding of struct regional for 32bit systems.
2352 - Fix #350: with the AF_NETLINK permission, to fix 1.12.0 error:
2355 - Fix #347: IP_DONTFRAG broken on Apple xcode 12.2.
2357 - Fix for #303 CVE-2020-28935 : Fix that symlink does not interfere
2359 - Further fix for it and retvalue 0 fix for it.
2362 - Fix to connect() to UDP destinations, default turned on,
2367 - Fix #341: fixing a possible memory leak.
2368 - Fix memory leak after fix for possible memory leak failure.
2369 - Fix #343: Fail to build --with-libnghttp2 with error: 'SSIZE_MAX'
2377 - Fix #333: Unbound Segmentation Fault w/ log_info Functions From
2379 - Fix that minimal-responses does not remove addresses from a priming
2383 - Fix #327: net/if.h check fails on some darwin versions; contribution by
2385 - Fix #320: potential memory corruption due to size miscomputation upton
2401 - Fix for PR #324 to attach the x509v3 extensions to the client
2408 - Fix that http settings have colon in set_option, for
2411 - Fix memory leak of https port string when reading config.
2412 - Fix #330: [Feature request] Add unencrypted DNS over HTTPS support.
2415 - Fix python documentation warning on functions.rst inplace_cb_reply.
2416 - Fix dnstap test to wait for log timer to see if queries are logged.
2418 - Fix to set the tcp handler event toggle flag back to default when
2420 - Clean the fix for out of order TCP processing limits on number
2424 - Fix that the out of order TCP processing does not limit the
2428 - Fix that if there are reply callbacks for the given rcode, those
2438 statement and fix cast warning.
2441 - Fix for python reply callback to see mesh state reply_list member,
2444 - Fix that if there are on reply callbacks, those are called per
2449 - Fix #323: unbound testsuite fails on mock build in systemd-nspawn
2453 - Fix dnstap socket and the chroot not applied properly to the dnstap
2455 - Fix warning in libnss compile, nss_buf2dsa is not used without DSA.
2460 - Fix #319: potential memory leak on config failure, in rpz config.
2466 - Fix doh tests when not compiled in.
2468 - Fix stream_ssl, ssl_req_order and ssl_req_timeout tests for
2471 - Fix memory leak of edns tags at libunbound context delete.
2472 - Fix double loopexit for unbound-dnstap-socket after sigterm.
2478 - Fix unit test for dnstap changes, so that it waits for the timer.
2481 - Fix #305: dnstap logging significantly affects unbound performance
2483 - Fix #305: only wake up thread when threshold reached.
2484 - Fix to ifdef fptr wlist item for dnstap.
2487 - Fix edns-client-tags get_option typo
2492 - Fix #304: dnstap logging not recovering after dnstap process restarts
2500 - Fix that prefer-ip4 and prefer-ip6 can be get and set with
2509 - Spelling fix.
2515 - Fix num.expired statistics output.
2521 - Fix #296: systemd nss-lookup.target is reached before unbound can
2528 - Review fix, doxygen and assign null in case of error free.
2534 - Fix that dnstap reconnects do not spam the log with the repeated
2537 - Fix to apply chroot to dnstap-socket-path, if chroot is enabled.
2542 - Fix stats double count issue (#289).
2552 - Fix #287: doc typo: "Additionaly".
2556 - Merge PR #284 and Fix #246: Remove DLV entirely from Unbound.
2574 - Fix mini_event.h on OpenBSD cannot find fd_set.
2577 - Fix doxygen comment for no ssl for tls session ticket key callback
2585 - Merge PR #269, Fix python module len() implementations, by Torbjörn
2593 - Fix streamtcp to print packet data to stdout. This makes the
2595 - Fix contrib/fastrpz.patch to apply cleanly. It fixes for changes
2601 - Fix libnettle compile for session ticket key callback function
2603 - Fix lock dependency cycle in rpz zone config setup.
2608 - Fix PR #234 log_assert sizeof to use union buffer.
2611 - Fix check conf test for referencing installation paths.
2612 - Fix unused variable warning for clang analyzer.
2621 - Fix add missing DSA header, for compilation without deprecated
2623 - Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
2628 - Fix #259: Fix unbound-checkconf does not check view existence.
2631 - Fix offset of error printout for access-control-tag-datas.
2642 - Fix for mesh accounting if the reply list already empty to begin
2644 - Fix for mesh accounting when rpz decides to drop a reply with a
2646 - Review fix for number of detached states due to use of variable
2648 - Fix tcp req info drop due to size call into mesh accounting
2656 - Fix default explanation in man page for qname-minimisation-strict.
2657 - Fix display of event loop method with libev.
2672 - Fix for integer overflow when printing RDF_TYPE_TIME.
2689 modules. Fix memory leak by not closing dlopened content. Fix
2695 - For PR #93: man page spelling reference fix.
2696 - For PR #93: fix link of other executables for dynlibmod dependency.
2701 - For PR #93: Fix warnings for dynlibmodule.
2717 - Fix tests for new rrset-roundrobin default.
2720 - Fix #222: --enable-rpath, fails to rpath python lib.
2721 - Fix for count of reply states in the mesh.
2732 - Fix help return code in unbound-control-setup script.
2733 - Fix for posix shell syntax for trap in nsd-control-setup.
2734 - Fix for posix shell syntax for trap in run_msg.sh test script.
2737 - Fix #220: auth-zone section in config may lead to segfault.
2756 - Merge PR #208: Fix uncached CLIENT_RESPONSE'es on stateful
2768 - Fix RPZ concurrency issue when using auth_zone_reload.
2771 - Merge PR #201 from noloader: Fix OpenSSL cross-compaile warnings.
2772 - Fix on #201.
2778 - Travis fix for ios by omitting tools from install.
2781 - Fix compile on Solaris for unbound-checkconf.
2793 - Fix #158: open tls-session-ticket-keys as binary, for Windows. By
2800 - Fix .travis.yml error, missing 'env' option.
2803 - Fix #192: In the unbound-checkconf tool, the module config of
2808 - Fix compile of test tools without protobuf.
2815 - Fix #189: mini_event.h:142:17: error: field 'ev_timeout' has incomplete
2817 - Changelog entry for (Fix #189, Merge PR #190).
2820 - Fix #188: unbound-control.c:882:6: error: 'execlp' is
2824 - Merge PR #186, fix #183: Fix unrecognized 'echo -n' option on OS X, by
2828 - Fix PR #182 from noloader: Add iOS testing to Travis.
2834 - Merge PR #181 from noloader: Fix OpenSSL -pie warning on Android.
2843 - Fix #175, Merge PR #176: fix link error when OpenSSL is configured
2847 - Fix compiler warning in dns64/dns64.c
2852 - Fix #177: dnstap does not build on macOS.
2889 - Fix #169: Fix warning for daemon/remote.c output may be truncated
2891 - Fix #170: Fix gcc undefined sanitizer signed integer overflow
2893 - Fix more undefined sanitizer issues, in respip copy_rrset null
2900 - Fix #165: Add prefer-ip4: yesno config option to prefer ipv4 for
2905 - Merge PR #166: Fix typo in unbound.service.in, by glitsj16.
2931 - Fix spelling in unbound.conf.5.in.
2939 - Fix with libnettle make test with dsa disabled.
2940 - Fix contrib/fastrpz.patch to apply cleanly. Fix for serve-stale
2942 - Fix to clean memory leak of respip_addr.lock when ip_tree deleted.
2943 - Fix compile warning when threads disabled.
2948 - Fix use after free on log-identity after a reload; Fixes #163.
2951 - Fix num_reply_states and num_detached_states counting with
2958 - Fix num_reply_addr counting in mesh and tcp drop due to size
2960 - Fix to create and destroy rpz_lock in auth_zones structure.
2961 - Fix to lock zone before adding rpz qname trigger.
2962 - Fix to lock and release once in mesh_serve_expired_lookup.
2963 - Fix to put braces around empty if body when threading is disabled.
2979 - Fix fclose on error in TLS session ticket code.
2982 - Fix memory leak in error condition remote.c
2983 - Fix double free in error condition view.c
2984 - Fix memory leak in do_auth_zone_transfer on success
2991 - Fix subnet tests for disabled DSA algorithm by default.
3005 - Fix #157: undefined reference to `htobe64'.
3012 - Fix to silence the tls handshake errors for broken pipe and reset
3023 - Fix #153: Disable validation for DSA algorithms. RFC 8624
3037 - Fix crash after reload where a stats lookup could reference old key
3039 - Fix for memory leak when edns subnet config options are read when
3041 - Fix auth zone support for NSEC3 records without salt.
3044 - Fix the relationship between serve-expired and prefetch options,
3046 - Fix unreachable code in ssl set options code.
3049 - Fix #138: stop binding pidfile inside chroot dir in systemd service
3053 - Fix 'make test' to work for --disable-sha1 configure option.
3054 - Fix out-of-bounds null-byte write in sldns_bget_token_par while
3056 - Updated sldns_bget_token_par fix for also space for the zero
3070 - Fix #140: Document slave not downloading new zonefile upon update.
3077 - Fix typo to let serve-expired-ttl work with ub_ctx_set_option(), by
3081 - Fix to make auth zone IXFR to fallback to AXFR if a single
3085 - Fix ipsecmod compile.
3086 - Fix Makefile.in for ipset module compile, from Adi Prasaja.
3097 - Fix lock type for memory purify log lock deletion.
3098 - Fix testbound for alloccheck runs, memory purify and lock checks.
3100 - Fix Make Test Fails when Configured With --enable-alloc-nonregional,
3106 - Fix text around serial arithmatic used for RRSIG times to refer
3108 - Fix Assert Causing DoS in synth_cname(),
3110 - Fix similar code in auth_zone synth cname to add the extra checks.
