Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-10-07 | merge unbound 1.21.1 | Stuart Henderson | |
2024-10-07 | Fix unbound CVE-2024-8508, put a limit on resources used for handling | Stuart Henderson | |
DNS compression. OK florian From unbound 1.21.1 (rest will be merged shortly). | |||
2024-09-04 | merge unbound 1.21.0 | Stuart Henderson | |
2024-09-04 | import unbound 1.21.0, ok phessler florian | Stuart Henderson | |
2020-08-24 | update to unbound 1.11.0, tests tb@ dtucker@, ok tb@ | Stuart Henderson | |
2019-09-11 | import unbound 1.9.3, thanks gonzalo@ dtucker@ for tests. | Stuart Henderson | |
2014-11-20 | update to Unbound 1.5.0, ok sthen@ | Brad Smith | |
2024-06-13 | merge unbound 1.20.0 | Stuart Henderson | |
2024-06-13 | import unbound 1.20.0, ok florian | Stuart Henderson | |
2024-04-13 | merge unbound 1.19.3 | Stuart Henderson | |
2024-04-13 | import unbound 1.19.3, ok florian | Stuart Henderson | |
2024-04-12 | merge unbound update | Stuart Henderson | |
2024-04-12 | import unbound 1.19.2, reminded by florian@ | Stuart Henderson | |
(yes I know there is a newer one, I'll update on top) | |||
2024-03-11 | apply https://nlnetlabs.nl/downloads/unbound/patch_CVE-2024-1931.diff to | Stuart Henderson | |
unbound, fixing an indefinite loop that could be triggered by a client against an unbound server where the (non-default) configuration "ede: yes" is used. https://nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt ok florian@ | |||
2024-02-13 | Fix for CVE-2023-50387 and CVE-2023-50868. | Florian Obser | |
Both can be used to cause high CPU load and potentially denial of service with specifically crafted DNSSEC responses. | |||
2018-09-17 | import unbound 1.7.3, testing from benno@ and Brad. | Stuart Henderson | |
2023-09-14 | satisfy non-c99 compilers | Theo de Raadt | |
2023-09-11 | Improve handling of ENOBUFS by not running in a tight loop forever. | Florian Obser | |
This cherry-picks upstream git commit 0ee44ef384593ed0382d1ce6048d5a9c9440b45c. Issue reported by landry@, which could be traced back to a buggy WiFi driver that would constantly return ENOBUFS. This in turn lead unwind(8) enter a tight loop through poll / sendto without making any progress and burning 100% cpu. OK sthen | |||
2023-09-06 | remove doubled entry in config.h.in | Stuart Henderson | |
2023-09-06 | regen | Stuart Henderson | |
2023-09-06 | remove extra blank line to reduce changes to upstream in a locally-patched file | Stuart Henderson | |
2023-09-06 | whitespace fixes, problem with util/tube.c pointed out by jsg (probably | Stuart Henderson | |
introduced by the diff/patch process I use to avoid stomping on the local changes in updates) | |||
2023-09-05 | oops, forgot to rm these before cvs import | Stuart Henderson | |
2023-09-05 | merge unbound-1.18.0 | Stuart Henderson | |
2023-09-05 | import unbound 1.18.0, ok florian | Stuart Henderson | |
2022-10-20 | remove file no longer present in unbound 1.17.0 | Stuart Henderson | |
2022-10-20 | merge unbound 1.17.0 | Stuart Henderson | |
2022-10-20 | import unbound 1.17.0, ok florian | Stuart Henderson | |
2022-09-23 | merge unbound 1.16.3 | Stuart Henderson | |
2022-08-29 | merge updates | Stuart Henderson | |
2022-08-29 | import unbound 1.16.2, ok florian@ tb@ also tested by Alex Holst | Stuart Henderson | |
2022-06-07 | merge unbound 1.16.0 | Stuart Henderson | |
2022-06-07 | update to unbound 1.16.0, discussed with florian@, test from Renaud Allard | Stuart Henderson | |
2022-02-23 | merge upstream commit to unbound: "Fix that TCP interface does not use | Stuart Henderson | |
TLS when TLS is also configured" | |||
2022-02-23 | merge unbound 1.15.0 | Stuart Henderson | |
2022-02-23 | update to unbound 1.15.0, ok florian@ | Stuart Henderson | |
2022-01-09 | unwind/unbound: prepare for opaque DSA and RSA. | Theo Buehler | |
Use the OpenSSL 1.1 codepath using accessors that have been available since LibreSSL 2.7 instead of reaching into the structs. ok sthen | |||
2021-11-19 | Allow interface names as scope-id in IPv6 link-local addresses. | Florian Obser | |
For example, this makes forward-zone: name: "." forward-addr: fe80::20d:b9ff:fe46:c7f4%vio0 forward-first: yes work instead of using fe80::20d:b9ff:fe46:c7f4%1 for the forward-addr. This has been submitted upstream. sthen@ is fine with carrying this as a local diff. Requested by & OK kn | |||
2021-08-13 | merge unbound-1.13.2 / regen configure, ok florian | Stuart Henderson | |
2021-08-13 | import unbound 1.13.2, ok florian@ | Stuart Henderson | |
2021-07-12 | Change the error reporting pattern throughout the tree when unveil | Bob Beck | |
fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion. Work done and verified by Ashton Fagg <ashton@fagg.id.au> ok deraadt@ semarie@ claudio@ | |||
2021-03-12 | merge unbound-1.13.1 | Stuart Henderson | |
2021-03-12 | update to unbound-1.13.1, tested by gnezdo@ | Stuart Henderson | |
2021-01-21 | Backport "Squelch udp connect 'no route to host' errors" from upstream. | Stuart Henderson | |
Problem reported and diff tested by danj@ From 5906811ff19f005110b2edbda5aa144ad5fa05b1 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl> Date: Tue, 1 Dec 2020 09:09:13 +0100 Subject: [PATCH] - Fix #358: Squelch udp connect 'no route to host' errors on low verbosity. | |||
2021-01-06 | do not call log_addr() when the address is NULL | anton | |
ok florian@ | |||
2020-12-10 | merge unbound 1.13.0 | Stuart Henderson | |
2020-12-10 | import unbound 1.13.0, heavy lifting done by florian@ | Stuart Henderson | |
2020-11-11 | remove reference to non-existent pidfile; | Jason McIntyre | |
issue raised by martin vahlensieck discussed with and ok sthen | |||
2020-10-28 | merge Unbound 1.12.0 | Stuart Henderson | |
2020-10-28 | import Unbound 1.12.0, ok tb@ | Stuart Henderson | |