summaryrefslogtreecommitdiff
path: root/usr.sbin/unbound
AgeCommit message (Collapse)Author
2023-09-14satisfy non-c99 compilersTheo de Raadt
2023-09-11Improve handling of ENOBUFS by not running in a tight loop forever.Florian Obser
This cherry-picks upstream git commit 0ee44ef384593ed0382d1ce6048d5a9c9440b45c. Issue reported by landry@, which could be traced back to a buggy WiFi driver that would constantly return ENOBUFS. This in turn lead unwind(8) enter a tight loop through poll / sendto without making any progress and burning 100% cpu. OK sthen
2023-09-06remove doubled entry in config.h.inStuart Henderson
2023-09-06regenStuart Henderson
2023-09-06remove extra blank line to reduce changes to upstream in a locally-patched fileStuart Henderson
2023-09-06whitespace fixes, problem with util/tube.c pointed out by jsg (probablyStuart Henderson
introduced by the diff/patch process I use to avoid stomping on the local changes in updates)
2023-09-05oops, forgot to rm these before cvs importStuart Henderson
2023-09-05merge unbound-1.18.0Stuart Henderson
2023-09-05import unbound 1.18.0, ok florianStuart Henderson
2022-10-20remove file no longer present in unbound 1.17.0Stuart Henderson
2022-10-20merge unbound 1.17.0Stuart Henderson
2022-10-20import unbound 1.17.0, ok florianStuart Henderson
2022-09-23merge unbound 1.16.3Stuart Henderson
2022-08-29merge updatesStuart Henderson
2022-08-29import unbound 1.16.2, ok florian@ tb@ also tested by Alex HolstStuart Henderson
2022-06-07merge unbound 1.16.0Stuart Henderson
2022-06-07update to unbound 1.16.0, discussed with florian@, test from Renaud AllardStuart Henderson
2022-02-23merge upstream commit to unbound: "Fix that TCP interface does not useStuart Henderson
TLS when TLS is also configured"
2022-02-23merge unbound 1.15.0Stuart Henderson
2022-02-23update to unbound 1.15.0, ok florian@Stuart Henderson
2022-01-09unwind/unbound: prepare for opaque DSA and RSA.Theo Buehler
Use the OpenSSL 1.1 codepath using accessors that have been available since LibreSSL 2.7 instead of reaching into the structs. ok sthen
2021-11-19Allow interface names as scope-id in IPv6 link-local addresses.Florian Obser
For example, this makes forward-zone: name: "." forward-addr: fe80::20d:b9ff:fe46:c7f4%vio0 forward-first: yes work instead of using fe80::20d:b9ff:fe46:c7f4%1 for the forward-addr. This has been submitted upstream. sthen@ is fine with carrying this as a local diff. Requested by & OK kn
2021-08-13merge unbound-1.13.2 / regen configure, ok florianStuart Henderson
2021-08-13import unbound 1.13.2, ok florian@Stuart Henderson
2021-07-12Change the error reporting pattern throughout the tree when unveilBob Beck
fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion. Work done and verified by Ashton Fagg <ashton@fagg.id.au> ok deraadt@ semarie@ claudio@
2021-03-12merge unbound-1.13.1Stuart Henderson
2021-03-12update to unbound-1.13.1, tested by gnezdo@Stuart Henderson
2021-01-21Backport "Squelch udp connect 'no route to host' errors" from upstream.Stuart Henderson
Problem reported and diff tested by danj@ From 5906811ff19f005110b2edbda5aa144ad5fa05b1 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl> Date: Tue, 1 Dec 2020 09:09:13 +0100 Subject: [PATCH] - Fix #358: Squelch udp connect 'no route to host' errors on low verbosity.
2021-01-06do not call log_addr() when the address is NULLanton
ok florian@
2020-12-10merge unbound 1.13.0Stuart Henderson
2020-12-10import unbound 1.13.0, heavy lifting done by florian@Stuart Henderson
2020-11-11remove reference to non-existent pidfile;Jason McIntyre
issue raised by martin vahlensieck discussed with and ok sthen
2020-10-28merge Unbound 1.12.0Stuart Henderson
2020-10-28import Unbound 1.12.0, ok tb@Stuart Henderson
2020-08-24The kernel provides sufficiently randomised ports.Florian Obser
OK sthen
2020-08-24merge unbound 1.11.0Stuart Henderson
2020-08-24update to unbound 1.11.0, tests tb@ dtucker@, ok tb@Stuart Henderson
2020-06-02less convoluted Makefile, removes useless redirectionsMarc Espie
okay tb@, florian@
2020-05-19merge unbound 1.10.1Stuart Henderson
2020-05-08Use a union to ensure cmsg buffer is properly alignedJeremie Courreges-Anglas
Fix synced from unwind/libunbound. unwind(8) crash on landisk (strict alignement arch) reported by otto@, original diff ok deraadt@ otto@
2020-03-20remove unbound files that aren't really useful here, pointed out by florian@Stuart Henderson
2020-03-19merge update to Unbound 1.10.0Stuart Henderson
2020-03-19import Unbound 1.10.0, ok tb@Stuart Henderson
2019-12-21a few depend:-related thingies that were still in.Marc Espie
okay millert@, tb@
2019-12-18merge Unbound 1.9.6Stuart Henderson
2019-12-18import Unbound 1.9.6, ok tb florianStuart Henderson
2019-10-07As found by tb@, the name of the temporary file used when updating theStuart Henderson
root anchor changed in unbound 1.9.3, "Add hex print of trust anchor pointer to trust anchor file temp name to make it unique, for libunbound created multiple contexts". This isn't allowed by unbound-anchor's unveil; adjust to unveil the parent directory (typically /var/unbound/db, but generated from the filename). ok florian@ tb@
2019-10-04merge in the rest of unbound-1.9.4 (we already had the only code change)Stuart Henderson
2019-10-03Fix CVE-2019-16866Florian Obser
--- Recent versions of Unbound contain a problem that may cause Unbound to crash after receiving a specially crafted query. This issue can only be triggered by queries received from addresses allowed by Unbound's ACL. --- tested by benno, tb
2019-09-11merge unbound 1.9.3Stuart Henderson