pool/unbound
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
109 Commits 2 Branches 0 Tags 21 MiB
e451daacea
Commit Graph

109 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Marcus Rueckert
e451daacea Accepting request 1109457 from home:pmonrealgonzalez:branches:server:dns 
- Update to 1.18.0:
  * Features:
    - Аdd a metric about the maximum number of collisions in lrushah.
    - Set max-udp-size default to 1232. This is the same default value
      as the default value for edns-buffer-size. It restricts client
      edns buffer size choices, and makes unbound behave similar to
      other DNS resolvers.
    - Add harden-unknown-additional option. It removes unknown records
      from the authority section and additional section.
    - Added new static zone type block_a to suppress all A queries for
      specific zones.
    - [FR] Ability to use Redis unix sockets.
    - [FR] Ability to set the Redis password.
    - Features/dropqueuedpackets, with sock-queue-timeout option that
      drops packets that have been in the socket queue for too long.
      Added statistics num.queries_timed_out and query.queue_time_us.max
      that track the socket queue timeouts.
    - 'eqvinox' Lamparter: NAT64 support.
    - [FR] Use kernel timestamps for dnstap.
    - Add cachedb hit stat. Introduces 'num.query.cachedb' as a new
      statistical counter.
    - Add SVCB dohpath support.
    - Add validation EDEs to queries where the CD bit is set.
    - Add prefetch support for subnet cache entries.
    - Add EDE (RFC8914) caching.
    - Add support for EDE caching in cachedb and subnetcache.
    - Downstream DNS Server Cookies a la RFC7873 and RFC9018. Create server
      cookies for clients that send client cookies. This needs to be explicitly
      turned on in the config file with: `answer-cookie: yes`.
  * Bug Fixes

OBS-URL: https://build.opensuse.org/request/show/1109457
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=165
 2023-09-07 10:39:49 +00:00
Marcus Rueckert
fbf5ab5836 add changes entry 
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=163
 2023-08-24 10:09:17 +00:00
Marcus Rueckert
1661813f4b Accepting request 1103293 from home:adrianSuSE:branches:server:dns 
openSUSE:Factory libunbound-devel-mini flavor is configured to sync build
counter with unbound package. This means it always triggers a bootstrap
no matter which of the packages got initially triggered.

I am not sure if this is needed at all, if yes, please accept this 
request and forward with an explenation.

If not, just decline it and we will remove the build counter syncing 
in factory as well.

thanks

Details:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6GUU6JUQE72WCWEZCSLQYJLVVTNHBVTE/

OBS-URL: https://build.opensuse.org/request/show/1103293
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=162
 2023-08-24 10:06:41 +00:00
Marcus Rueckert
6c504b45e4 Accepting request 1084728 from home:fcrozat:branches:server:dns 
- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

OBS-URL: https://build.opensuse.org/request/show/1084728
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=161
 2023-08-24 10:03:22 +00:00
Marcus Rueckert
1a0d18b0be Accepting request 1067340 from home:pmonrealgonzalez:branches:server:dns 
- Update to 1.17.1:
  * Features:
    - Expose 'statistics-inhibit-zero' as a configuration option;
      the default value retains Unbound's behavior.
    - Expose 'max-sent-count' as a configuration option; the default
      value retains Unbound's behavior.
    - Merge #461 from Christian Allred: Add max-query-restarts option.
      Exposes an internal configuration but the default value retains
      Unbound's behavior.
    - Merge #569 from JINMEI Tatuya: add keep-cache option to
      'unbound-control reload' to keep caches.
  * Bug Fixes:
    - Merge #768 from fobser: Arithmetic on a pointer to void is a
      GNU extension.
    - In unit test, print python script name list correctly.
    - testcode/dohclient sets log identity to its name.
    - Clarify the use of MAX_SENT_COUNT in the iterator code.
    - Fix that cachedb does not store failures in the external cache.
    - Merge #767 from jonathangray: consistently use IPv4/IPv6 in
      unbound.conf.5.
    - Fix to ignore tcp events for closed comm points.
    - Fix to make sure to not read again after a tcp comm point is
      closed.
    - Fix #775: libunbound: subprocess reap causes parent process
      reap to hang.
    - iana portlist update.
    - Complementary fix for distutils.sysconfig deprecation in
      Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2.
    - Fix #779: [doc] Missing documention in ub_resolve_event() for
      callback parameter was_ratelimited.

OBS-URL: https://build.opensuse.org/request/show/1067340
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=159
 2023-02-23 10:40:06 +00:00
Marcus Rueckert
050def245d Accepting request 1045741 from home:wfrisch:branches:server:dns 
- Tighten permissions (boo#1173619)
- Add missing dependency: unbound-control-setup needs /usr/bin/openssl.

OBS-URL: https://build.opensuse.org/request/show/1045741
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=158
 2023-02-23 10:39:45 +00:00
Marcus Rueckert
0818938ece Accepting request 1010533 from home:stroeder:network 
update to 1.17.0

OBS-URL: https://build.opensuse.org/request/show/1010533
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=156
 2022-11-02 11:12:43 +00:00
Marcus Rueckert
c4d0dd3e2b Accepting request 1005278 from home:stroeder:network 
update to 1.16.3:  fixes Non-Responsive Delegation Attack (CVE-2022-3204)

OBS-URL: https://build.opensuse.org/request/show/1005278
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=154
 2022-09-26 12:51:25 +00:00
Marcus Rueckert
bead0518ec add bugrefences 
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=152
 2022-08-01 14:09:30 +00:00
Marcus Rueckert
61ce99b18f Accepting request 992035 from home:stroeder:network 
Update to 1.16.2 which fixes the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.

