We are pleased to announce the release of version 1.7.3 of the Unbound recursive DNS resolver.
This release fixes a bug in qname minimisation, from 1.7.1, that double counts CNAMEs and this causes resolution failures because the maximum CNAME count is hit. This caught attention because since 1.7.2 qname minimisation is enabled by default.
For a local name unix pipe unbound-control setup, with the pathname of the socket configured in control-interface, Unbound now uses an unencrypted connection. Permissions can be configured by setting them on the directory the file is in, unbound creates the file with permissions that allow members of the group of the user that is configured unbound.conf access. This fix is also part of NSD nsd-control.
For a full list of changes and binary and source packages, see the download page.