Commit Graph

104 Commits

Author SHA256 Message Date
050def245d Accepting request 1045741 from home:wfrisch:branches:server:dns
- Tighten permissions (boo#1173619)
- Add missing dependency: unbound-control-setup needs /usr/bin/openssl.

OBS-URL: https://build.opensuse.org/request/show/1045741
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=158
2023-02-23 10:39:45 +00:00
0818938ece Accepting request 1010533 from home:stroeder:network
update to 1.17.0

OBS-URL: https://build.opensuse.org/request/show/1010533
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=156
2022-11-02 11:12:43 +00:00
c4d0dd3e2b Accepting request 1005278 from home:stroeder:network
update to 1.16.3:  fixes Non-Responsive Delegation Attack (CVE-2022-3204)

OBS-URL: https://build.opensuse.org/request/show/1005278
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=154
2022-09-26 12:51:25 +00:00
bead0518ec add bugrefences
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=152
2022-08-01 14:09:30 +00:00
61ce99b18f Accepting request 992035 from home:stroeder:network
Update to 1.16.2 which fixes the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.

OBS-URL: https://build.opensuse.org/request/show/992035
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=151
2022-08-01 14:08:30 +00:00
d94c740036 Accepting request 988331 from home:stroeder:network
update to 1.16.1

OBS-URL: https://build.opensuse.org/request/show/988331
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=149
2022-07-18 11:02:50 +00:00
Darin Perusich
5da47f4e27 Accepting request 980515 from home:stroeder:network
update to 1.16.0

OBS-URL: https://build.opensuse.org/request/show/980515
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=147
2022-06-18 16:18:29 +00:00
cdd3f40e20 Accepting request 974920 from home:dirkmueller:Factory
- spec-cleaner
- update to 1.15.0 

- drop python2 packages
- update to 1.15.0:
  This release has bug fixes for crashes that happened on heavy network
  usage. The default for the aggressive-nsec option has changed, it is now
  enabled.
  The ratelimit logic had to be reworked for the crash fixes. As a result,
  there are new options to control the behaviour of ratelimiting.
  The ratelimit-backoff and ip-ratelimit-backoff options can be used to
  control how severe the backoff is when the ratelimit is exceeded.
  The rpz-signal-nxdomain-ra option can be used to unset the RA flag, for
  NXDOMAIN answers from RPZ. That is used by some clients to detect that
  the domain is externally blocked. The RPZ option for-downstream can be
  used like for auth zones, this allows the RPZ zone information to be queried.
  That can be useful for monitoring scripts.
  Features
  - Fix #596: unset the RA bit when a query is blocked by an unbound
    RPZ nxdomain reply. The option rpz-signal-nxdomain-ra allows to
    signal that a domain is externally blocked to clients when it
    is blocked with NXDOMAIN by unsetting RA.
  - Add rpz: for-downstream: yesno option, where the RPZ zone is
    authoritatively answered for, so the RPZ zone contents can be
    checked with DNS queries directed at the RPZ zone.
  - Merge PR #616: Update ratelimit logic. It also introduces
    ratelimit-backoff and ip-ratelimit-backoff configuration options.
  - Change aggressive-nsec default to yes.
  Bug Fixes
  - Fix compile warning for if_nametoindex on windows 64bit.

OBS-URL: https://build.opensuse.org/request/show/974920
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=145
2022-05-04 13:05:55 +00:00
683e2b02c6 Accepting request 943368 from home:gmbr3:Active
- Change to systemd-sysusers

OBS-URL: https://build.opensuse.org/request/show/943368
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=144
2022-05-04 09:41:24 +00:00
Michael Ströder
c7307c6222 Accepting request 937761 from home:stroeder:network
update to 1.14.0

OBS-URL: https://build.opensuse.org/request/show/937761
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=143
2021-12-09 12:01:58 +00:00
Michael Ströder
85bbd8d63c Accepting request 925668 from home:toganm:branches:server:dns
- Fix pidfile location 
- Fix pidfile location

OBS-URL: https://build.opensuse.org/request/show/925668
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=142
2021-10-16 17:07:16 +00:00
Michael Ströder
d2f5f428af Accepting request 911864 from home:stroeder:network
update to 1.13.2

OBS-URL: https://build.opensuse.org/request/show/911864
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=141
2021-08-12 20:10:06 +00:00
Michael Ströder
413f89d9c5 Accepting request 896843 from home:toganm:branches:server:dns
Enable DNS over HTTPS which is possible since 1.12.0

OBS-URL: https://build.opensuse.org/request/show/896843
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=139
2021-06-02 09:51:39 +00:00
Michael Ströder
0be9ff5267 Accepting request 892306 from home:elvigia:branches:server:dns
- Use --disable-explicit-port-randomisation, the linux kernel
  has source port randomization by default if port is 0 since ages.

- Use --disable-explicit-port-randomisation, the linux kernel
  has source port randomization by default if port is 0 since ages.

