diff -Nru unbound-1.4.22/debian/changelog unbound-1.4.22/debian/changelog --- unbound-1.4.22/debian/changelog 2015-01-08 16:38:25.000000000 +0100 +++ unbound-1.4.22/debian/changelog 2015-07-16 12:48:24.000000000 +0200 @@ -1,3 +1,13 @@ +unbound (1.4.22-1ubuntu4.14.04.2) trusty; urgency=medium + + * Make some lookups on a dual stacked (IPv4 and IPv6) host work. + - debian/patches/increase-max_sent_count: Increase MAX_SENT_COUNT to 32, + backported from Unbound 1.5.0 (LP: #1472510). + - Can be verified with: + # unbound-host -f /var/lib/unbound/root.key a.root-servers.net + + -- Patrik Lundin Thu, 16 Jul 2015 12:45:58 +0200 + unbound (1.4.22-1ubuntu4.14.04.1) trusty-security; urgency=medium * SECURITY UPDATE: denial of service via large number of referrals diff -Nru unbound-1.4.22/debian/patches/increase-max_sent_count unbound-1.4.22/debian/patches/increase-max_sent_count --- unbound-1.4.22/debian/patches/increase-max_sent_count 1970-01-01 01:00:00.000000000 +0100 +++ unbound-1.4.22/debian/patches/increase-max_sent_count 2015-07-16 12:48:52.000000000 +0200 @@ -0,0 +1,17 @@ +Description: Change MAX_SENT_COUNT from 16 to 32 to resolve some cases easier. +Origin: upstream, http://unbound.nlnetlabs.nl/svn/ revision 3127 +Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510 + +Index: unbound-1.4.22/iterator/iterator.h +=================================================================== +--- unbound-1.4.22.orig/iterator/iterator.h 2015-07-16 12:42:41.000000000 +0200 ++++ unbound-1.4.22/iterator/iterator.h 2015-07-16 12:44:34.880857528 +0200 +@@ -59,7 +59,7 @@ + /** max number of referrals. Makes sure resolver does not run away */ + #define MAX_REFERRAL_COUNT 130 + /** max number of queries-sent-out. Make sure large NS set does not loop */ +-#define MAX_SENT_COUNT 16 ++#define MAX_SENT_COUNT 32 + /** at what query-sent-count to stop target fetch policy */ + #define TARGET_FETCH_STOP 3 + /** how nice is a server without further information, in msec diff -Nru unbound-1.4.22/debian/patches/series unbound-1.4.22/debian/patches/series --- unbound-1.4.22/debian/patches/series 2015-01-08 16:37:50.000000000 +0100 +++ unbound-1.4.22/debian/patches/series 2015-07-16 12:44:04.000000000 +0200 @@ -3,3 +3,4 @@ silence_open_files_limit_warning disable_remote_control_in_tests CVE-2014-8602.patch +increase-max_sent_count