3111 - Fix Assert Causing DoS in dname_pkt_copy(),
3113 - Fix OOB Read in sldns_wire2str_dname_scan(),
3115 - Fix Out of Bounds Write in sldns_str2wire_str_buf(),
3117 - Fix Out of Bounds Write in sldns_b64_pton(),
3120 - Fix Insufficient Handling of Compressed Names in dname_pkt_copy(),
3122 - Fix Out of Bound Write Compressed Names in rdata_copy(),
3124 - Fix Hang in sldns_wire2str_pkt_scan(),
3127 - Fix snprintf() supports the n-specifier,
3129 - Fix Bad Indentation, in dnscrypt.c,
3131 - Fix Client NONCE Generation used for Server NONCE,
3133 - Fix compile error in dnscrypt.
3134 - Fix _vfixed not Used, removed from sbuffer code,
3136 - Fix Hardcoded Constant, reported by X41 D-Sec.
3144 - Fix compiler warnings.
3147 - Fix dname loop maximum, reported by Eric Sesterhenn from X41 D-Sec.
3152 - Fix Out of Bounds Read in rrinternal_get_owner(),
3154 - Fix Race Condition in autr_tp_create(),
3156 - Fix Shared Memory World Writeable,
3159 - Fix Weak Entropy Used For Nettle,
3161 - Fix Randomness Error not Handled Properly,
3163 - Fix Out-of-Bounds Read in dname_valid(),
3165 - Fix Config Injection in create_unbound_ad_servers.sh,
3167 - Fix Local Memory Leak in cachedb_init(),
3169 - Fix Integer Underflow in Regional Allocator,
3183 - Fix compile with --enable-alloc-checks, reported by X41 D-Sec.
3184 - Fix Terminating Quotes not Written, reported by X41 D-Sec.
3185 - Fix Useless memset() in validator, reported by X41 D-Sec.
3186 - Fix Unrequired Checks, reported by X41 D-Sec.
3187 - Fix Enum Name not Used, reported by X41 D-Sec.
3188 - Fix NULL Pointer Dereference via Control Port,
3190 - Fix Bad Randomness in Seed, reported by X41 D-Sec.
3191 - Fix python examples/calc.py for eval, reported by X41 D-Sec.
3192 - Fix comments for doxygen in dns64.
3195 - Fix CVE-2019-18934, shell execution in ipsecmod.
3197 - Fix authzone printout buffer length check.
3199 - Fix Integer Overflow in Regional Allocator,
3201 - Fix Unchecked NULL Pointer in dns64_inform_super()
3203 - Fix Out-of-bounds Read in rr_comment_dnskey(),
3205 - Fix Integer Overflows in Size Calculations,
3207 - Fix Integer Overflow to Buffer Overflow in
3209 - Fix Out of Bounds Read in sldns_str2wire_dname(),
3211 - Fix Out of Bounds Write in sldns_bget_token_par(),
3229 - Fix #109: check number of arguments for stdin-pipes in
3234 - Fix #99: Memory leak in ub_ctx (event_base will never be freed).
3256 - Merge #90 from vcunat: fix build with nettle-3.5.
3257 - Merge 1.9.4 release with fix for vulnerability CVE-2019-16866.
3263 - Merge #87 from hardfalcon: Fix contrib/unbound.service.in,
3272 service file to fix that systemctl reload fails.
3283 - Fix #78: Memory leak in outside_network.c.
3287 - Fix fix for #78 to also free service callback struct.
3288 - Fix for oss-fuzz build warning.
3289 - Fix wrong response ttl for prepended short CNAME ttls, this would
3298 - Fix #72: configure --with-syslog-facility=LOCAL0-7 with default
3303 - Fix #71: fix openssl error squelch commit compilation error.
3317 - Fix contrib/fastrpz.patch asprintf return value checks.
3320 - Fix that pkg-config is setup before --enable-systemd needs it.
3325 - Fix log_dns_msg to log irrespective of minimal responses config.
3331 - Fix unittest valgrind false positive uninitialised value report,
3344 - Fix autotrust temp file uniqueness windows compile.
3347 - Fix character buffer size in ub_ctx_hosts.
3352 - Fix #59, when compiled with systemd support check that we can properly
3357 - Fix warning for unused variable for compilation without systemd.
3367 - Fix #52 #53, fix for example fail program.
3368 - Fix to return after failed auth zone http chunk write.
3369 - Fix to remove unused test for task_probe existance.
3370 - Fix to timeval_add for remaining second in microseconds.
3379 - Fix question section mismatch in local zone redirect.
3382 - Fix #49: Set no renegotiation on the SSL context to stop client
3386 - Fix #48: Unbound returns additional records on NODATA response,
3391 - Fix in respip addrtree selection. Absence of addr_tree_init_parents()
3396 - Fix for possible assertion failure when answering respip CNAME from
3406 - Fix memleak in unit test, reported from the clang 8.0 static analyzer.
3412 - Fix to omit RRSIGs from addition to the ipset.
3413 - Fix to make unbound-control with ipset, remove unused variable,
3422 - Fix python dict reference and double free in config.
3426 - Fix #39: In libunbound, leftover logfile is close()d unpredictably.
3427 - Fix for #24: Fix abort due to scan of auth zone masters using old
3431 - Fix another spoolbuf storage code point, in prefetch.
3436 - Fix that fixes the Fix that spoolbuf is not used to store tcp
3448 - Fix to guard _OPENBSD_SOURCE from redefinition.
3451 - Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.
3455 - Fix double file close in tcp pipelined response code.
3458 - Fix that spoolbuf is not used to store tcp pipelined response
3466 - Fix #31: swig 4.0 and python module.
3472 - Attempt to fix malformed tcp response.
3475 - Revert fix for oss-fuzz, error is in that build script that
3480 - Attempt to fix build failure in oss-fuzz because of reallocarray.
3485 - Fix edns-subnet locks, in error cases the lock was not unlocked.
3486 - Fix doxygen output error on readme markdown vignettes.
3489 - Fix #29: Solaris 11.3 and missing symbols be64toh, htobe64.
3490 - Fix #30: AddressSanitizer finding in lookup3.c. This sets the
3498 - Fix .gitignore, add pythonmod and dnstap generated files.
3509 - Fix wrong query name in local zone redirect answers with a CNAME,
3526 - Fix tls write event for read state change to re-call SSL_write and
3534 - Fix that auth zone uses correct network type for sockets for
3537 - Fix that auth zone fails over to next master for timeout in tcp.
3542 - Fix to use event_assign with libevent for thread-safety.
3545 - Fix #17: Add python module example from Jan Janak, that is a
3550 - Fix to wipe ssl ticket keys from memory with explicit_bzero,
3554 - Fix to reinit event structure for accepted TCP (and TLS) sockets.
3557 - Fix spelling error in log output for event method.
3562 - Fix auth-zone NSEC3 response for wildcard nodata answers,
3566 - Fix auth-zone NSEC3 response for empty nonterminals with exact
3568 - Fix for out of bounds integers, thanks to OSTIF audit. It is in
3570 - Fix for auth zone nsec3 ent fix for wildcard nodata.
3573 - Fix that tls-session-ticket-keys: "" on its own in unbound.conf
3575 - Fix crash if tls-servic-pem not filled in when necessary.
3578 - Fix #4240: Fix whitespace cleanup in example.conf.
3586 - Fix #4239: set NOTIMPL when deny-any is enabled, for RFC8482.
3589 - Fix for #4233: guard use of NDEBUG, so that it can be passed in
3605 - Fix #4229: Unbound man pages lack information, about access-control
3607 - Fix #14: contrib/unbound.init: Fix wrong comparison judgment
3609 - Fix for python module on Windows, fix fopen.
3612 - Fix #4227: pair event del and add for libevent for tcp_req_info.
3615 - Fix the error for unknown module in module-config is understandable,
3622 - Fix pythonmod include and sockaddr_un ifdefs for compile on
3631 - Fix capsforid canonical sort qsort callback.
3635 - Fix recursion lame test for qname minimisation asked queries,
3637 - Fix #13: Remove left-over requirements on OpenSSL >= 1.1.0 for
3642 - Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2.
3643 - Fix that qname minimisation does not skip a label when missing
3645 - Fix #4225: clients seem to erroneously receive no answer with
3649 - Fix that log-replies prints the correct name for local-alias
3667 - #8: Fix OpenSSL without ENGINE support compilation.
3671 - Fix case in which query timeout can result in marking delegation
3675 - Fix spelling of tls-ciphers in example.conf.in.
3676 - Fix #4224: auth_xfr_notify.rpl test broken due to typo
3677 - Fix locking for libunbound context setup with broken port config.
3687 spelling for tls-ciphers fix as 1.9.0 on Feb 5. Trunk has 1.9.1 in
3691 - Fix that tcp for auth zone and outgoing does not remove and
3701 - Fix unit test for python 3.7 new keyword 'async'.
3736 - Fix configure to detect SSL_CTX_set_ciphersuites, for better
3743 - Fix for IXFR fallback to reset counter when IXFR does not timeout.
3746 - Fix space calculation for tcp req buffer size.
3750 - Fix for #4219: secondaries not updated after serial change, unbound
3752 - Fix that auth zone after IXFR fallback tries the same master.
3755 - Fix tcp idle timeout test, for difference in the tcp reply code.
3758 - Fix that multiple dns fragments can be carried in one TLS frame.
3780 - Fix for out of order processing administration quit cleanup.
3790 - Fix syntax in comment of local alias processing.
3791 - Fix NSEC3 record that is returned in wildcard replies from
3803 - Fix for crash in dns64 module if response is null.
3806 - Fix config parser memory leaks.
3809 - Fix for FreeBSD port make with dnscrypt and dnstap enabled.
3810 - Fix #4206: support openssl 1.0.2 for TLS hostname verification,
3815 - Fix dns64 allocation in wrong region for returned internal queries.
