Unbound 1.4.21

Features:

* Implement max-udp-size config option, default 4096 with fix#524 for
  nonEDNS0 queries.
* add unbound-control insecure_add and insecure_remove for the administration
  of negative trust anchors.
* install copy of unbound-control.8 man page for unbound-control-setup.
* code improve for minimal responses, small speed increase.
* max include of 100.000 files (depth and globbed at one time).
  This is to preserve system memory in bug cases, or endless cases.
* unbound.h header file has UNBOUND_VERSION_MAJOR define.
* get_option, set_option, unbound-checkconf -o and libunbound getoption() and
  setoption() support cache-min-ttl and cache-max-ttl. Also log-time-ascii,
  python-script, val-sig-skew-min and val-sig-skew-max. log-time-ascii takes
  effect immediately. The others are mostly useful for libunbound users.
* configure --disable-flto option.
* streamtcp man page.
* Make reverse zones easier by documenting the nodefault statements
  commented-out in the example config file.

Bug Fixes:

* committed libunbound version 4:1:2 for binary API updated in 1.4.20
* Fix for 2038, with time_t instead of uint32_t.
* Fix resolve of names that use a mix of public and private addresses.
* [bugzilla: 492 ] Fix endianness detection, revert to older lookup3.c
  detection and put new detect lines after previous tests, to avoid
  regressions but allow new detections to succeed.
  And add detection for machine/endian.h to it.
* Fix queries leaking up for stubs and forwards, if the configured
  nameservers all fail to answer.
* unbound-anchor review: BIO_write can return 0 successfully if it has
  successfully appended a zero length string.
* Fix so that for a configuration line of include: "*.conf" it is not an
  error if there are no files matching the glob pattern.
* own implementation of compat/snprintf.c.
* [bugzilla: 491 ] pick program name (0th argument) as syslog identity.
* Fixup snprintf return value usage, fixed libunbound_get_option.
* Robust checks on dname validity from rdata for dname compare.
* iana portlist update.
* Fix round-robin doesn't work with some Windows clients.
* [bugzilla: 500 ] use on non-initialised values on socket bind failures.
* [bugzilla: 499 ] use-after-free in out-of-memory handling code.
* Explain bogus and secure flags in libunbound more.
* Update acx_pthreads.m4 to ax_pthreads.4 (2013-03-29), and apply patch to it
  to not fail when -Werror is also specified, from the autoconf-archives.
* Fixup manpage syntax.
* Fix for const string literals in C++ for libunbound.
* Squelch sendto-permission denied errors when the network is not connected,
  to avoid spamming syslog.
* libunbound documentation on how to avoid openssl race conditions.
* [bugzilla: 512 ] NSS returned arrays out of setup function to be statics.
* [bugzilla: 516 ] dnssec lameness detection for answers that are improper.
* [bugzilla: 519 ] ub_ctx_delete may hang in some scenarios (libunbound).
* [bugzilla: 520 ] Errors found by static analysis

3 files changed, 8 insertions, 8 deletions

diff --git a/net/unbound/Makefile b/net/unbound/Makefile
index bd77a736794..814afb37392 100644
--- a/net/unbound/Makefile
+++ b/net/unbound/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2013/07/12 10:45:01 jperkin Exp $
+# $NetBSD: Makefile,v 1.28 2013/11/17 22:57:38 pettai Exp $
 
-DISTNAME=	unbound-1.4.20
-PKGREVISION=	1
+DISTNAME=	unbound-1.4.21
 CATEGORIES=	net
 MASTER_SITES=	http://www.unbound.net/downloads/
 
diff --git a/net/unbound/PLIST b/net/unbound/PLIST
index 20affce4684..e6f51a8c5d9 100644
--- a/net/unbound/PLIST
+++ b/net/unbound/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2012/12/25 08:54:26 pettai Exp $
+@comment $NetBSD: PLIST,v 1.6 2013/11/17 22:57:38 pettai Exp $
 include/unbound.h
 lib/libunbound.la
 man/man1/unbound-host.1
@@ -36,6 +36,7 @@ man/man3/ub_wait.3
 man/man5/unbound.conf.5
 man/man8/unbound-anchor.8
 man/man8/unbound-checkconf.8
+man/man8/unbound-control-setup.8
 man/man8/unbound-control.8
 man/man8/unbound.8
 sbin/unbound
diff --git a/net/unbound/distinfo b/net/unbound/distinfo
index 14455c4a037..59bc38210db 100644
--- a/net/unbound/distinfo
+++ b/net/unbound/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.21 2013/04/01 22:34:41 pettai Exp $
+$NetBSD: distinfo,v 1.22 2013/11/17 22:57:38 pettai Exp $
 
-SHA1 (unbound-1.4.20.tar.gz) = 1752976533be2a4f0c9cdbab9d2cbb67d4f27c43
-RMD160 (unbound-1.4.20.tar.gz) = 8852e6dd24823e0043e3c8ff8139e56715729bc3
-Size (unbound-1.4.20.tar.gz) = 3613963 bytes
+SHA1 (unbound-1.4.21.tar.gz) = 3ef4ea626e5284368d48ab618fe2207d43f2cee1
+RMD160 (unbound-1.4.21.tar.gz) = 7a72e1db33131380f04ae504f0009ef0d33b88f3
+Size (unbound-1.4.21.tar.gz) = 3624553 bytes