Created attachment 180604 [details] Patch to update Also fixes <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217544> Features - configure --enable-systemd and lets unbound use systemd sockets if you enable use-systemd: yes in unbound.conf. Also there are contrib/unbound.socket and contrib/unbound.service: systemd files for unbound, install them in /usr/lib/systemd/system. Contributed by Sami Kerola and Pavel Odintsov. - [bugzilla: 1185 ] Source IP rate limiting, patch from Larissa Feng. - [bugzilla: 1184 ] Log DNS replies. This includes the same logging information that DNS queries and response code and response size, patch from Larissa Feng. - Include root trust anchor id 20326 in unbound-anchor. - 64bit is default for windows builds. Bug Fixes - [bugzilla: 1176 ] Fix stack size too small for Alpine Linux. - Fix unbound-control and ipv6 only. [bugzilla: 1182 ] - Fix Resource leak (socket), at startup. [bugzilla: 1178 ] - Fix attempt to fix setup error at end, pop result values at end of install. - iana portlist update - Fix inet_ntop and inet_pton warnings in windows compile. - [bugzilla: 1191 ] Fix remove comment about view deletion. - [bugzilla: 1188 ] Fix unresolved symbol 'fake_dsa' in libunbound.so when built with Nettle - [bugzilla: 1190 ] Fix to not echo back EDNS options in local-zone error response. - [bugzilla: 1194 ] Fix if cross build fails when $host isn't `uname` for getentropy. - Fix reload chdir failure when also chrooted to that directory. - Fix to return formerr for queries for meta-types, to avoid packet amplification if this meta-type is sent on to upstream. - [bugzilla: 1201 ] Fix missing unlock in answer_from_cache error condition. - [bugzilla: 1202 ] Fix code comment that packed_rrset_data is not always 'packed'. - Fix to also block meta types 128 through to 248 with formerr. - [bugzilla: 1206 ] Fix that some view-related commands are missing from 'unbound-control h' Fix to rename ub_callback_t to ub_callback_type, because POSIX reserves _t typedefs. - Fix to rename internally used types from _t to _type, because _t type names are reserved by POSIX. - Increase MAX_MODULE to 16. - [bugzilla: 1211 ] Fix can't enable interface-automatic if no IPv6 with more helpful error message. - fix root_anchor test for updated icannbundle.pem lower certificates. - Fix compile on solaris of the fix to use $host detect. - Fix for type name change and fix warning on windows compile. - Fix pythonmod for typedef changes. - Fix dnstap for warning of set but not used. - Fix autoconf of systemd check for lack of pkg-config.
A commit references this bug: Author: wen Date: Wed Mar 8 01:48:34 UTC 2017 New revision: 435651 URL: https://svnweb.freebsd.org/changeset/ports/435651 Log: - Update to 1.6.1 PR: 217614 Submitted by: jaap@NLnetLabs.nl(maintainer) Changes: head/dns/unbound/Makefile head/dns/unbound/distinfo head/dns/unbound/files/unbound.in head/dns/unbound/pkg-plist