3818 - Fix icon, no ragged edges and nicer resolutions available, for eg.
3829 - Fix chroot auth-zone fix to remove chroot prefix.
3832 Which became 1.8.3 on 11 december with only the dns64 fix of 6 dec.
3834 - Fix that unbound-checkconf does not complains if the config file
3840 - Fix leak in chroot fix for auth-zone.
3841 - Fix clang analysis for outside directory build test.
3844 - Fix DNS64 to not store intermediate results in cache, this avoids
3847 - Fix #4208: 'stub-no-cache' and 'forward-no-cache' not work.
3848 - New and better fix for Fix #4193: Fix that prefetch failure does
3854 - Fix windows compile for new rrset roundrobin fix.
3858 - Fix to not set GLOB_NOSORT so the unbound.conf include: files are
3860 - Fix #4193: Fix that prefetch failure does not overwrite valid cache
3863 - Fix that unbound-control can send file for view_local_datas.
3872 - Fix #4209: Crash in libunbound when called from getdns.
3875 - Fix that empty zonefile means the zonefile is not set and not used.
3900 - Fix #4191: NXDOMAIN vs SERVFAIL during dns64 PTR query.
3901 - Fix #4190: Please create a "ANY" deny option, adds the option
3904 - Fix #4141: More randomness to rrset-roundrobin.
3905 - Fix #4132: Openness/closeness of RANGE intervals in rpl files.
3906 - Fix #4126: RTT_band too low on VSAT links with 600+ms latency,
3910 - Fix #4152: Logs shows wrong time when using log-time-ascii: yes.
3915 - Make lint like previous #4154 fix.
3918 - Fix #4192: unbound-control-setup generates keys not readable by
3922 - Fix #4154: make ECS_MAX_TREESIZE configurable, with
3947 - Fix testlock code to set noreturn on error routine.
3954 fastrpz.patch fix included. Trunk has 1.8.2 in development.
3957 - Fix #4188: IPv6 forwarders without ipv6 result in SERVFAIL, fixes
3966 - Fix #4149: Add SSL cleanup for tcp timeout.
3969 - Fix compile on Mac for unbound, provide explicit_bzero when libc
3971 - Fix unbound for openssl in FIPS mode, it uses the digests with
3973 - Fix that with harden-below-nxdomain and qname minisation enabled
3979 - Fix #4156: Fix systemd service manager state change notification.
3982 - Fix seed for random backup code to use explicit zero when wiped.
4001 - Fix memory leak when message parse fails partway through copy.
4009 - Fix to squelch respip warning in unit test, it is printed at
4011 - Fix spelling errors.
4012 - Fix initialisation in remote.c
4019 - Fix spelling error in header, from getdns commit by Andreas Gelmini.
4032 - Fix that a local-zone with a local-zone-type that is transparent
4052 - Fix lintflags for lint on FreeBSD.
4065 - Fix only misc failure from log-servfail when val-log-level is not
4069 - Fix classification for QTYPE=CNAME queries when QNAME minimisation is
4082 - Fix warning on compile without threads.
4083 - Fix contrib/fastrpz.patch.
4086 - Fix segfault in auth-zone read and reorder of RRSIGs.
4089 - Fix that printout of error for cycle targets is a verbosity 4
4095 - Fix #4144: dns64 module caches wrong (negative) information.
4109 - Fix #4142: unbound.service.in: improvements and fixes.
4123 - Fix for #4136: Fix to unconditionally call destroy in daemon.c.
4135 - New fix for #4136: This one ignores lex without without
4139 - Fix to remove systemd sockaddr function check, that is not
4156 - Fix 'make depend' to work when build dir is not project root.
4161 - Fix mesh.c incompatible pointer pass.
4163 - Fix #4139: Fix unbound-host leaks memory on ANY.
4166 - Fix #4136: insufficiency from mismatch of FLEX capability between
4170 - Fix man page, say that chroot is enabled by default.
4173 - Fix #4135: 64-bit Windows Installer Creates Entries Under The
4177 - Fix use-systemd readiness signalling, only when use-systemd is yes
4181 - Fix #4130: print text describing -dd and unbound-checkconf on
4184 - Fix #4131: for solaris, error YY_CURRENT_BUFFER undeclared.
4187 - Fix #4129 unbound-control error message with wrong cert permissions
4191 - Fix #4127 unbound -h does not list -p help.
4194 - Fix that ratelimit and ip-ratelimit are applied after reload of
4199 - Fix qname minimisation NXDOMAIN validation lookup failures causing
4205 - Fix to improve systemd socket activation code file descriptor
4207 - Fix for 4126 that the #define for UNKNOWN_SERVER_NICENESS can be more
4215 - Fix documentation ambiguity for tls-win-cert in tls-upstream and
4220 - Fix round robin for failed addresses with prefer-ip6: yes
4223 - Fix #4112: Fix that unbound-anchor -f /etc/resolv.conf will not pass
4230 - Fix permission denied printed for auth zone probe random port nrs.
4233 - Fix checking for libhiredis printout in configure output.
4234 - Fix typo on man page in ip-address description.
4248 - #4109: Fix that package config depends on python unconditionally.
4252 - Partial fix for permission denied on IPv6 address on FreeBSD.
4253 - Fix that auth-zone master reply with current SOA serial does not
4255 - Fix that auth-zone does not start the wait timer without checking
4259 - #4108: systemd reload hang fix.
4260 - Fix usage printout for unbound-host, hostname has to be last
4264 - Fix for unbound-control on Windows and set TCP socket parameters
4266 This fix is part of 1.7.3.
4269 - Fix windows unbound-control no cert bad file descriptor error.
4270 This fix is part of 1.7.3.
4273 - Fix that control-use-cert: no works for 127.0.0.1 to disable certs.
4274 This fix is part of 1.7.3rc2.
4275 - Fix unbound-checkconf for control-use-cert.
4276 This fix is part of 1.7.3.
4287 - #4103: Fix that auth-zone does not insist on SOA record first in
4289 - Fix that first control-interface determines if TLS is used. Warn
4291 - Fix nettle compile.
4304 - Fix buffer size warning in unit test.
4308 - Patch to fix openwrt for mac os build darwin detection in configure.
4311 - Fix crash if ratelimit taken into use with unbound-control
4315 - Fix deadlock caused by incoming notify for auth-zone.
4318 - #4100: Fix stub reprime when it becomes useless.
4331 - Fix that fallback for windows port.
4334 - Fix windows tcp and tls spin on events.
4343 - Fix that tcp sticky events are removed for closed fd on windows.
4344 - Fix close events for tcp only.
4347 - Fix that libunbound can do DNS-over-TLS, when configured.
4348 - Fix that windows unbound service can use DNS-over-TLS.
4360 - Fix low-rtt-pct to low-rtt-permil, as it is parts in one thousand.
4363 - Fix contrib/libunbound.pc for libssl libcrypto references,
4367 - Fix windows to not have sticky TLS events for TCP.
4368 - Fix read of DNS over TLS length and data in one read call.
4369 - Fix mesh state assertion failure due to callback removal.
4372 - Fix that configure --with-libhiredis also turns on cachedb.
4373 - Fix gcc 8 buffer warning in testcode.
4374 - Fix function type cast warning in libunbound context callback type.
4377 - Fix fail to reject dead peers in forward-zone, with ssl-upstream.
4380 - Fix that unbound-control reload frees the rrset keys and returns
4384 - Fix spelling error in man page and note defaults as no instead of
4388 - Fix for crash in daemon_cleanup with dnstap during reload,
4395 - Fix memory leak when caching wildcard records for aggressive NSEC use
4398 - Fix contrib/fastrpz.patch for this release.
4399 - Fix auth https for libev.
4406 - Fix #4092: libunbound: use-caps-for-id lacks colon in
4410 - Fix sldns parse failure for CDS alternate delete syntax empty hex.
4411 - Attempt for auth zone fix; add of callback in mesh gets from
4413 - Fix cname classification with qname minimisation enabled.
4419 - Fix #4091: Fix that reload of auth-zone does not merge the zonefile
4428 - Fix #658: unbound using TLS in a forwarding configuration does not
4433 - Fix auth-zone retry timer to be on schedule with retry timeout,
4442 - Fix auth zone target lookup iterator.
4447 - Fix for max include depth for authzones.
4448 - Fix memory free on fail for $INCLUDE in authzone.
4449 - Fix that an internal error to look up the wrong rr type for
4462 - Fix that flush_zone sets prefetch ttl expired, so that with
4465 - Fix downstream auth zone, only fallback when auth zone fails to
4475 - Fix above stub queries for type NS and useless delegation point.
4476 - Fix unbound-control over pipe with openssl 1.1.1, the TLSv1.3
4482 - Fix #4043: make test fails due to v6 presentation issue in macOS.
4483 - Fix unable to resolve after new WLAN connection, due to auth-zone
4491 - Fix unbound-control get_option aggressive-nsec
4511 - Fix #3817: core dump happens in libunbound delete, when queued
4517 - Fix typo in documentation.
4518 - Fix #3736: Fix 0 TTL domains stuck on SERVFAIL unless manually
4525 - Fix #3727: Protocol name is TLS, options have been renamed but
4530 - Fix #3598: Fix swig build issue on rhel6 based system.
4545 - Reverted fix for #3512, this may not be the best way forward;
4549 - Fix for windows compile.
4553 - Fix to check define of DSA for when openssl is without deprecated.
4555 - Fix #3582: Squelch address already in use log when reuseaddr option
4560 - Fix compile without threads, and remove unused variable.
4561 - Fix compile with staticexe and python module.
4562 - Fix nettle compile.
4569 - Fix #3512: unbound incorrectly reports SERVFAIL for CAA query
4571 - Fix validation for CNAME loops. When it detects a cname loop,
4577 - Fix #3505: Documentation for default local zones references
4579 - Fix #3494: local-zone noview can be used to break out of the view
4581 - Fix for more maintainable code in localzone.
