summaryrefslogtreecommitdiff
path: root/contrib/unbound
Commit message (Collapse)AuthorAgeFilesLines
* MFV r361322:Cy Schubert2020-05-2191-1584/+5248
| | | | | | | | | | | | | | | | | | Update unbound 1.9.6 --> 1.10.1. Bug Fixes: - CVE-2020-12662 Unbound can be tricked into amplifying an incoming query into a large number of queries directed to a target. - CVE-2020-12663 Malformed answers from upstream name servers can be used to make Unbound unresponsive. Reported by: emaste MFC after: 3 days Relnotes: yes Security: CVE-2020-12662, CVE-2020-12663 Notes: svn path=/head/; revision=361344
* Unbound's config.h is manually maintained, using a ./configure producedCy Schubert2020-01-131-1337/+0
| | | | | | | | | | | | config.h as a guide. In practice contributed software maintains a copy of config.h within its build directory tree containing its Makefile. usr.sbin/unbound is the home for its config.h. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D22983 Notes: svn path=/head/; revision=356676
* MFV r356143:Cy Schubert2019-12-3199-2003/+3924
| | | | | | | | | | Update unbound 1.9.2 --> 1.9.6. MFC after: 3 days Security: CVE-2019-18934 (fixed by 1.9.5) Notes: svn path=/head/; revision=356228
* Upgrade Unbound to 1.9.2.Dag-Erling Smørgrav2019-07-04102-1501/+4702
| | | | Notes: svn path=/head/; revision=349720
* Merge upstream r4932: turn so-reuseport option off by default.Dag-Erling Smørgrav2018-11-015-1/+25
| | | | | | | MFC after: 3 days Notes: svn path=/head/; revision=340037
* Try harder to sanitize the environment before running configure.Dag-Erling Smørgrav2018-10-101-9/+10
| | | | | | | | | Remove a workaround for older Unbound versions that used sbrk. Approved by: re (gjb) Notes: svn path=/head/; revision=339294
* Upgrade to 1.8.1.Dag-Erling Smørgrav2018-10-1048-312/+565
| | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339278
* Upgrade Unbound to 1.8.0. More to follow.Dag-Erling Smørgrav2018-10-1092-685/+2946
| | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339275
* Make unbound buildable.Jung-uk Kim2018-09-191-3/+3
| | | | Notes: svn path=/projects/openssl111/; revision=338778
* Revert r338774. Unrelated changes were committed with Apache Serf.Jung-uk Kim2018-09-191-3/+3
| | | | Notes: svn path=/projects/openssl111/; revision=338775
* Update Apache Serf to 1.3.9 to make it buildable with OpenSSL 1.1.1.Jung-uk Kim2018-09-191-3/+3
| | | | Notes: svn path=/projects/openssl111/; revision=338774
* Upgrade Unbound to 1.7.3. More to follow.Dag-Erling Smørgrav2018-09-1036-559/+688
| | | | | | | Approved by: re (kib@) Notes: svn path=/head/; revision=338569
* Upgrade Unbound to 1.7.2. More to follow.Dag-Erling Smørgrav2018-09-1050-184/+629
| | | | | | | Approved by: re (kib@) Notes: svn path=/head/; revision=338568
* Rename all Unbound binaries and man pages from unbound* to local-unbound*.Dag-Erling Smørgrav2018-05-125-5/+5
| | | | | | | PR: 222902 Notes: svn path=/head/; revision=333573
* Upgrade Unbound to 1.7.1.Dag-Erling Smørgrav2018-05-1284-271/+2828
| | | | Notes: svn path=/head/; revision=333568
* Upgrade Unbound to 1.7.0. More to follow.Dag-Erling Smørgrav2018-05-1287-1211/+8408
| | | | Notes: svn path=/head/; revision=333567
* Upgrade Unbound to 1.6.8. More to follow.Dag-Erling Smørgrav2018-05-1233-108/+193
| | | | Notes: svn path=/head/; revision=333566
* No reason to keep this around.Dag-Erling Smørgrav2018-05-1233-2565/+0
| | | | Notes: svn path=/head/; revision=333565
* Upgrade Unbound to 1.6.7. More to follow.Dag-Erling Smørgrav2018-05-1277-197/+847
| | | | Notes: svn path=/head/; revision=333564
* Upgrade Unbound to 1.6.6. More to follow.Dag-Erling Smørgrav2018-05-1266-351/+1526
| | | | Notes: svn path=/head/; revision=333563
* Upgrade Unbound to 1.6.5. More to follow.Dag-Erling Smørgrav2018-05-1216-281/+299
| | | | Notes: svn path=/head/; revision=333562
* Upgrade Unbound to 1.6.4. More to follow.Dag-Erling Smørgrav2018-05-12100-1392/+10584
| | | | Notes: svn path=/head/; revision=333561
* Upgrade Unbound to 1.6.3. More to follow.Dag-Erling Smørgrav2018-05-1222-39/+47
| | | | Notes: svn path=/head/; revision=333560
* Upgrade Unbound to 1.6.2. More to follow.Dag-Erling Smørgrav2018-05-1295-758/+8131
| | | | Notes: svn path=/head/; revision=333559
* Upgrade Unbound to 1.6.1. More to follow.Dag-Erling Smørgrav2018-05-12123-697/+2596
| | | | Notes: svn path=/head/; revision=333558
* Upgrade Unbound to 1.6.0. More to follow.Dag-Erling Smørgrav2018-05-1291-901/+3558
| | | | Notes: svn path=/head/; revision=333552
* Merge upstream r4302 to support multiple concurrently valid anchors.Dag-Erling Smørgrav2017-08-311-0/+6
