aboutsummaryrefslogtreecommitdiff
path: root/contrib/unbound/iterator
Commit message (Collapse)AuthorAgeFilesLines
* Mitigate YXDOMAIN and nodata non-referral answer poisoning.Gordon Tetlow2025-11-261-4/+35
| | | | | | | | | | Add a fix to apply scrubbing of unsolicited NS RRSets (and their respective address records) for YXDOMAIN and nodata non-referral answers. This prevents a malicious actor from exploiting a possible cache poison attack. Obtained from: NLnet Labs Security: CVE-2025-11411
* unbound: Vendor import 1.24.1Cy Schubert2025-10-231-0/+16
| | | | | | | | | | Release notes at https://nlnetlabs.nl/news/2025/Oct/22/unbound-1.24.1-released/ Security: CVE-2025-11411 MFC after: 3 days Merge commit '73dd92916f532cb3fe353220103babe576d30a15'
* unbound: Vendor import 1.24.0Cy Schubert2025-10-073-18/+56
| | | | | | | | | Release notes at https://nlnetlabs.nl/news/2025/Sep/18/unbound-1.24.0-released/ MFC after: 1 week Merge commit '0064eb9cf1c8d526e87d3149249445d4bc8d0248'
* unbound: Vendor import 1.23.0Cy Schubert2025-04-279-104/+290
| | | | | | | | | Release notes at https://nlnetlabs.nl/news/2025/Apr/24/unbound-1.23.0-released/ MFC after: 2 weeks Merge commit '44bab727dfe28451b777dc9e47db4f748b709182'
* unbound: Vendor import 1.22.0Cy Schubert2024-10-185-23/+130
| | | | | | | | | Release notes at https://nlnetlabs.nl/news/2024/Oct/17/unbound-1.22.0-released/ MFC after: 1 week Merge commit '0a6d797cf6eb751d7eb613900cd19803e05d905f' into main
* unbound: Vendor import 1.21.0Cy Schubert2024-08-164-35/+180
| | | | | | | | | Release notes at https://nlnetlabs.nl/news/2024/Aug/15/unbound-1.21.0-released/ MFC after: 1 week Merge commit '96ef46e5cff01648c80c09c4364d10bc6f58119d'
* unbound: Vendor import 1.20.0Cy Schubert2024-05-107-170/+521
| | | | | | | | | Release notes at https://www.nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/ Security: The DNSBomb vulnerability CVE-2024-33655 Merge commit 'c2a80056864d6eda0398fd127dc0ae515b39752b' into main
* unbound: Vendor import 1.19.3Cy Schubert2024-03-174-9/+8
| | | | | | | | | Release notes at https://www.nlnetlabs.nl/news/2024/Mar/14/unbound-1.19.3-released/ MFC after: 1 week Merge commit '5a33598e88ad8fbc0affa74dee0a2d8cc4010fbc' into main
* unbound: Vendor import 1.19.0Cy Schubert2023-11-137-41/+167
| | | | | | | | | Release notes at https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/ MFC after: 2 weeks Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound
* unbound: Vendor import 1.18.0Cy Schubert2023-09-198-107/+339
| | | | | | | | | Release notes at https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/ MFC after: 2 weeks Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main
* unbound: Vendor import 1.17.1Cy Schubert2023-01-153-8/+11
| | | | | | | | | Release notes at https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/. MFC after: 1 month Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main
* unbound: Reapply Vendor import 1.17.0Cy Schubert2022-10-164-36/+79
| | | | | | | | | | | Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a mismerge during fake rebase. Let's reapply it. Changes include: Added ACL per interface, proxy protocol and bug fixes. Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/ Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main
* Revert "unbound: Vendor import 1.17.0"Cy Schubert2022-10-164-79/+36
| | | | | | | This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1. Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.
* unbound: Vendor import 1.17.0Cy Schubert2022-10-164-36/+79
| | | | | | | | Added ACL per interface, proxy protocol and bug fixes. Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/ Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge
* unbound: Vendor import 1.16.3Cy Schubert2022-09-295-1/+52
| | | | | | | | | | | Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'. MFC after: 3 days Security: CVE-2022-3204 Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/ Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main
* unbound: Vendor import 1.16.2Cy Schubert2022-08-064-17/+27
| | | | | | | | | | | Security update to unbound. PR: 265645 Security: CVE-2022-30698, CVE-2022-30699 Security: bc43a578-14ec-11ed-856e-d4c9ef517024 MFC after: 3 days Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main
* unbound: Vendor import 1.16.1Cy Schubert2022-07-135-57/+206
| | | | | | Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2 MFC after: 1 month
* unbound: Vendor import 1.16.0Cy Schubert2022-06-084-26/+47
| | | | | | Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main MFC after: 1 month
* unbound: Vendor import 1.15.0Cy Schubert2022-02-186-114/+133
| | | | | | Vendor import GA release of unbound 1.15.0. MFC after: 2 weeks
