050def245d
Accepting request 1045741 from home:wfrisch:branches:server:dns
...
- Tighten permissions (boo#1173619)
- Add missing dependency: unbound-control-setup needs /usr/bin/openssl.
OBS-URL: https://build.opensuse.org/request/show/1045741
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=158
2023-02-23 10:39:45 +00:00
0818938ece
Accepting request 1010533 from home:stroeder:network
...
update to 1.17.0
OBS-URL: https://build.opensuse.org/request/show/1010533
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=156
2022-11-02 11:12:43 +00:00
c4d0dd3e2b
Accepting request 1005278 from home:stroeder:network
...
update to 1.16.3: fixes Non-Responsive Delegation Attack (CVE-2022-3204)
OBS-URL: https://build.opensuse.org/request/show/1005278
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=154
2022-09-26 12:51:25 +00:00
bead0518ec
add bugrefences
...
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=152
2022-08-01 14:09:30 +00:00
61ce99b18f
Accepting request 992035 from home:stroeder:network
...
Update to 1.16.2 which fixes the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
OBS-URL: https://build.opensuse.org/request/show/992035
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=151
2022-08-01 14:08:30 +00:00
d94c740036
Accepting request 988331 from home:stroeder:network
...
update to 1.16.1
OBS-URL: https://build.opensuse.org/request/show/988331
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=149
2022-07-18 11:02:50 +00:00
Darin Perusich
5da47f4e27
Accepting request 980515 from home:stroeder:network
...
update to 1.16.0
OBS-URL: https://build.opensuse.org/request/show/980515
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=147
2022-06-18 16:18:29 +00:00
cdd3f40e20
Accepting request 974920 from home:dirkmueller:Factory
...
- spec-cleaner
- update to 1.15.0
- drop python2 packages
- update to 1.15.0:
This release has bug fixes for crashes that happened on heavy network
usage. The default for the aggressive-nsec option has changed, it is now
enabled.
The ratelimit logic had to be reworked for the crash fixes. As a result,
there are new options to control the behaviour of ratelimiting.
The ratelimit-backoff and ip-ratelimit-backoff options can be used to
control how severe the backoff is when the ratelimit is exceeded.
The rpz-signal-nxdomain-ra option can be used to unset the RA flag, for
NXDOMAIN answers from RPZ. That is used by some clients to detect that
the domain is externally blocked. The RPZ option for-downstream can be
used like for auth zones, this allows the RPZ zone information to be queried.
That can be useful for monitoring scripts.
Features
- Fix #596 : unset the RA bit when a query is blocked by an unbound
RPZ nxdomain reply. The option rpz-signal-nxdomain-ra allows to
signal that a domain is externally blocked to clients when it
is blocked with NXDOMAIN by unsetting RA.
- Add rpz: for-downstream: yesno option, where the RPZ zone is
authoritatively answered for, so the RPZ zone contents can be
checked with DNS queries directed at the RPZ zone.
- Merge PR #616 : Update ratelimit logic. It also introduces
ratelimit-backoff and ip-ratelimit-backoff configuration options.
- Change aggressive-nsec default to yes.
Bug Fixes
- Fix compile warning for if_nametoindex on windows 64bit.
OBS-URL: https://build.opensuse.org/request/show/974920
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=145
2022-05-04 13:05:55 +00:00
683e2b02c6
Accepting request 943368 from home:gmbr3:Active
...
- Change to systemd-sysusers
OBS-URL: https://build.opensuse.org/request/show/943368
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=144
2022-05-04 09:41:24 +00:00
Michael Ströder
c7307c6222
Accepting request 937761 from home:stroeder:network
...
update to 1.14.0
OBS-URL: https://build.opensuse.org/request/show/937761
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=143
2021-12-09 12:01:58 +00:00
Michael Ströder
85bbd8d63c
Accepting request 925668 from home:toganm:branches:server:dns
...
- Fix pidfile location
- Fix pidfile location
OBS-URL: https://build.opensuse.org/request/show/925668
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=142
2021-10-16 17:07:16 +00:00
Michael Ströder
d2f5f428af
Accepting request 911864 from home:stroeder:network
...
update to 1.13.2
OBS-URL: https://build.opensuse.org/request/show/911864
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=141
2021-08-12 20:10:06 +00:00
Michael Ströder
413f89d9c5
Accepting request 896843 from home:toganm:branches:server:dns
...
Enable DNS over HTTPS which is possible since 1.12.0
OBS-URL: https://build.opensuse.org/request/show/896843
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=139
2021-06-02 09:51:39 +00:00
Michael Ströder
0be9ff5267
Accepting request 892306 from home:elvigia:branches:server:dns
...
- Use --disable-explicit-port-randomisation, the linux kernel
has source port randomization by default if port is 0 since ages.
- Use --disable-explicit-port-randomisation, the linux kernel
has source port randomization by default if port is 0 since ages.