4611 - Fix #3451: dnstap not building when you have a separate build dir.
4618 - Fix unfreed locks in log and arc4random at exit of unbound.
4620 - Fix lock race condition in dns cache dname synthesis.
4625 - fix unaligned structure making a false positive in checklock
4636 - Fix that unbound-checkconf -f flag works with auto-trust-anchor-file
4646 - Fix #3397: Fix that cachedb could return a partial CNAME chain.
4647 - Fix #3397: Fix that when the cache contains an unsigned DNAME in
4652 - tag 1.6.8 for release with CVE fix.
4653 - trunk has 1.6.9 with fix and previous commits.
4664 - Fix queries being leaked above stub when refetching glue.
4667 - Fix that DS queries with referral replies are answered straight
4672 Fix that expiration date checks don't fail with clang -O2.
4675 - Fix timestamp failure because of clang optimizer failure, by
4682 - Fix qname-minimisation documentation (A QTYPE, not NS)
4692 - Fix link failure on OmniOS.
4698 - Fix #3299 - forward CNAME daisy chain is not working
4701 - Fix #2882: Unbound behaviour changes (wrong) when domain-insecure is
4706 - Fix #2801: Install libunbound.pc.
4707 - Fix qname minimisation to send AAAA queries at zonecut like type A.
4711 - Fix #2492: Documentation libunbound.
4714 - Fix #2362: TLS1.3/openssl-1.1.1 not working.
4715 - Fix #2034 - Autoconf and -flto.
4716 - Fix #2141 - for libsodium detect lack of entropy in chroot, print
4720 - Fix #1913: ub_ctx_config is under circumstances thread-safe.
4731 - Fix #1949: [dnscrypt] make provider name mismatch more obvious.
4732 - Fix #2031: Double included headers
4744 - Fix #1749: With harden-referral-path: performance drops, due to
4768 - Fix spelling in unbound-control man page.
4771 - Fix trust-anchor-signaling works in libunbound.
4772 - Fix some more crpls in testdata for different signaling default.
4780 - Fix param unused warning for windows exportsymbol compile.
4783 - Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
4796 - Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
4799 - Fix #1400: allowing use of global cache on ECS-forwarding unless
4804 - Fix that looping modules always stop the query, and don't pass
4806 - Fix #1435: Please allow UDP to be disabled separately upstream and
4808 - Fix #1440: [dnscrypt] client nonce cache.
4811 - Fix unbound-host to report error for DNSSEC state of failed lookups.
4821 - Fix #1412: QNAME minimisation strict mode not honored
4822 - Fix #1434: Fix windows openssl 1.1.0 linking.
4826 - makedist fix for windows binaries, with openssl 1.1.0 windres fix,
4827 and expat 2.2.4 install target fix.
4833 - Fix #1424: cachedb:testframe is not thread safe.
4836 - Fix #1417: [dnscrypt] shared secret cache counters, and works when
4839 - Fix #1418: [ip ratelimit] initialize slabhash using
4844 - Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
4847 - Fix #1414: fix segfault on parse failure and log_replies.
4854 - Fix #1415: patch to free dnscrypt environment on reload.
4856 - Fix #1415: [dnscrypt] shared secret cache, patch from
4859 - Fix WKS records on kvm autobuild host, with default protobyname
4863 - Fix #1407: Add ECS options check to unbound-checkconf.
4865 - Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
4869 - Fix install of trust anchor when two anchors are present, makes both
4873 - tag 1.6.5 with pointrelease 1.6.5 (1.6.4 plus 5011 fix).
4875 - Fix issue on macOX 10.10 where TCP fast open is detected but not
4876 implemented causing TCP to fail. The fix allows fallback to regular
4879 - Fix #1402: squelch invalid argument error for fd_set_block on windows.
4886 - Fix #1398: make cachedb secret configurable.
4890 - Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
4901 - Fix #1394: mix of serve-expired and response-ip could cause a crash.
4912 - Fix compile with libnettle
4913 - Fix DSA configure switch (--disable dsa) for libnettle and libnss.
4914 - Fix #1365: Add Ed25519 support using libnettle.
4918 - Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
4919 - Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
4923 - Fix #1344: RFC6761-reserved domains: test. and invalid.
4927 - Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
4928 - Fix svn hooks for tdir (selected if testcode/mini_tdir.sh exists)..
4931 - Fix 1332: Bump verbosity of failed chown'ing of the control socket.
4934 - Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
4936 - Fix #1331: libunbound segfault in threaded mode when context is
4938 - Fix pythonmod link line option flag.
4939 - Fix openssl 1.1.0 load of ssl error strings from ssl init.
4942 - Fix python example0 return module wait instead of error for pass.
4951 - Fix that infra cache host hash does not change after reconfig.
4956 - First fix for zero b64 and hex text zone format in sldns.
4969 - Fix #1316: heap read buffer overflow in parse_edns_options.
4972 - Fix warning in pythonmod under clang compiler.
4974 - Fix lintian typo.
4977 - Fix #1277: disable domain ratelimit by setting value to 0.
4980 - Fix #1301: memory leak in respip and tests.
4982 - Fix memory leak in sldns_buffer_new_frm_data.
4983 - Fix memory leak in dnscrypt config read.
4984 - Fix dnscrypt chacha cert support ifdefs.
4985 - Fix dnscrypt chacha cert unit test escapes in grep.
4987 - Fix to unlock view in view test.
4990 - Fix stub zone queries leaking to the internet for
4992 - Fix query for refetch_glue of stub leaking to internet.
4995 - Fix #1279: Memory leak on reload when python module is enabled.
4996 - Fix #1280: Unbound fails assert when response from authoritative
4999 - 1.6.3 tag created, with only #1280 fix, trunk is 1.6.4 development.
5003 - Fix #1278: Incomplete wildcard proof.
5013 - Fix that unbound-control can set val_clean_additional and val_permissive_mode.
5017 - Add an explicit type cast for TCP FASTOPEN fix.
5019 - Fix #1275: cached data in cachedb is never used.
5020 - Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
5023 - Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
5027 - Fix fastopen EPIPE fallthrough to perform connect.
5034 - Fix #1273: cachedb.c doesn't compile with -Wextra.
5038 - Fix #1269: inconsistent use of built-in local zones with views.
5047 - Fix assertion for low buffer size and big edns payload when worker
5054 - Fix #1270: unitauth.c doesn't compile with higher warning level
5069 - Fix #1268: SIGSEGV after log_reopen.
5072 - Fix #1265 to use /bin/kill.
5073 - Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
5077 - Fix #1265: contrib/unbound.service contains hardcoded path.
5090 - better module memory lookup, fix of unbound-control shm names for
5092 - Fix type AVC sldns rrdef.
5097 - Fix queries for nameservers under a stub leaking to the internet.
5104 - Fix tcp-mss failure printout text.
5105 - Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
5115 - Fix sldns wire2str printout of RR type CAA tags.
5116 - Fix sldns int16_data parse.
5117 - Fix sldns parse and printout of TSIG RRs.
5121 - Fix #1259: "--disable-ecdsa" argument overwritten
5124 - Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
5125 and fix that 64bit getting installed in C:\Program Files (x86).
5141 - Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
5145 - Fix #1252: more indentation inconsistencies.
5146 - Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
5150 - ECS documentation fix (from Manu Bretelle).
5153 - Fix #1250: inconsistent indentation in services/listen_dnsport.c.
5164 - Fix #1247: unbound does not shorten source prefix length when
5167 - Fix #1249: unbound doesn't return FORMERR to bogus ECS.
5179 - Fix small memory leak in edns_opt_copy_alloc.
5185 - Fix pythonmod for cb changes.
5206 - Fix respip for braces when locks arent used.
5207 - Fix pythonmod for cb changes.
5210 - Fix #1244: document that use of chroot requires trust anchor file to
5220 - Fix #1217: Add metrics to unbound-control interface showing
5229 - Fix to prevent non-referal query from being cached as referal when the
5233 - Fix #1239: configure fails to find python distutils if python
5237 - Fix #1238: segmentation fault when adding through the remote
5240 - Fix #1229: Systemd service sandboxing, options in wrong sections.
5247 - Fix doxygen for dnscrypt files.
5259 - Fix #1237 - Wrong resolving in chain, for norec queries that get
5263 - Fix that SHM is not inited if not enabled.
5267 - Fix that looped DNAMEs do not cause unbound to spend effort.
5272 - Fix #1235: Fix too long DNAME expansion produces SERVFAIL instead
5276 - Fix #1234: shortening DNAME loop produces duplicate DNAME records
5289 - fix enum conversion warnings
5292 - Fix #1230: swig version 2.0.0 is required for pythonmod, with
5297 - Fix #1229: Systemd service sandboxing in contrib/unbound.service.
5301 - Fix testpkts.c, check if DO bit is set, not only if there is an OPT
5309 - Fix #1227: Fix that Unbound control allows weak ciphersuits.
5310 - Fix #1226: provide official 32bit binary for windows.
5316 - Fix doc/CNAME-basedRedirectionDesignNotes.pdf zone static to
5324 - Fix #1224: Fix that defaults should not fall back to "Program Files
5340 - Fix autoconf of systemd check for lack of pkg-config.
5343 - Fix pythonmod for typedef changes.
5344 - Fix dnstap for warning of set but not used.
5351 - Fix for type name change and fix warning on windows compile.
5357 - Fix compile on solaris of the fix to use $host detect.
5360 - fix root_anchor test for updated icannbundle.pem lower certificates.
5363 - Fix 1211: Fix can't enable interface-automatic if no IPv6 with
5370 - Fix to Rename ub_callback_t to ub_callback_type, because POSIX
5372 - Fix to rename internally used types from _t to _type, because _t
5377 - Fix to also block meta types 128 through to 248 with formerr.
