Unbound 1.5.6

=============

Features:
* Default for ssl-port is port 853, the temporary port assignment for
  secure domain name system traffic. If you used to rely on the older default
  of port 443, you have to put a clause in unbound.conf for that. The new
  value is likely going to be the standardised port number for this traffic.
* ANY responses include DNAME records if present,
  as per Evan Hunt's remark in dnsop.

Bug Fixes:
* Fix segfault in the dns64 module in the formaterror error path.
* Fix manpage to suggest using SIGTERM to terminate the server.
* iana portlist update.

Unbound 1.5.5
=============

Features:
* Change default of harden-algo-downgrade to off.
  This is lenient for algorithm rollover.
* Added permit-small-holddown config to debug fast 5011 rollover.
* Allow certificate chain files to allow for intermediate certificates.
* Enable ECDHE for servers. Where available, use SSL_CTX_set_ecdh_auto()
  for TLS-wrapped server configurations to enable ECDHE. Otherwise,
  manually offer curve p256. Client connections should automatically
  use ECDHE when available.
* [bugzilla: 699 ] Feature --enable-pie option to that builds PIE binary.
* [bugzilla: 700 ] Feature --enable-relro-now option that enables full
  read-only relocation.
* [bugzilla: 702 ] New IPs for for h.root-servers.net.

Bug Fixes:
* [bugzilla: 681 ] Fix setting forwarders with unbound-control forward
  implicitly turns on forward-first.
* [bugzilla: 690 ] Fix that reload fails when so-reuseport is yes
  after changing num-threads.
* please afl-gcc (llvm) for uninitialised variable warning.
* Fix mktime in unbound-anchor not using UTC.
* Fix 5011 anchor update timer after reload.
* 5011 implementation does not insist on all algorithms,
  when harden-algo-downgrade is turned off.
* Document in the manual more text about configuring locally served zones.
* Document that local-zone nodefault matches exactly and transparent can
  be used to release a subzone.
* [bugzilla: 694 ] Fix that configure script does not detect LibreSSL 2.2.2
* Fix deadlock for local data add and zone add when unbound-control
  list_local_data printout is interrupted.
* [bugzilla: 697 ] Fix get PY_MAJOR_VERSION failure at configure for
  python 2.4 to 2.6.
* changed windows setup compression to be more transparent.
* Fix config globbed include chroot treatment, this fixes reload of globs.
* [bugzilla: 705 ] Fix ub_ctx_set_fwd() return value mishandled on windows.
* Fix minor error in unbound.conf.5.in.
* Fix unbound.conf(5) access-control description for precedence and default.
* Fix unbound-control flush that does not succeed in removing data.
* MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution failures.
* iana portlist update.

2 files changed, 7 insertions, 7 deletions

diff --git a/net/unbound/Makefile b/net/unbound/Makefile
index 22c1817b5dc..af55bfd9410 100644
--- a/net/unbound/Makefile
+++ b/net/unbound/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.38 2015/10/21 21:30:14 joerg Exp $
+# $NetBSD: Makefile,v 1.39 2015/10/22 18:14:40 pettai Exp $
 
-DISTNAME=	unbound-1.5.4
-PKGREVISION=	1
+DISTNAME=	unbound-1.5.6
 CATEGORIES=	net
 MASTER_SITES=	http://www.unbound.net/downloads/
 
diff --git a/net/unbound/distinfo b/net/unbound/distinfo
index 17422c4b5de..221ca27fa61 100644
--- a/net/unbound/distinfo
+++ b/net/unbound/distinfo
@@ -1,5 +1,6 @@
-$NetBSD: distinfo,v 1.28 2015/07/15 18:09:05 pettai Exp $
+$NetBSD: distinfo,v 1.29 2015/10/22 18:14:40 pettai Exp $
 
-SHA1 (unbound-1.5.4.tar.gz) = ce0abc1563baa776a0f2c21516ffc13e6bff7d0f
-RMD160 (unbound-1.5.4.tar.gz) = 0d77e595ae80191d382b44c89365ef9054f374df
-Size (unbound-1.5.4.tar.gz) = 4844273 bytes
+SHA1 (unbound-1.5.6.tar.gz) = b1e521669d6e5a3c1baf8b71dad070e38887162b
+RMD160 (unbound-1.5.6.tar.gz) = bb333953b2aafd65525712cc4fa64f502af48817
+SHA512 (unbound-1.5.6.tar.gz) = 2477e3f00b8f5a3a4661ff20b0bc0d1d56c8a65cc6ab9f1308ae86f41c67a998af68d3ac5ba6c9c22a25a251f0410eaf9fee82911bcb3a3e82ffb6383e28dcf7
+Size (unbound-1.5.6.tar.gz) = 4849569 bytes