We are pleased to announce the release of version 1.16.2 of the Unbound recursive DNS resolver.
This release fixes the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. They were reported by Xiang Li from the Network and Information Security Lab of Tsinghua University.
Other than that there are some bug fixes, and an option to configure the max retransmit timeout, infra-cache-max-rtt. If left at default it does not make any change.
For a full list of changes and binary and source packages, see the download page.