5378 - Fix #1206: Some view-related commands are missing from 'unbound-control -h'
5381 - Fix #1202: Fix code comment that packed_rrset_data is not always
5385 - Fix #1201: Fix missing unlock in answer_from_cache error condition.
5388 - Fix to return formerr for queries for meta-types, to avoid
5390 - Fix #1184: Log DNS replies. This includes the same logging
5393 - Fix #1187: Source IP rate limiting, patch from Larissa Feng.
5401 - Fix reload chdir failure when also chrooted to that directory.
5404 - Fix #1194: Cross build fails when $host isn't `uname` for getentropy.
5407 - Fix #1190: Do not echo back EDNS options in local-zone error response.
5411 - Fix #1188: Unresolved symbol 'fake_dsa' in libunbound.so when built
5415 - Fix #1191: remove comment about view deletion.
5420 - Fix inet_ntop and inet_pton warnings in windows compile.
5423 - Fix #1178: attempt to fix setup error at end, pop result values
5427 - Fix #1182: Fix Resource leak (socket), at startup.
5428 - Fix unbound-control and ipv6 only.
5431 - Fix #1176: stack size too small for Alpine Linux.
5434 - Fix downcast warnings from visual studio in sldns code.
5439 - Fix remote control without cert for LibreSSL
5458 - Fix #1173: differ local-zone type deny from unset
5462 - Fix #1170: document that 'inform' local-zone uses local-data.
5465 - hyphen as minus fix, by Andreas Schulze
5481 - Fix that with openssl 1.1 control-use-cert: no uses less cpu, by
5487 - Fix NSEC ENT wildcard check. Matching wildcard does not have to be a
5496 - Fix unit tests for DS hash processing for fake-dsa test option.
5501 - Fix #1158: reference RFC 8020 "NXDOMAIN: There Really Is Nothing
5505 - Fix #1155: test status code of unbound-control in 04-checkconf,
5515 - Fix #1154: segfault when reading config with duplicate zones.
5531 - Fix failure to build on arm64 with no sbrk.
5539 - Fix unit tests for openssl 1.1, with no DSA, by faking DSA, enabled
5543 - Fix #1134: unbound-control set_option -- val-override-date: -1 works
5557 - fix --enable-dsa to work, instead of copying ecdsa enable.
5558 - Fix DNSSEC validation of query type ANY with DNAME answers.
5562 - Fix #1130: whitespace in example.conf.in more consistent.
5570 - Fix #1125: unbound could reuse an answer packet incorrectly for
5572 - Fix #1118: libunbound.pc sets strange Libs, Libs.private values.
5577 - Re-fix #839 from view commit overwrite.
5586 - fix memoryleak logfile when in debug mode.
5590 - Fix #1117: spelling errors, from Robert Edmonds.
5593 - Fix Nits for 1.5.10 reported by Dag-Erling Smorgrav.
5596 - Fix #838: 1.5.10 cannot be built on Solaris, undefined PATH_MAX.
5597 - Fix #839: Memory grows unexpectedly with large RPZ files.
5598 - Fix #840: infinite loop in unbound_munin_ plugin on unowned lockfile.
5599 - Fix #841: big local-zone's make it consume large amounts of memory.
5604 - Fix dnstap relaying "random" messages instead of resolver/forwarder
5606 - Fix #836: unbound could echo back EDNS options in an error response.
5610 - Fix #835: fix --disable-dsa with nettle verify.
5614 - Fix 883: error for duplicate local zone entry.
5618 - fix potential memory leak in daemon/remote.c and nullpointer
5625 - Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len.
5628 - Fix #831: workaround for spurious fread_chk warning against petal.c
5635 - Fix #829: doc of sldns_wire2str_rdata_buf() return value has an
5637 - Fix incomplete prototypes reported by Dag-Erling Smørgrav.
5638 - Fix #828: missing type in access-control-tag-action redirect results
5642 - Fix compile with openssl 1.1.0 with api=1.1.0.
5646 - Fix for compile without warnings with openssl 1.1.0.
5647 - Fix #826: Fix refuse_non_local could result in a broken response.
5651 - Fix #777: OpenSSL 1.1.0 compatibility, patch from Sebastian A.
5662 - Fix #820: set sldns_str2wire_rr_buf() dual meaning len parameter
5669 - Fix #804: unbound stops responding after outage. Fixes queries
5671 - Fix #804: lower num_target_queries for iterator also for failed
5678 - Fix #807: workaround for possible some "unused" function parameters
5685 - Fix #806: wrong comment removed.
5691 - Fix #801: missing error condition handling in
5693 - Fix #802: workaround for function parameters that are "unused"
5695 - Fix #803: confusing (and incorrect) code comment in daemon_cleanup().
5698 - Fix typo in unbound.conf.
5701 - Fix #798: Client-side TCP fast open fails (Linux).
5711 - Fix dynamic link of anchor-update.exe on windows.
5712 - Fix detect of mingw for MXE package build.
5714 - Fix #788 for nettle 3.0: Failed to build with Nettle >= 3.0 and
5720 - Fix #787: outgoing-interface netblock/64 ipv6 option to use linux
5728 - Fix static compile on windows missing gdi32.
5734 - Fix #784: Build configure assumess that having getpwnam means there
5746 - Fix tcp timeouts in tv.usec.
5757 - Fix 775: unbound-host and unbound-anchor crash on windows, ignore
5759 - Fix spelling in freebind option man page text.
5760 - Fix windows link of ssl with crypt32.
5761 - Fix 779: Union casting is non-portable.
5762 - Fix 780: MAP_ANON not defined in HP-UX 11.31.
5763 - Fix 781: prealloc() is an HP-UX system library call.
5772 - Fix #778: unbound 1.5.9: -h segfault (null deref).
5773 - Fix directory: fix for unbound-checkconf, it restores cwd.
5782 - document directory immediate fix and allow EXECUTABLE syntax in it
5788 - Revert fix for NetworkService account on windows due to breakage
5790 - Fix that windows install will not overwrite existing service.conf
5799 - Fix #773: Non-standard Python location build failure with pyunbound.
5812 - Fix to not ignore return value of chown() in daemon startup.
5815 - Fix libubound for edns optlist feature.
5816 - Fix distinction between free and CRYPTO_free in dsa and ecdsa alloc.
5817 - Fix #752: retry resource temporarily unavailable on control pipe.
5821 - Fix (for 1.5.10): Fix unbound-anchor.exe file location defaults to
5826 - Fix windows service to be created run with limited rights, as a
5836 - Fix time in case answer comes from cache in ub_resolve_event().
5837 - Attempted fix for #765: _unboundmodule missing for python3.
5840 - Fix #770: Small subgroup attack on DH used in unix pipe on localhost
5843 - Fix #768: Unbound Service Sometimes Can Not Shutdown
5855 - Fix #767: Reference to an expired Internet-Draft in
5864 - Fix #766: dns64 should synthesize results on timeout/errors.
5867 - Fix #761: DNSSEC LAME false positive resolving nic.club.
5873 - Fix memory leak in out-of-memory conditions of local zone add.
5876 - Fix sldns with static checking fixes copied from getdns.
5879 - Fix #759: 0x20 capsforid no longer checks type PTR, for
5883 - Fix some malformed responses to edns queries get fallback to nonedns.
5893 - Fix #753: document dump_requestlist is for first thread.
5897 - Fix #749: unbound-checkconf gets SIGSEGV when use against a
5904 - Fix compile of getentropy_linux for SLES11 servicepack 4.
5905 - Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev.
5906 - Fix test for openssl to use HMAC_Update for 1.1.0.
5921 - Fix #746: Fix unbound sets CD bit on all forwards.
5928 - Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma.
5929 - Fix ip-transparent for tcp on freebsd.
5936 - Fix warnings in ifdef corner case, older or unknown libevent.
5937 - Fix compile for ub_event code with older libev.
5941 - Fix libev usage of dispatch return value.
5950 - Fixup of compile fix for pluggable event API from P.Y. Adi
5958 - Fix #747: assert in outnet_serviced_query_stop.
5969 - Fix #745: unbound.py - idn2dname throws UnicodeError when idnname
5973 - Fix OpenBSD asynclook lock free that gets used later (fix test code).
5974 - Fix that NSEC3 negative cache is used when there is no salt.
5986 - Fix that "make install" fails due to "text file busy" error.
6001 - Fix patch typo in prevuous commit for 734 from Adi Prasaja.
6010 - Fix #741: log message for dnstap socket connection is more clear.
6013 - Fix #734: chown the pidfile if it resides inside the chroot.
6016 - Fix cmsg alignment for argument to sendmsg on NetBSD.
6017 - Fix that unbound complains about unimplemented IP_PKTINFO for
6021 - Fix #738: Swig should not be invoked with CPPFLAGS.
6028 - Fix to simplify empty string checking from Michael McConville.
6032 - Fix #734: Do not log an error when the PID file cannot be chown'ed.
6036 - Fix test if -pthreads unused to use better grep for portability.
6039 - Fix mingw crosscompile for recent mingw.
6056 - Fix #729: omit use of escape sequences in echo since they are not
6082 - Committed fix to qname minimisation and unit test case for it.
6089 - Fixup 724: Fix PCA prompt for unbound-service-install.exe.
6097 - Fixup 724 fix for fname_after_chroot() calls.
6105 - Fix for #724: conf syntax to read files from run dir (on Windows).
6108 - Fix for #720, fix unbound-control-setup windows batch file.
6111 - Fix #720: add windows scripts to zip bundle.
6116 - Fix that malformed EDNS query gets a response without malformed EDNS.
6123 - Fix #594. libunbound: optionally use libnettle for crypto.
6131 - Fix for lenient accept of reverse order DNAME and CNAME.
6140 - Fix #718: Fix unbound-control-setup with support for env
6145 - Fix #716: nodata proof with empty non-terminals and wildcards.