OBS-URL: https://build.opensuse.org/request/show/892306
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=138
2021-06-01 11:19:28 +00:00
Michael Ströder
280052b8ef Accepting request 870501 from home:stroeder:network
update to 1.13.1

OBS-URL: https://build.opensuse.org/request/show/870501
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=136
2021-02-09 11:09:32 +00:00
Michael Ströder
600207e484 Accepting request 852892 from home:stroeder:branches:server:dns
update to 1.13.0

OBS-URL: https://build.opensuse.org/request/show/852892
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=134
2020-12-03 11:53:51 +00:00
Michael Ströder
c81c38a4c4 Accepting request 840202 from home:stroeder:branches:server:dns
update to 1.12.0

OBS-URL: https://build.opensuse.org/request/show/840202
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=132
2020-10-08 08:48:13 +00:00
Michael Ströder
61825cd8a1 Accepting request 822962 from home:stroeder:branches:server:dns
update to 1.11.0

OBS-URL: https://build.opensuse.org/request/show/822962
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=130
2020-07-27 11:41:56 +00:00
Michael Ströder
16f7d215db OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=128 2020-05-19 11:43:47 +00:00
Michael Ströder
1b47afa1a5 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=127 2020-05-19 11:43:39 +00:00
Michael Ströder
88ffddd376 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=126 2020-05-19 11:43:05 +00:00
Michael Ströder
62ddb10e65 Accepting request 807213 from home:stroeder:branches:server:dns
update to 1.10.1 with security fixes

OBS-URL: https://build.opensuse.org/request/show/807213
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=125
2020-05-19 11:07:03 +00:00
Marguerite Su
3b2fab437b Accepting request 777757 from home:stroeder:branches:server:dns
Update to 1.10.0. Successfully tested on Tumbleweed x86_64.

OBS-URL: https://build.opensuse.org/request/show/777757
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=123
2020-02-22 03:16:25 +00:00
Michael Ströder
1b132c4593 Accepting request 758270 from home:dimstar:Factory
Allow systemd-mini

OBS-URL: https://build.opensuse.org/request/show/758270
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=121
2019-12-19 20:13:29 +00:00
Michael Ströder
10b397f69c Accepting request 756734 from home:stroeder:branches:server:dns
update to 1.9.6

OBS-URL: https://build.opensuse.org/request/show/756734
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=120
2019-12-15 09:21:22 +00:00
Michael Ströder
fbfc0fa670 Accepting request 749749 from home:stroeder:branches:server:dns
- update to 1.9.5
  Fix for CVE-2019-18934

OBS-URL: https://build.opensuse.org/request/show/749749
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=118
2019-11-27 20:00:56 +00:00
Michael Ströder
dd01570bac Accepting request 734812 from home:stroeder:branches:server:dns
update to 1.9.4 with fix for CVE-2019-16866

OBS-URL: https://build.opensuse.org/request/show/734812
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=116
2019-10-03 14:25:08 +00:00
Michael Ströder
0200c0612b Accepting request 726828 from home:stroeder:branches:server:dns
update to 1.9.3

OBS-URL: https://build.opensuse.org/request/show/726828
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=114
2019-08-29 09:22:21 +00:00
Michael Ströder
f720a796be Accepting request 725966 from home:cboltz:branches:server:dns
- change tmpfiles-unbound.conf from /var/run/ to /run/ to silence
  systemd-tmpfiles warning

Related log line:
Aug 25 11:52:32 tux systemd-tmpfiles[721]: [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/, updating /var/run/unbound → /run/unbound; please update the tmpfiles.d/ drop-in file accordingly.

OBS-URL: https://build.opensuse.org/request/show/725966
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=113
2019-08-27 07:56:44 +00:00
Marguerite Su
ef6eb5c0ee Accepting request 719573 from home:dimstar:Factory
- Update the Conflict in libunbound-devel-mini after the library
  package name from libunbound2 to libunbond8.

OBS-URL: https://build.opensuse.org/request/show/719573
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=111
2019-07-31 04:01:23 +00:00
Michael Ströder
19a795f3af Accepting request 719515 from home:dstoecker
- Correct library version from 2 to 8

OBS-URL: https://build.opensuse.org/request/show/719515
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=110
2019-07-29 08:59:12 +00:00
Michael Ströder
788ded6a89 Accepting request 718879 from home:mgerstner:branches:server:dns
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

OBS-URL: https://build.opensuse.org/request/show/718879
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=109
2019-07-26 13:24:45 +00:00
Michael Ströder
1e9319f5e7 Accepting request 710430 from home:stroeder:branches:server:dns
update to 1.9.2

OBS-URL: https://build.opensuse.org/request/show/710430
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=107
2019-06-19 06:19:39 +00:00
Michael Ströder
eb4a783d92 Accepting request 693926 from home:dstoecker
For hash-slinger I need python2 variant of unbound. This SR changes the build, so that python2 and python3 are built. I also dropped all pre-Leap version checks - they are long outdated.

