- update to 1.16.1:
* Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
one loop pass'.
* Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on
outbound tcp sockets.
* Merge PR #671 from Petr Menšík: Disable ED25519 and ED448 in FIPS
mode on openssl3.
* Merge PR #660 from Petr Menšík: Sha1 runtime insecure.
* For #660: formatting, less verbose logging, add EDE information.
* Fix for correct openssl error when adding windows CA certificates to
the openssl trust store.
* Improve val_sigcrypt.c::algo_needs_missing for one loop pass.
* Reintroduce documentation and more EDE support for
val_sigcrypt.c::dnskeyset_verify_rrset_sig.
* Merge PR #706: NXNS fallback.
* From #706: Cached NXDOMAIN does not increase the target nx
responses.
* From #706: Don't generate parent side queries if we already
have the lame records in cache.
* From #706: When a lame address is the best choice, don't try to
generate target queries when the missing targets are all lame.
* iana portlist update.
* Fix detection of libz on windows compile with static option.
* Fix compile warning for windows compile.
* Add debug option to the mini_tdir.sh test code.
* Fix #704: [FR] Statistics counter for number of outgoing UDP queries
sent; introduces 'num.query.udpout' to the 'unbound-control stats'
command.
* Fix to not count cached NXDOMAIN for MAX_TARGET_NX.
* Allow fallback to the parent side when MAX_TARGET_NX is reached.