6148 - Fix checklock testcode for linux threads on exit.
6157 - Fix #714: Document config to block private-address for IPv4
6161 - Fix #712: unbound-anchor appears to not fsync root.key.
6168 - Fix segfault in the dns64 module in the formaterror error path.
6169 - Fix sldns_wire2str_rdata_scan for malformed RRs.
6175 - Fix manpage to suggest using SIGTERM to terminate the server.
6190 - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution
6196 - Fix unbound-control flush that does not succeed in removing data.
6199 - Fix config globbed include chroot treatment, this fixes reload of
6202 - Fix #702: New IPs for for h.root-servers.net.
6204 - Fix #705: ub_ctx_set_fwd() return value mishandled on windows.
6206 - Fix minor error in unbound.conf.5.in
6207 - Fix unbound.conf(5) access-control description for precedence
6214 - Fix #697: Get PY_MAJOR_VERSION failure at configure for python
6221 - Fix deadlock for local data add and zone add when unbound-control
6233 - Fix #694: configure script does not detect LibreSSL 2.2.2
6242 - Fix 5011 anchor update timer after reload.
6243 - Fix mktime in unbound-anchor not using UTC.
6250 - Fix #690: Reload fails when so-reuseport is yes after changing
6255 - Fix configure to detect SSL_CTX_set_ecdh_auto.
6275 - Fix #681: Setting forwarders with unbound-control forward
6280 - Fix alloc with log for allocation size checks.
6283 - Fix #677 Fix DNAME responses from cache that failed internal chain
6288 - Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly
6295 - Fix #674: Do not free pointers given by getenv.
6298 - Fix that unparseable error responses are ratelimited.
6335 - Fix leaked dns64prefix configuration string.
6342 - Fix bug#664: libunbound python3 related fixes (from Tomas Hozza)
6346 Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns.
6353 - Fix that get_option for cache-sizes does not print double newline.
6354 - Fix#663: ssl handshake fails when using unix socket because dh size
6358 - Fix crash in dnstap: Do not try to log TCP responses after timeout.
6372 - Fix #660: Fix interface-automatic broken in the presence of
6380 - Fix #657: libunbound(3) recommends deprecated
6386 - Fix segfault on user not found at startup (from Maciej Soltysiak).
6405 - Fix lintian warning in unbound-checkconf man page (from Andreas
6409 - Fix warning on sign compare in getentropy_linux.
6412 - Fix #644: harden-algo-downgrade option, if turned off, fixes the
6445 - Fix #645 Portability to Solaris 10, use AF_LOCAL.
6446 - Fix #646 Portability to Solaris, -lrt for getentropy_solaris.
6447 - Fix #647 crash in 1.5.2 because pwd.db no longer accessible after
6455 - Fix #643: doc/example.conf.in: unnecessary whitespace.
6464 - Fix scrubber with harden-glue turned off to reject NS (and other
6468 - Fix validation failure in case upstream forwarder (ISC BIND) does
6477 - Fix 0x20 capsforid fallback to omit gratuitous NS and additional
6479 - Portability fix for Solaris ('sun' is not usable for a variable).
6482 - Fix pyunbound byte string representation for python3.
6485 - Fix unintended use of gcc extension for incomplete enum types,
6501 - Fix pyunbound ord call, portable for python 2 and 3.
6504 - Fix warnings in pythonmod changes.
6523 - Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing
6524 IP_MTU_DISCOVER OMIT option (fix from Remi Gacogne).
6542 - Fix CVE-2014-8602: denial of service by making resolver chase
6546 - Fix bug#632: unbound fails to build on AArch64, protects
6553 - Fix makefile for build from noexec source tree.
6556 - Fix libunbound undefined symbol errors for main.
6560 - Fix log at high verbosity and memory allocation failure.
6564 - Fix crash on multiple thread random usage on systems without
6568 - fix compat/getentropy_win.c check if CryptGenRandom works and no
6572 - Fix cdflag dns64 processing.
6575 - Fix that CD flag disables DNS64 processing, returning the DNSSEC
6580 - Fix #627: SSL_CTX_load_verify_locations return code not properly
6602 - Fix bug where forward or stub addresses with same address but
6606 - review fix from Ralph.
6613 dnstap: Fix ProtobufCBufferSimple usage that is incorrect as of
6631 - Fix #617: in ldns in unbound, lowercase WKS services.
6632 - Fix ctype invocation casts.
6635 - Fix unbound-checkconf check for module config with dns64 module.
6636 - Fix unbound capsforid fallback, it ignores TTLs in comparison.
6639 - Fix #614: man page variable substitution bug.
6645 - fix #613: Allow tab ws in var length last rdfs (in ldns str2wire).
6648 - Fix #612: create service with service.conf in present directory and
6650 - Fix for mingw compile openssl ranlib.
6656 - Fix swig and python examples for Python 3.x.
6657 - Fix for mingw compile with openssl-1.0.1i.
6666 - Fix tcp timer waiting list removal code.
6672 - Fix unit test for CDS typecode.
6688 - Fix #603: unbound-checkconf -o <option> should skip verification
6726 - Fix endian.h include for OpenBSD.
6729 - And Fix#596: Bail out of unbound-control dump_infra when ssl
6733 - Fix #596: Bail out of unbound-control list_local_zones when ssl
6741 - Fix getentropy compat code, function refs were not portable.
6742 - Fix to check openssl version number only for OpenSSL.
6744 - Fix bug in fix for log locks that caused deadlock in signal handler.
6755 - fix strptime implicit declaration error on OpenBSD.
6759 - Fix #593: segfault or crash upon rotating logfile.
6774 - Fix caps-for-id fallback, and added fallback attempt when servers
6794 prefix and sysconfdir from the configure script. Also fix the
6803 Fix a few dummy callbacks that don't match their prototype.
6804 Fix some casts. Hide the sbrk madness behind #ifdef HAVE_SBRK.
6858 - Fix compile with libevent2 on FreeBSD.
6861 - Fix #502: explain that do-ip6 disable does not stop AAAA lookups,
6872 - Fix #567: unbound lists if forward zone is secure or insecure with
6875 - Fix #554: use unsigned long to print 64bit statistics counters on
6877 - Fix #558: failed prefetch lookup does not remove cached response
6879 - Fix #545: improved logging, the ip address of the error is printed
6883 - Fix #574: make test fails on Ubuntu 14.04. Disabled remote-control
6890 - Fix #572: Fix unit test failure for systems with different
6894 - Fix #569: do_tcp is do-tcp in unbound.conf man page.
6900 - Fix print filename of encompassing config file on read failure.
6907 - Fix bug#561: contrib/cacti plugin did not report SERVFAIL rcodes
6928 - Fix parse of #553(NSD) string in sldns, quotes without spaces.
6934 - Fix #551: License change "Regents" to "Copyright holder", matching
6942 - Fix sldns parse tests on osx.
6947 - Fix parse in sldns of quoted parenthesized text strings.
6952 - Fix for hex to string in unknown, atma and nsap.
6987 - Fix #547: no trustanchor written if filesystem full, fclose checked.
6990 - Fix isprint() portability in sldns, uses unsigned int.
6994 - fix #544: Fixed +i causes segfault when running with module conf
7002 - Fix bug in cachedump that uses sldns.
7006 - Fix sldns to use sldns_ prefix for all ldns_ variables.
7007 - Fix windows compile to compile with sldns.
7010 - Fix sldns to make globals use sldns_ prefix. This fixes
7014 - Fix bug#537: compile python plugin without ldns library.
7017 - Fix bug#536: acl_deny_non_local and refuse_non_local added.
7020 - Patch from Neel Goyal to fix async id assignment if callback
7026 - Patch from Neel Goyal to fix callback in libunbound.
7029 - if configured --with-libunbound-only fix make install.
7032 - Fix #531: Set SO_REUSEADDR so that the wildcard interface and a
7043 sets the event base to the current. And fix a deadlock in
7047 - Fix #528: if very high logging (4 or more) segfault on allow_snoop.
7062 - Fix#524: max-udp-size not effective to non-EDNS0 queries, from
7078 - Fix#520: Errors found by static analysis from Tomas Hozza(redhat).
7081 - Fix for 2038, with time_t instead of uint32_t.
7084 - Fix#519 ub_ctx_delete may hang in some scenarios (libunbound).
7087 - Fix uninit variable in fix#516.
7090 - Fix#516 dnssec lameness detection for answers that are improper.
7096 - Fix#512 memleak in testcode for testbound (if it fails).
7097 - Fix#512 NSS returned arrays out of setup function to be statics.
7115 - Fix for const string literals in C++ for libunbound, from Karel
7132 - Fix#501: forward-first does not recurse, when forward name is ".".
7146 - Fix#499 use-after-free in out-of-memory handling code (thanks Jake
7148 - Fix#500 use on non-initialised values on socket bind failures.
7151 - Fix round-robin doesn't work with some Windows clients (from Ilya
7155 - update acx_nlnetlabs.m4 to v23, sleep w32 fix.
7171 - fix bug #491: pick program name (0th argument) as syslog identity.
7175 - Fix so that for a configuration line of include: "*.conf" it is not
7181 - Fix queries leaking up for stubs and forwards, if the configured
7189 - Fix crash in previous private address fixup of 22 March.
7199 - #492: Fix endianness detection, revert to older lookup3.c detection
7205 - Fix resolve of names that use a mix of public and private addresses.
7207 - Fix makedist for new svn for -d option.
7209 - Fix windows RSRC version for long version numbers.
7229 - fix defines in lookup3 for bigendian bsd alpha
7264 - Fix openssl lock free on exit (reported by Robert Fleischman).
7271 - Fix unbound-anchor xml parse of entity declarations for safety.
7293 - bug 481: fix python example0.
7300 - Fix unbound-control forward disables configured stubs below it.