* unbount: Vendor import 1.14.0rc1Cy Schubert2021-12-038-91/+158
| | | | | | | | This vendor import was requested by glebius@ as it should fix unbound crashes. Reported by: glebius MFC after: 1 week
* unbound: Vendor import 1.13.2Cy Schubert2021-08-175-17/+151
| | | | | | Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef' MFC after: 1 month
* MFV r367082:Cy Schubert2020-10-271-1/+1
| | | | | | | | | Update unbound 1.11.0 --> 1.12.0. MFC after: 1 month. Notes: svn path=/head/; revision=367094
* MFV 364468:Cy Schubert2020-08-243-7/+66
| | | | | | | | | Update unbound 1.10.1 --> 1.11.0. MFH: 1 month Notes: svn path=/head/; revision=364721
* MFV r361322:Cy Schubert2020-05-216-67/+205
| | | | | | | | | | | | | | | | | | Update unbound 1.9.6 --> 1.10.1. Bug Fixes: - CVE-2020-12662 Unbound can be tricked into amplifying an incoming query into a large number of queries directed to a target. - CVE-2020-12663 Malformed answers from upstream name servers can be used to make Unbound unresponsive. Reported by: emaste MFC after: 3 days Relnotes: yes Security: CVE-2020-12662, CVE-2020-12663 Notes: svn path=/head/; revision=361344
* MFV r356143:Cy Schubert2019-12-312-0/+8
| | | | | | | | | | Update unbound 1.9.2 --> 1.9.6. MFC after: 3 days Security: CVE-2019-18934 (fixed by 1.9.5) Notes: svn path=/head/; revision=356228
* Upgrade Unbound to 1.9.2.Dag-Erling Smørgrav2019-07-047-84/+286
| | | | Notes: svn path=/head/; revision=349720
* Upgrade to 1.8.1.Dag-Erling Smørgrav2018-10-102-5/+15
| | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339278
* Upgrade Unbound to 1.8.0. More to follow.Dag-Erling Smørgrav2018-10-106-11/+223
| | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339275
* Upgrade Unbound to 1.7.3. More to follow.Dag-Erling Smørgrav2018-09-101-14/+32
| | | | | | | Approved by: re (kib@) Notes: svn path=/head/; revision=338569
* Upgrade Unbound to 1.7.2. More to follow.Dag-Erling Smørgrav2018-09-101-2/+2
| | | | | | | Approved by: re (kib@) Notes: svn path=/head/; revision=338568
* Upgrade Unbound to 1.7.1.Dag-Erling Smørgrav2018-05-127-37/+100
| | | | Notes: svn path=/head/; revision=333568
* Upgrade Unbound to 1.7.0. More to follow.Dag-Erling Smørgrav2018-05-127-110/+329
| | | | Notes: svn path=/head/; revision=333567
* Upgrade Unbound to 1.6.7. More to follow.Dag-Erling Smørgrav2018-05-123-14/+14
| | | | Notes: svn path=/head/; revision=333564
* Upgrade Unbound to 1.6.6. More to follow.Dag-Erling Smørgrav2018-05-122-4/+22
| | | | Notes: svn path=/head/; revision=333563
* Upgrade Unbound to 1.6.4. More to follow.Dag-Erling Smørgrav2018-05-122-31/+77
| | | | Notes: svn path=/head/; revision=333561
* Upgrade Unbound to 1.6.2. More to follow.Dag-Erling Smørgrav2018-05-121-3/+52
| | | | Notes: svn path=/head/; revision=333559
* Upgrade Unbound to 1.6.1. More to follow.Dag-Erling Smørgrav2018-05-1210-17/+17
| | | | Notes: svn path=/head/; revision=333558
* Upgrade Unbound to 1.6.0. More to follow.Dag-Erling Smørgrav2018-05-126-71/+102
| | | | Notes: svn path=/head/; revision=333552
* Upgrade to Unbound 1.5.10.Dag-Erling Smørgrav2016-09-294-13/+67
| | | | Notes: svn path=/head/; revision=306457
* Upgrade to Unbound 1.5.9.Dag-Erling Smørgrav2016-09-045-38/+137
| | | | Notes: svn path=/head/; revision=305381
* Apply upstream r3651: the IPv6 address of the L root has changed.Dag-Erling Smørgrav2016-03-111-1/+1
| | | | Notes: svn path=/head/; revision=296659
* Upgrade to Unbound 1.5.7.Dag-Erling Smørgrav2015-12-144-9/+200
| | | | Notes: svn path=/head/; revision=292206
* Upgrade to Unbound 1.5.5.Dag-Erling Smørgrav2015-10-092-3/+3
| | | | Notes: svn path=/head/; revision=289063
* Upgrade to Unbound 1.5.4.Dag-Erling Smørgrav2015-09-1710-22/+219
| | | | Notes: svn path=/head/; revision=287917
* Upgrade Unbound to 1.5.3.Dag-Erling Smørgrav2015-04-274-5/+59
| | | | Notes: svn path=/head/; revision=282089
* Upgrade to Unbound 1.5.1. Almost all our local changes to date have beenDag-Erling Smørgrav2015-01-036-26/+66
| | | | | | | adopted upstream, greatly reducing the diff. Notes: svn path=/head/; revision=276605
* MFV r275844:Xin LI2014-12-172-0/+50
| | | | | | | | | | Fix unbound remote denial of service vulnerability. Security: FreeBSD-SA-14:30.unbound Security: CVE-2014-8602 Notes: svn path=/head/; revision=275852
* Upgrade to latest ldns (1.6.17) and unbound (1.4.22).Dag-Erling Smørgrav2014-05-1518-398/+509
| | | | | | | MFC after: 3 weeks Notes: svn path=/head/; revision=266114
* Upgrade to 1.4.20.Dag-Erling Smørgrav2013-04-055-85/+104
| | | | Notes: svn path=/head/; revision=249141
* Minimal subset of the unbound sources.Dag-Erling Smørgrav2013-04-0518-0/+8943
Notes: svn path=/head/; revision=249140