OBS-URL: https://build.opensuse.org/request/show/892306
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=138
2021-06-01 11:19:28 +00:00
Michael Ströder
280052b8ef
Accepting request 870501 from home:stroeder:network
...
update to 1.13.1
OBS-URL: https://build.opensuse.org/request/show/870501
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=136
2021-02-09 11:09:32 +00:00
Michael Ströder
600207e484
Accepting request 852892 from home:stroeder:branches:server:dns
...
update to 1.13.0
OBS-URL: https://build.opensuse.org/request/show/852892
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=134
2020-12-03 11:53:51 +00:00
Michael Ströder
c81c38a4c4
Accepting request 840202 from home:stroeder:branches:server:dns
...
update to 1.12.0
OBS-URL: https://build.opensuse.org/request/show/840202
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=132
2020-10-08 08:48:13 +00:00
Michael Ströder
61825cd8a1
Accepting request 822962 from home:stroeder:branches:server:dns
...
update to 1.11.0
OBS-URL: https://build.opensuse.org/request/show/822962
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=130
2020-07-27 11:41:56 +00:00
Michael Ströder
16f7d215db
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=128
2020-05-19 11:43:47 +00:00
Michael Ströder
1b47afa1a5
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=127
2020-05-19 11:43:39 +00:00
Michael Ströder
88ffddd376
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=126
2020-05-19 11:43:05 +00:00
Michael Ströder
62ddb10e65
Accepting request 807213 from home:stroeder:branches:server:dns
...
update to 1.10.1 with security fixes
OBS-URL: https://build.opensuse.org/request/show/807213
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=125
2020-05-19 11:07:03 +00:00
Marguerite Su
3b2fab437b
Accepting request 777757 from home:stroeder:branches:server:dns
...
Update to 1.10.0. Successfully tested on Tumbleweed x86_64.
OBS-URL: https://build.opensuse.org/request/show/777757
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=123
2020-02-22 03:16:25 +00:00
Michael Ströder
1b132c4593
Accepting request 758270 from home:dimstar:Factory
...
Allow systemd-mini
OBS-URL: https://build.opensuse.org/request/show/758270
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=121
2019-12-19 20:13:29 +00:00
Michael Ströder
10b397f69c
Accepting request 756734 from home:stroeder:branches:server:dns
...
update to 1.9.6
OBS-URL: https://build.opensuse.org/request/show/756734
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=120
2019-12-15 09:21:22 +00:00
Michael Ströder
fbfc0fa670
Accepting request 749749 from home:stroeder:branches:server:dns
...
- update to 1.9.5
Fix for CVE-2019-18934
OBS-URL: https://build.opensuse.org/request/show/749749
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=118
2019-11-27 20:00:56 +00:00
Michael Ströder
dd01570bac
Accepting request 734812 from home:stroeder:branches:server:dns
...
update to 1.9.4 with fix for CVE-2019-16866
OBS-URL: https://build.opensuse.org/request/show/734812
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=116
2019-10-03 14:25:08 +00:00
Michael Ströder
0200c0612b
Accepting request 726828 from home:stroeder:branches:server:dns
...
update to 1.9.3
OBS-URL: https://build.opensuse.org/request/show/726828
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=114
2019-08-29 09:22:21 +00:00
Michael Ströder
f720a796be
Accepting request 725966 from home:cboltz:branches:server:dns
...
- change tmpfiles-unbound.conf from /var/run/ to /run/ to silence
systemd-tmpfiles warning
Related log line:
Aug 25 11:52:32 tux systemd-tmpfiles[721]: [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/, updating /var/run/unbound → /run/unbound; please update the tmpfiles.d/ drop-in file accordingly.
OBS-URL: https://build.opensuse.org/request/show/725966
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=113
2019-08-27 07:56:44 +00:00
Marguerite Su
ef6eb5c0ee
Accepting request 719573 from home:dimstar:Factory
...
- Update the Conflict in libunbound-devel-mini after the library
package name from libunbound2 to libunbond8.
OBS-URL: https://build.opensuse.org/request/show/719573
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=111
2019-07-31 04:01:23 +00:00
Michael Ströder
19a795f3af
Accepting request 719515 from home:dstoecker
...
- Correct library version from 2 to 8
OBS-URL: https://build.opensuse.org/request/show/719515
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=110
2019-07-29 08:59:12 +00:00
Michael Ströder
788ded6a89
Accepting request 718879 from home:mgerstner:branches:server:dns
...
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
OBS-URL: https://build.opensuse.org/request/show/718879
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=109
2019-07-26 13:24:45 +00:00
Michael Ströder
1e9319f5e7
Accepting request 710430 from home:stroeder:branches:server:dns
...
update to 1.9.2
OBS-URL: https://build.opensuse.org/request/show/710430
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=107
2019-06-19 06:19:39 +00:00
Michael Ströder
eb4a783d92
Accepting request 693926 from home:dstoecker
...
For hash-slinger I need python2 variant of unbound. This SR changes the build, so that python2 and python3 are built. I also dropped all pre-Leap version checks - they are long outdated.