7307 - Fix bug #477: unbound-anchor segfaults if EDNS is blocked.
7310 - Fix validation for responses with both CNAME and wildcard
7315 - fix build of pythonmod in objdir, for unbound.py.
7319 - fix build of pythonmod in objdir (thanks Jakob Schlyter).
7322 - fix text in unbound-anchor man page.
7355 - Fix timeouts so that when a server has been offline for a while
7368 - Fix openssl race condition, initializes openssl locks, reported
7373 - Fix that enables modules to register twice for the same
7376 - Fix forward-first option where it sets the RD flag wrongly.
7384 - fix bogus nodata cname chain not reported as bogus by validator,
7392 - review fix for libnss, check hash prefix allocation size.
7395 - fix missing break for GOST DS hash function.
7399 - Fix bug#452 and another assertion failure in mesh.c, makes
7404 - Fix bug#454: Remove ACX_CHECK_COMPILER_FLAG from configure.ac,
7409 - Fix libunbound report of errors when in background mode.
7418 - Fix validation of qtype DS queries that result in no data for
7438 - fix edns-buffer-size and msg-buffer-size manpage documentation.
7448 - fix error handling of alloc failure during rrsig verification.
7469 - bug #452: fix crash on assert in mesh_state_attachment.
7476 - Fix debian-bugs-658021: Please enable hardened build flags.
7494 - fix configure ECDSA support in ldns detection for windows compile.
7495 - fix possible uninitialised variable in windows pipe implementation.
7498 - Fix alignment problem in util/random on sparc64/freebsd.
7501 - Fix for accept spinning reported by OpenBSD.
7505 - Fix validation of nodata for DS query in NSEC zones, reported by
7518 - fix bug #443: --with-chroot-dir not honoured by configure.
7519 - fix bug #444: setusercontext was called too late (thanks Bjorn
7523 - fix bug #442: Fix that Makefile depends on pythonmod headers
7536 - fix to locate nameservers for DS lookup with NS fetches.
7554 - Fix from code review, if EINPROGRESS not defined chain if statement
7558 - Fix bug#434: on windows check registry for config file location
7562 - Fix to squelch 'network unreachable' errors from tcp connect in
7567 - Fix prefetch and sticky NS, now the prefetch works. It picks
7574 - Fix forward-zone memory, uses malloc and frees original root dp.
7581 - Fix sticky NS (ghost domain problem) if prefetch is yes.
7585 - RT#2955. Fix for cygwin compilation.
7590 - Fix timeouts to keep track of query type, A, AAAA and other, if
7592 - unit test fix for nomem_cnametopos.rpl race condition.
7595 - Fix AHX_BROKEN_MEMCMP for autoheader mess up of #undef in config.h.
7602 - fix memory leak in errorcase for DSA signatures.
7607 - fix for windows, rename() is not posix compliant on windows.
7615 - Fix validation failures (like: validation failure xx: no NSEC3
7617 because of a bug in the TTL-fix in 1.4.15, it picked the wrong rdata
7621 - Fix version-number in libtool to be version-info so it produces
7631 - Fix memset in test code.
7634 - Fix bug #424: compile on OpenIndiana OS with gcc 4.6.2.
7637 - Fix to write key files completely to a temporary file, and if that
7645 - Fix bug where canonical_compare of RRSIG did not downcase the
7654 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL
7662 - Fix to randomize hash function, based on 28c3 congress, reported
7666 - Fix for memory leak (about 20 bytes when a tcp or udp send operation
7673 - Fix for VU#209659 CVE-2011-4528: Unbound denial of service
7682 - Fix parse error on negative SOA RRSIGs if badly ordered in the packet.
7687 - fix infra cache comparison.
7688 - Fix to constrain signer_name to be a parent of the lookupname.
7691 - Fix getaddrinfowithincludes on windows with fedora16 mingw32-gcc.
7692 - Fix warnings with gcc 4.6 in compat/inet_ntop.c.
7693 - Fix warning unused in compat/strptime.c.
7694 - Fix malloc detection and double definition.
7700 - Fix for tcp-upstream and ssl-upstream for if a laptop sleeps, causes
7704 - Fix quartile time estimate, it was too low, (thanks Jan Komissar).
7720 - Fix double free in unbound-host, reported by Steve Grubb.
7729 - fix -flto detection on Lion for llvm-gcc.
7739 - fix iana-update for changing gzip compression of results.
7740 - fix export-all-symbols on OSX.
7746 - fix iana_update target for gzipped file on iana site.
7749 - Fix resolve of partners.extranet.microsoft.com with a fix for the
7752 - Fix make_new_space function so that the incoming query is not
7758 - fix --enable-allsymbols, fptr wlist is disabled on windows with this
7762 - fix unbound-anchor for broken strptime on OSX lion, detected
7771 - Fix for out-of-memory condition in libunbound (thanks
7775 - Fix --enable-allsymbols, it depended on link specifics of the
7791 - Fix classification of NS set in answer section, where there is a
7796 - fix bug #408: accept patch from Steve Snyder that comments out
7799 - fix EDNS1480 change memleak and TCP fallback.
7800 - fix various compiler warnings (reported by Paul Wouters).
7813 - Reverted dns EDNS backoff fix, it did not help and needs
7818 - Fix operation in ipv6 only (do-ip4: no) mode.
7830 - Fix num-threads 0 does not segfault, reported by Simon Deziel.
7831 - Fix validation failures due to EDNS backoff retries, the retry
7843 - Fix validation of qtype ANY responses with CNAMEs (thanks Cathy
7849 - Fix that internally, CNAMEs with NXDOMAIN have that as rcode.
7854 - fix autoconf call in makedist crosscompile to RC or snapshot.
7857 - Fix validation of . DS query.
7862 - Fix python site-packages path to /usr/lib64.
7864 - fix memory and fd leak after out-of-memory condition.
7873 - Fix autoconf 2.68 warnings
7882 - Quick fix for contrib/unbound.spec example, no ldns-builtin any more.
7885 - Fix wildcard expansion no-data reply under an optout NSEC3 zone is
7893 - fix that --enable-static-exe does not complain about it unknown.
7898 - fix bug#395: id bits of other query may leak out under conditions
7899 - fix replyaddr count wrong after jostled queries, which leads to
7901 - fix comment about rndc port, that referred to the old port number.
7902 - fix that the listening socket is not closed when too many remote
7936 - Fix Makefile for U in environment, since wrong U is more common than
7942 - Fix assertion failure when unbound generates an empty error reply
7944 - This fix is in tag 1.4.10.
7953 - Fix TTL of SOA so negative TTL is separately cached from normal TTL.
7959 - bug#378: Fix that configure checks for ldns_get_random presence.
7990 - Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout.
7995 - bug #361: Fix, time.elapsed variable not reset with stats_noreset.
8019 - Fix remove private address does not throw away entire response.
8025 - fix bug#349: no -L/usr for ldns.
8036 - Fix so a changed NS RRset does not get moved name stuck on old
8040 - Fix prefetch so it does not get stuck on old server for moved names.
8046 - Fix insecure CNAME sequence marked as secure, reported by Bert
8057 - Fix in infra cache that could cause rto larger than TOP_TIMEOUT kept.
8071 - fix validation in this case: CNAME to nodata for co-hosted opt-in
8075 - Fix our 'BDS' license (typo reported by Xavier Belanger).
8085 - Fix bug#338: print address when socket creation fails.
8088 - Fix storage of EDNS failures in the infra cache.
8130 - Fix uninit value in dump_infra print.
8131 - Fix validation failure for parent and child on same server with an
8147 - Windows 7 fix for the installer.
8150 - Fix bug where fallback_tcp causes wrong roundtrip and edns
8151 observation to be noted in cache. Fix bug where EDNSprobe halted
8161 - Fix for request list growth, if a server has long timeout but the
8172 - Fix TCP so it uses a random outgoing-interface.
8176 - Fix bug when DLV below a trust-anchor that uses NSEC3 optout where
8183 - test for unbound-anchor. fix for reading certs.
8184 - Fix alloc_reg_release for longer uptime in out of memory conditions.
8212 - Fix reported validation error in out of memory condition.
8223 - bug#327: Fix for cannot access stub zones until the root is primed.
8238 - Fix bug#321: resolution of rs.ripe.net artifacts with 0x20.
8245 - Fix bug#322: configure does not respect CFLAGS on Solaris.
8250 - Fix acx_nlnetlabs.m4 configure output for autoconf-2.66 AS_TR_CPP
8261 - Fix name of rrset printed that failed validation.
8267 - Fix validation in case a trust anchor enters into a zone with
8284 - Fix integer underflow in prefetch ttl creation from cache. This
8300 - Fix validation of qtype DNSKEY when a key-cache entry exists but
8321 - Fix RFC4035 compliance with 2.2 statement that the DNSKEY at apex
8326 - Fix jostle list bug found by Vince (luoce@cnnic), it caused the qps
8333 - Fix the max number of reply-address count to be applied for duplicate
8338 - Fix handling of corner case reply from lame server, follows rfc2308.
8350 - Fix to unload gost dynamic library module for leak testing.
8359 - Fix assertion failure reported by Kai Storbeck from XS4ALL, the
8366 - Fix TCPreply on systems with no writev, if just 1 byte could be sent.
8367 - Fix to use one pointer less for iterator query state store_parent_NS.
8379 - Fix bug where a long loop could be entered, now cycle detection
8392 - Fix compile warning if compiled without threads.
8399 - Fix storage of negative parent glue if that last resort fails.
8404 - Fix AD flag handling, it could in some cases mistakenly copy the AD
8410 - fix parentside and querytargets modulestate, for dump_requestlist.
8412 - fix parentside from cache to be marked dispreferred for bad names.
8438 - Fix resolution for domains like safesvc.com.cn. If the iterator
8443 - Fix comments in iter_utils:dp_is_useless.