| | | | | | | | | | | If an unpatched unbound-anchor is run without a preexisting root anchor between 2017-09-11 and 2017-10-11, it will fail and Unbound will not be able to start unless the validator is disabled. An EN will be issued with patches for existing systems and information on how to work around the issue on new installations. Notes: svn path=/head/; revision=323049
* Upgrade to Unbound 1.5.10.Dag-Erling Smørgrav2016-09-2999-342/+5537
| | | | Notes: svn path=/head/; revision=306457
* Upgrade to Unbound 1.5.9.Dag-Erling Smørgrav2016-09-0492-700/+4459
| | | | Notes: svn path=/head/; revision=305381
* Apply upstream r3651: the IPv6 address of the L root has changed.Dag-Erling Smørgrav2016-03-111-1/+1
| | | | Notes: svn path=/head/; revision=296659
* Upgrade to Unbound 1.5.8.Dag-Erling Smørgrav2016-03-0560-4388/+7457
| | | | Notes: svn path=/head/; revision=296415
* Use the new insecure-lan-zones option instead of listing each AS112 zoneDag-Erling Smørgrav2016-02-1113-113/+267
| | | | | | | | | separately. MFC after: 3 days Notes: svn path=/head/; revision=295535
* Root out files that don't really belong here and could in fact screwMaxim Sobolev2016-02-021-38/+0
| | | | | | | | | | | you over if you happen to use git for FreeBSD development, as it is the case with the unbound/.gitignore, which lits files that are actually required for the buildworld. MFC after: 1 day Notes: svn path=/head/; revision=295159
* Upgrade to Unbound 1.5.7.Dag-Erling Smørgrav2015-12-1482-608/+1832
| | | | Notes: svn path=/head/; revision=292206
* Ask make(1) which compiler to use rather than rely on whatever is in $PATH.Dag-Erling Smørgrav2015-12-121-0/+3
| | | | Notes: svn path=/head/; revision=292135
* Apply r3505 (s/SIGQUIT/SIGTERM/ in man page)Dag-Erling Smørgrav2015-10-141-1/+1
| | | | | | | PR: 203580 Notes: svn path=/head/; revision=289321
* Upgrade to Unbound 1.5.5.Dag-Erling Smørgrav2015-10-0942-98/+491
| | | | Notes: svn path=/head/; revision=289063
* When chrooted, we need to strip the chroot directory from the front ofDag-Erling Smørgrav2015-09-171-0/+4
| | | | | | | included paths. Don't forget to do it for globs as well. Notes: svn path=/head/; revision=287918
* Upgrade to Unbound 1.5.4.Dag-Erling Smørgrav2015-09-17122-557/+2476
| | | | Notes: svn path=/head/; revision=287917
* Upgrade Unbound to 1.5.3.Dag-Erling Smørgrav2015-04-2752-219/+764
| | | | Notes: svn path=/head/; revision=282089
* MFV (r277045): merge upstream version of the local socket patch.Dag-Erling Smørgrav2015-01-1214-744/+859
| | | | Notes: svn path=/head/; revision=277057
* mfv (r276698): support for remote control over local sockets.Dag-Erling Smørgrav2015-01-0517-102/+321
| | | | Notes: svn path=/head/; revision=276699
* Add generated files.Dag-Erling Smørgrav2015-01-033-0/+736
| | | | Notes: svn path=/head/; revision=276612
* Upgrade to Unbound 1.5.1. Almost all our local changes to date have beenDag-Erling Smørgrav2015-01-03131-2002/+9159
| | | | | | | adopted upstream, greatly reducing the diff. Notes: svn path=/head/; revision=276605
* Recognize the lexer and parser sources.Dag-Erling Smørgrav2015-01-031-2/+5
| | | | Notes: svn path=/head/; revision=276599
* MFV r275844:Xin LI2014-12-172-0/+50
| | | | | | | | | | Fix unbound remote denial of service vulnerability. Security: FreeBSD-SA-14:30.unbound Security: CVE-2014-8602 Notes: svn path=/head/; revision=275852
* Clean up the libunbound build to avoid accidentally regenerating theDag-Erling Smørgrav2014-07-197-6215/+39
| | | | | | | | | | | | configuration lexer and parser during buildworld. Instead of being included in the source as it is in the upstream distribution, the code is now always generated (in ${.OBJDIR}) at build time. PR: 190739 MFC after: 1 week Notes: svn path=/head/; revision=268883
* Import unblock-lan-zones feature backported from upstream svn trunk.Dag-Erling Smørgrav2014-07-1811-1414/+1508
| | | | | | | | | | | | This is a partial fix for reverse lookups in RFC 1918 networks. With this option enabled, unbound no longer ignores these queries; however, it will still reject the answer it gets from the forwarder, because the RFC 1918 reverse zones are signed. Submitted by: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl> Notes: svn path=/head/; revision=268839
* Move libworker_event_done_cb() from libworker.h to worker.h.Dag-Erling Smørgrav2014-05-272-4/+4
| | | | Notes: svn path=/head/; revision=266777
* regenerateDag-Erling Smørgrav2014-05-151-10/+10
| | | | Notes: svn path=/head/; revision=266180
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-13 15:33:34 +0000