P.S. Please remove the last sentence in the OBS package information. It's simply wrong :-)
OBS-URL: https://build.opensuse.org/request/show/693926
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=105
2019-04-14 07:33:27 +00:00
Michael Ströder
eacb0eb027
Accepting request 686226 from home:stroeder:branches:server:dns
...
removed accidently added PGP signature file
OBS-URL: https://build.opensuse.org/request/show/686226
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=103
2019-03-18 20:22:27 +00:00
Michael Ströder
72c24a8616
Accepting request 686172 from home:stroeder:branches:server:dns
...
update to 1.9.1
OBS-URL: https://build.opensuse.org/request/show/686172
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=102
2019-03-18 20:08:16 +00:00
Michael Ströder
0898e5036a
Accepting request 680171 from home:rtorrero:branches:server:dns
...
- Remove old pwdutils dependency and add shadow to cover both useradd
and groupadd as suggested in (bsc#1126757)
OBS-URL: https://build.opensuse.org/request/show/680171
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=100
2019-02-28 20:01:29 +00:00
Marguerite Su
455ebc820a
Accepting request 664071 from home:dimstar:Factory
...
- Require /usr/sbin/useradd to be present before installation, as
we run it in the %pre script.
OBS-URL: https://build.opensuse.org/request/show/664071
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=98
2019-01-12 02:29:52 +00:00
Marguerite Su
e06e1c64ed
Accepting request 661852 from home:jengelh:branches:server:dns
...
- Reorder scriptlet %if guards so that no empty scriptlets are
emitted. Add one missing %if %{with systemd}.
- Replace %__-type macro indirections.
OBS-URL: https://build.opensuse.org/request/show/661852
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=96
2018-12-29 13:03:29 +00:00
Marguerite Su
47ec6e5b44
Accepting request 657300 from home:rtorrero:branches:server:dns
...
- Migrate from cron to systemd timers (bsc#1115417)
OBS-URL: https://build.opensuse.org/request/show/657300
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=94
2018-12-21 06:38:50 +00:00
Michael Ströder
cfd08afadc
Accepting request 657317 from home:stroeder:branches:server:dns
...
- update to 1.8.3 fixes crash bug introduced in 1.8.2
OBS-URL: https://build.opensuse.org/request/show/657317
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=92
2018-12-11 20:31:00 +00:00
Michael Ströder
6b7302fd9c
Accepting request 655316 from home:stroeder:branches:server:dns
...
update to 1.8.2
OBS-URL: https://build.opensuse.org/request/show/655316
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=91
2018-12-10 09:58:05 +00:00
Marguerite Su
3cd2e1bceb
Accepting request 645289 from home:dstoecker:oldos
...
- Drop pre-rollover key 19036 from 2010, only leave 2017/2018 rollover
key 20326 (bsc#1112009, bsc#1004165)
A temporary fix in my eyes - long term solution should be to find an way to generate these files on installation.
OBS-URL: https://build.opensuse.org/request/show/645289
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=89
2018-11-03 02:58:17 +00:00
Marguerite Su
a2bedc10be
Accepting request 642550 from home:kbabioch:branches:server:dns
...
OBS-URL: https://build.opensuse.org/request/show/642550
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=88
2018-10-23 12:56:35 +00:00
Marguerite Su
dd5b03221d
Accepting request 640639 from home:stroeder:branches:server:dns
...
- update to 1.8.1
OBS-URL: https://build.opensuse.org/request/show/640639
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=86
2018-10-09 07:26:09 +00:00
Marguerite Su
1b7e9529ed
Accepting request 636218 from home:stroeder:branches:server:dns
...
- update to 1.8.0:
Number of bug fixes, a list of features added and some defaults changed.
OBS-URL: https://build.opensuse.org/request/show/636218
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=84
2018-09-18 05:58:24 +00:00
Michael Ströder
49ad22bd35
Accepting request 618275 from home:stroeder:branches:server:dns
...
update to 1.7.3
OBS-URL: https://build.opensuse.org/request/show/618275
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=82
2018-06-21 09:25:17 +00:00
Michael Ströder
a74344f40c
Accepting request 616062 from home:stroeder:branches:server:dns
...
update to 1.7.2
OBS-URL: https://build.opensuse.org/request/show/616062
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=80
2018-06-11 14:45:25 +00:00
Michael Ströder
a605d664bf
Accepting request 613074 from home:dstoecker
...
Hello,
some changes to unbound. Add the upcomming trust anchors and make the trust files readable for everyone (I need this for especially for opendkim, which uses unbound library and needs these files).
The changes are similar to the ones done for other distributions. Debian also patches the source code to add new keys. I don't like this much, so I only changed the configuration files.
This change should have been done last year already. While properly setup systems will follow the rollover without interaction, a new installation of the package should also work AFTER the rollover and this requires the new keys to be in the package already.
When accepting the submit request please verify the added key data against the original sources!
- add upcomming key rollover trust anchor
- make trust anchor files world readable - these files are open
knowledge and will be used by other software packages
OBS-URL: https://build.opensuse.org/request/show/613074
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=78
2018-05-30 14:17:02 +00:00
Michael Ströder
7b95b838e1
Accepting request 603827 from home:stroeder:branches:server:dns
...
update to 1.7.1
OBS-URL: https://build.opensuse.org/request/show/603827
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=76
2018-05-04 11:23:07 +00:00