8446 - Fix various compiler warnings from the clang llvm compiler.
8450 - Fix bug#308: spelling error in variable name in parser and lexer.
8453 - Fix dnssec-missing detection that was turned off by server selection.
8459 - Fix for dnssec lameness detection to use the key cache.
8466 - Fix detection of gost support in ldns (reported by Chris Smith).
8470 - fix retry sequence if prime hints are recursion-lame.
8477 - Compile fix using Sun Studio 12 compiler on Solaris 5.9, use
8485 - Fix bug#307: In 0x20 backoff fix fallback so the number of
8488 Fix so RRsets are compared canonicalized and sorted if the immediate
8494 - Fix to fetch data as last resort more tenaciously. When cycle
8497 - Fix fetch from blacklisted dnssec lame servers as last resort. The
8499 - Fix local-zone type redirect that did not use the query name for
8505 - Fix validation failure for qtype ANY caused by a RRSIG parse failure.
8518 - Fix bug#305: pkt_dname_tolower could read beyond end of buffer or
8521 - Fix chain of trust with CNAME at an intermediate step, for the DS
8525 - Fix validation of queries with wildcard names (*.example).
8528 - Fix EDNS probe for .de DNSSEC testbed failure, where the infra
8546 - fix bug#301: unbound-checkconf could not parse interface
8550 - fix fwd_ancil test to pass if the socket options are not supported.
8559 - Fix interface-automatic for OpenBSD: msg.controllen was too small,
8572 - Fix python use when multithreaded.
8573 - Fix solaris python compile.
8579 - fix for memory alignment in struct sock_list allocation.
8580 - Fix for MacPorts ldns without ssl default, unbound checks if ldns
8582 - Fix daemonize on Solaris 10, it did not detach from terminal.
8585 - spelling fix in validation error involving cnames.
8600 - Fix crash in control channel code.
8608 - Fix 5011 auto-trust-anchor-file initial read to skip RRSIGs.
8622 - Fix scrubber bug that potentially let NS records through. Reported
8625 - Fix: no classification of a forwarder as lame, throw away instead.
8637 - pickup ldns compile fix, libdl for libcrypto.
8665 - ldns tarball update for long label length syntax error fix.
8701 - Fix unbound-checkconf for auto-trust-anchor-file present checks.
8704 - Fix for parent-child disagreement code which could have trouble
8748 - Reading fixes: fix to set unlame when child confirms parent glue,
8749 and fix to avoid duplicate addresses in delegation point.
8753 - Fix Bug#287(reopened): update of ldns tarball with fix for parse
8755 - Fix SOA excluded from negative DS responses. Reported by Hauke
8759 - Fix negative cache lookup of closestencloser check of DS type bit.
8762 - Fix for lookup of parent-child disagreement domains, where the
8769 - Bug#287: Fix segfault when unbound-control remove nonexistent local
8773 - Fix crash with module-config "iterator".
8777 - bug#284: fix parse of # without end-of-line at end-of-file.
8804 - Fix#282 libunbound memleak on error condition by Eric Sesterhenn.
8816 - fix manpage errors reported by debian lintian.
8835 - Fix bug where autotrust does not work when started with a DS.
8857 - Fix double time subtraction in negative cache reported by
8893 - fix unbound-host so -d can be given before -C.
8899 - fixed race condition in trust point revocation. review fix.
8921 - fix DNSSEC-missing-signature detection for minimal responses
8925 - autotrust tests, fix trustpoint timer deletion code.
8926 fix count of valid anchors during missing remove.
8930 - fix compile of unbound-host when --enable-alloc-checks.
8931 - Fix lookup problem reported by Koh-ichi Ito and Jaap Akkerhuis.
8935 - Fix memory leak reported by Tao Ma.
8936 - Fix memstats test tool for log-time-ascii log format.
8949 - Fix bug where DNSSEC-bogus messages were marked with too high TTL.
8962 - autotrust fix that failure count is written to file.
8963 - autotrust fix that keys may become valid after add holddown time
8972 - fix memory leak in python code.
8978 - makefile fix for parallel makes.
8987 - fix revocation of RR for autotrust, stray exclamation mark.
9020 - free all memory on program exit, fix for ssl and flex.
9036 - Fix so that servers are only blacklisted if they fail to reply
9042 - Fix bug in DLV lookup reported by Amanda from Secure64.
9087 - Fix bug found by Michael Tokarev where unbound would try to
9093 - Fix server selection, so that it waits for open target queries when
9103 - fix replacement malloc code. Used in crosscompile.
9119 - Fix for crash at start on windows.
9122 - Fix for ID bits on windows to use all 16. RAND_MAX was not
9134 - makedist.sh uname fix (same as ldns).
9151 - Fix EDNS fallback when EDNS works for short answers but long answers
9167 - Fix of message parse bug where (specifically) an NSEC and RRSIG
9206 - Fix queries for type DS when forward or stub zones are there.
9222 - codereview - dp copy bogus setting fix.
9230 - fix lint from complaining on ldns/sha.h.
9284 - fix for threadsafety in solaris thr_key_create() in tests.
9286 - fix pylib test for Darwin.
9287 - fix pymod test for Darwin and a python threading bug in pymod init.
9292 - fix for build outside sourcedir.
9293 - fix for configure script swig detection.
9296 - Fix reentrant in minievent handler for unix. Could have resulted
9299 - faster fix for winsock reentrant check.
9300 - fix rsasha512 unit test for new (interim) algorithm number.
9301 - fix test:ldns doesn't like DOS line endings in keyfiles on unix.
9302 - fix compile warning on ubuntu (configlexer fwrite return value).
9312 - bug #245: fix munin plugin, perform cleanup of stale lockfiles.
9318 - Fix for removal of RSASHA256_NSEC3 protonumber from ldns.
9321 - detect GOST support in openssl-1.0.0-beta1, and fix compile problem
9325 - windows compile fix.
9369 - checkconf fix no python checks when no python module enabled.
9370 - fix configure, pthread first, so other libs do not change outcome.
9380 - outofdir compile fix for python.
9393 - fix util/configlexer.c and solaris -std=c99 flag.
9394 - fix postcommit aclocal errors.
9405 - build fix for test asynclook.
9415 - Fix for and test for unknown algorithms in a trust anchor
9435 - fix testbound on windows.
9443 - munin plugin fix benign locking error printout.
9452 - fix RUN_DIR on windows compile setting in makedist.
9455 - fix makedist version cleanup function.
9466 - fixup memory leak introduced on 18feb in mesh reentrant fix.
9475 This should fix extraneous symbols exported from libunbound.
9479 - fix asynclook test app for libunbound not exporting symbols.
9554 - test fix, lexer and cancel test.
9579 - testbound test for older fix added.
9604 - fix bug where unbound could crash using libevent 1.3 and older.
9647 - typo fix and iana portlist updated.
9660 - fix reading included config files when chrooted.
9663 - fix libunbound message transport when no packet buffer is available.
9693 - better fix for bug #219: use LOG_NDELAY with openlog() call.
9702 - Fix problem reported by Jaco Engelbrecht where unbound-control stats
9758 - theoretical fix for problems reported on mailing list.
9763 - test for above, only AAAA and doip6 is no. Fix causes A record
9786 - fix for refcounting error that could cause fptr_wlist fatal exit
9790 - fix 32bit wrap around when printing large (4G and more) mem usage
9800 - fix bug 217: fixed, setreuid and setregid do not work on MacOSX10.4.
9851 - fix update-anchors.sh, so it does not report different RR order
9897 Which includes the ldns_dname_absolute fix.
10003 - fix TCP timeouts.
10113 - Fix assertion fail on bogus key handling.
10134 - fix bug 201: null ptr deref on cleanup while udp pkts wait for port.
10157 - #198: fixup man page to suggest chroot entropy fix.
10164 - fix bug #196, compile outside source tree.
10165 - fix bug #195, add --with-username=user configure option.
10177 - libunbound ub_resolve, fix handling of error condition during setup.
10191 - Fix for newegg lameness : ok for qtype=A, but lame for others.
10284 - bug 179: same fix as 177.
10291 - update of the ldns tarball to current ldns svn version (fix 181).
10317 - fix bug 174 - check for tcp_sigpipe that ldns-testns is installed.
10450 - test for this fix.
10470 - ldns-tarball update with fix for ldns_dname_label.
10498 - small speed fix for dname_count_size_labels, +1 or +2% recursion.
10527 - fix donotquery-localhost: yes default (it erroneously was switched
10596 - layout of manpages, spelling fix in header, manpages process by
10639 - fixup uninit warning from random.c; also seems to fix sporadic
10661 - fix pass async_id=NULL to _async resolve().
10672 - fix fail to allocate context actions.
10675 - fix Makefile for concurrent make of unbound-host.
10688 - fix link testbound.
10700 - fix for BSD, do not use ip4to6 mapping, make two sockets, once
10735 - fix lint, unit test in optimize mode.
10821 - fix for building in a subdirectory.
10822 - link lib fix for Leopard.
10847 - fix for nonRDquery validation typing; nodata is detected when
10957 - fix horrible oversight in sorting rrset references in a message,
11038 - fix crash where failure to prime DNSKEY tried to print null pointer
11065 - fix IP6 TCP, wrong definition check. With test package.
11099 - fix for multiple empty nonterminals, after multiple DSes in the
11106 - fix for cname out of validated unsec zone.
11364 - fixup canonical compare byfield routine, fix bug and also neater.
11521 - fix parser to handle absent server: clause.
11594 - fixup last fix for duplicate callbacks.
11618 - alignment problem fix on solaris 64.
11748 - mini_event timer precision and fix for change in timeouts during
11749 timeout callback. Fix for fwd_three tests, performed nonexit query.
11850 - floating point exception fix in lock-verify.
11875 - fix unit test to actually to tests.
11876 - fix write iov helper, and fakevent code.