WORK UNBOUND CLUB FREE
WORK UNBOUND CLUB WINDOWS

Fix #637: Integer Overflow in sldns_str2period function.

Various fixes for #632: variable initialisation, convert the qinfo to str once, accept trailing dot in the local-zone ipset option.

Merge PR #632 from scottrw93: Match cnames in ipset.

Fix compile warnings for printf ll format on mingw compile.

Fix pythonmod for change in iter_dp_is_useless function prototype.

Fix for edns client subnet option add fix in removal code, from review.

Fix edns client subnet to add the option based on the option list, so that it is not state dependent, after the state fix of #605 for double EDNS options.

Fix for #633: updated fix with new text.

Fix #633: Document unix domain socket support for unbound-control.

Fix check interface existence for support detection in remote lookup.

Fix to detect that no IPv6 support means that IPv6 addresses are useless for delegation point lookups.

Merge #631 from mollyim: Replace OpenSSL's ERR_PACK with ERR_GET_REASON.

Fix that address not available is squelched from the logs for udp connect failures.

Fix for #628: fix rpz-passthru for qname trigger by localzone type.

Fix #628: A rpz-passthru action is not ending RPZ zone processing.

Adds the option to list interface-automatic-ports.

Fix #618: enabling interface-automatic disables DNS-over-TLS.

WORK UNBOUND CLUB WINDOWS

Fix #624: Unable to stop Unbound in Windows console (does not respond to CTRL+C command).

Fix that TCP interface does not use TLS when TLS is also configured.Fix #412: cache invalidation issue with CNAME+A.Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets.Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for one loop pass'.Reintroduce documentation and more EDE support for val_sigcrypt.c::dnskeyset_verify_rrset_sig.Improve val_sigcrypt.c::algo_needs_missing for one loop pass.Fix for correct openssl error when adding windows CA certificates to the openssl trust store.For #660: formatting, less verbose logging, add EDE information.Merge PR #660 from Petr Menšík: Sha1 runtime insecure.Merge PR #671 from Petr Menšík: Disable ED25519 and ED448 in FIPS mode on openssl3.From #706: When a lame address is the best choice, don't try to generate target queries when the missing targets are all lame.From #706: Don't generate parent side queries if we already have the lame records in cache.From #706: Cached NXDOMAIN does not increase the target nx responses.Fix compile warning for windows compile.Fix detection of libz on windows compile with static option.This will also allow MAX_TARGET_NX more NXDOMAINs. Allow fallback to the parent side when MAX_TARGET_NX is reached.Fix to not count cached NXDOMAIN for MAX_TARGET_NX.Add debug option to the mini_tdir.sh test code.Fix for cached 0 TTL records to not trigger prefetching when serve-expired-client-timeout is set.Fix test program dohclient close to use portability routine.

WORK UNBOUND CLUB FREE

Fix #663: use after free issue with edns options.

Fix for loading locally stored zones that have lines with blanks or blanks and comments.Remove unused LDNS function check for GOST Engine unloading.Note in the nf text that NOTIFY is allowed from the 'url:' addresses for auth and rpz zones.Fix for edns client subnet to respect not looking in its cache when instructed to do so (e.g., prefetch).makedist.sh picks up 32bit libssp-0.dll when 32bit compile.

Work unbound club