P.S. Please remove the last sentence in the OBS package information. It's simply wrong :-)

OBS-URL: https://build.opensuse.org/request/show/693926
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=105
2019-04-14 07:33:27 +00:00
Michael Ströder
eacb0eb027 Accepting request 686226 from home:stroeder:branches:server:dns
removed accidently added PGP signature file

OBS-URL: https://build.opensuse.org/request/show/686226
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=103
2019-03-18 20:22:27 +00:00
Michael Ströder
72c24a8616 Accepting request 686172 from home:stroeder:branches:server:dns
update to 1.9.1

OBS-URL: https://build.opensuse.org/request/show/686172
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=102
2019-03-18 20:08:16 +00:00
Michael Ströder
0898e5036a Accepting request 680171 from home:rtorrero:branches:server:dns
- Remove old pwdutils dependency and add shadow to cover both useradd 
  and groupadd as suggested in (bsc#1126757)

OBS-URL: https://build.opensuse.org/request/show/680171
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=100
2019-02-28 20:01:29 +00:00
Marguerite Su
455ebc820a Accepting request 664071 from home:dimstar:Factory
- Require /usr/sbin/useradd to be present before installation, as
  we run it in the %pre script.

OBS-URL: https://build.opensuse.org/request/show/664071
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=98
2019-01-12 02:29:52 +00:00
Marguerite Su
e06e1c64ed Accepting request 661852 from home:jengelh:branches:server:dns
- Reorder scriptlet %if guards so that no empty scriptlets are
  emitted. Add one missing %if %{with systemd}.
- Replace %__-type macro indirections.

OBS-URL: https://build.opensuse.org/request/show/661852
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=96
2018-12-29 13:03:29 +00:00
Marguerite Su
47ec6e5b44 Accepting request 657300 from home:rtorrero:branches:server:dns
- Migrate from cron to systemd timers (bsc#1115417)

OBS-URL: https://build.opensuse.org/request/show/657300
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=94
2018-12-21 06:38:50 +00:00
Michael Ströder
cfd08afadc Accepting request 657317 from home:stroeder:branches:server:dns
- update to 1.8.3 fixes crash bug introduced in 1.8.2

OBS-URL: https://build.opensuse.org/request/show/657317
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=92
2018-12-11 20:31:00 +00:00
Michael Ströder
6b7302fd9c Accepting request 655316 from home:stroeder:branches:server:dns
update to 1.8.2

OBS-URL: https://build.opensuse.org/request/show/655316
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=91
2018-12-10 09:58:05 +00:00
Marguerite Su
3cd2e1bceb Accepting request 645289 from home:dstoecker:oldos
- Drop pre-rollover key 19036 from 2010, only leave 2017/2018 rollover
  key 20326 (bsc#1112009, bsc#1004165)

A temporary fix in my eyes - long term solution should be to find an way to generate these files on installation.

OBS-URL: https://build.opensuse.org/request/show/645289
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=89
2018-11-03 02:58:17 +00:00
Marguerite Su
a2bedc10be Accepting request 642550 from home:kbabioch:branches:server:dns
OBS-URL: https://build.opensuse.org/request/show/642550
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=88
2018-10-23 12:56:35 +00:00
Marguerite Su
dd5b03221d Accepting request 640639 from home:stroeder:branches:server:dns
- update to 1.8.1

OBS-URL: https://build.opensuse.org/request/show/640639
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=86
2018-10-09 07:26:09 +00:00
Marguerite Su
1b7e9529ed Accepting request 636218 from home:stroeder:branches:server:dns
- update to 1.8.0:
  Number of bug fixes, a list of features added and some defaults changed.

OBS-URL: https://build.opensuse.org/request/show/636218
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=84
2018-09-18 05:58:24 +00:00
Michael Ströder
49ad22bd35 Accepting request 618275 from home:stroeder:branches:server:dns
update to 1.7.3

OBS-URL: https://build.opensuse.org/request/show/618275
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=82
2018-06-21 09:25:17 +00:00
Michael Ströder
a74344f40c Accepting request 616062 from home:stroeder:branches:server:dns
update to 1.7.2

OBS-URL: https://build.opensuse.org/request/show/616062
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=80
2018-06-11 14:45:25 +00:00
Michael Ströder
a605d664bf Accepting request 613074 from home:dstoecker
Hello,

some changes to unbound. Add the upcomming trust anchors and make the trust files readable for everyone (I need this for especially for opendkim, which uses unbound library and needs these files).

The changes are similar to the ones done for other distributions. Debian also patches the source code to add new keys. I don't like this much, so I only changed the configuration files.

This change should have been done last year already. While properly setup systems will follow the rollover without interaction, a new installation of the package should also work AFTER the rollover and this requires the new keys to be in the package already.

When accepting the submit request please verify the added key data against the original sources!

- add upcomming key rollover trust anchor
- make trust anchor files world readable - these files are open
  knowledge and will be used by other software packages

OBS-URL: https://build.opensuse.org/request/show/613074
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=78
2018-05-30 14:17:02 +00:00
Michael Ströder
7b95b838e1 Accepting request 603827 from home:stroeder:branches:server:dns
update to 1.7.1

OBS-URL: https://build.opensuse.org/request/show/603827
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=76
2018-05-04 11:23:07 +00:00