OBS-URL: https://build.opensuse.org/request/show/992035
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=151
 2022-08-01 14:08:30 +00:00
Marcus Rueckert
d94c740036 Accepting request 988331 from home:stroeder:network 
update to 1.16.1

OBS-URL: https://build.opensuse.org/request/show/988331
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=149
 2022-07-18 11:02:50 +00:00
Darin Perusich
5da47f4e27 Accepting request 980515 from home:stroeder:network 
update to 1.16.0

OBS-URL: https://build.opensuse.org/request/show/980515
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=147
 2022-06-18 16:18:29 +00:00
Marcus Rueckert
cdd3f40e20 Accepting request 974920 from home:dirkmueller:Factory 
- spec-cleaner
- update to 1.15.0 

- drop python2 packages
- update to 1.15.0:
  This release has bug fixes for crashes that happened on heavy network
  usage. The default for the aggressive-nsec option has changed, it is now
  enabled.
  The ratelimit logic had to be reworked for the crash fixes. As a result,
  there are new options to control the behaviour of ratelimiting.
  The ratelimit-backoff and ip-ratelimit-backoff options can be used to
  control how severe the backoff is when the ratelimit is exceeded.
  The rpz-signal-nxdomain-ra option can be used to unset the RA flag, for
  NXDOMAIN answers from RPZ. That is used by some clients to detect that
  the domain is externally blocked. The RPZ option for-downstream can be
  used like for auth zones, this allows the RPZ zone information to be queried.
  That can be useful for monitoring scripts.
  Features
  - Fix #596: unset the RA bit when a query is blocked by an unbound
    RPZ nxdomain reply. The option rpz-signal-nxdomain-ra allows to
    signal that a domain is externally blocked to clients when it
    is blocked with NXDOMAIN by unsetting RA.
  - Add rpz: for-downstream: yesno option, where the RPZ zone is
    authoritatively answered for, so the RPZ zone contents can be
    checked with DNS queries directed at the RPZ zone.
  - Merge PR #616: Update ratelimit logic. It also introduces
    ratelimit-backoff and ip-ratelimit-backoff configuration options.
  - Change aggressive-nsec default to yes.
  Bug Fixes
  - Fix compile warning for if_nametoindex on windows 64bit.

OBS-URL: https://build.opensuse.org/request/show/974920
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=145
 2022-05-04 13:05:55 +00:00
Marcus Rueckert
683e2b02c6 Accepting request 943368 from home:gmbr3:Active 
- Change to systemd-sysusers

OBS-URL: https://build.opensuse.org/request/show/943368
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=144
 2022-05-04 09:41:24 +00:00
Michael Ströder
c7307c6222 Accepting request 937761 from home:stroeder:network 
update to 1.14.0

OBS-URL: https://build.opensuse.org/request/show/937761
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=143
 2021-12-09 12:01:58 +00:00
Michael Ströder
85bbd8d63c Accepting request 925668 from home:toganm:branches:server:dns 
- Fix pidfile location 
- Fix pidfile location

OBS-URL: https://build.opensuse.org/request/show/925668
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=142
 2021-10-16 17:07:16 +00:00
Michael Ströder
d2f5f428af Accepting request 911864 from home:stroeder:network 
update to 1.13.2

OBS-URL: https://build.opensuse.org/request/show/911864
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=141
 2021-08-12 20:10:06 +00:00
Michael Ströder
413f89d9c5 Accepting request 896843 from home:toganm:branches:server:dns 
Enable DNS over HTTPS which is possible since 1.12.0

OBS-URL: https://build.opensuse.org/request/show/896843
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=139
 2021-06-02 09:51:39 +00:00
Michael Ströder
0be9ff5267 Accepting request 892306 from home:elvigia:branches:server:dns 
- Use --disable-explicit-port-randomisation, the linux kernel
  has source port randomization by default if port is 0 since ages.

- Use --disable-explicit-port-randomisation, the linux kernel
  has source port randomization by default if port is 0 since ages.

OBS-URL: https://build.opensuse.org/request/show/892306
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=138
 2021-06-01 11:19:28 +00:00
Michael Ströder
280052b8ef Accepting request 870501 from home:stroeder:network 
update to 1.13.1

OBS-URL: https://build.opensuse.org/request/show/870501
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=136
 2021-02-09 11:09:32 +00:00
Michael Ströder
600207e484 Accepting request 852892 from home:stroeder:branches:server:dns 
update to 1.13.0

OBS-URL: https://build.opensuse.org/request/show/852892
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=134
 2020-12-03 11:53:51 +00:00
Michael Ströder
c81c38a4c4 Accepting request 840202 from home:stroeder:branches:server:dns 
update to 1.12.0

OBS-URL: https://build.opensuse.org/request/show/840202
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=132
 2020-10-08 08:48:13 +00:00
Michael Ströder
61825cd8a1 Accepting request 822962 from home:stroeder:branches:server:dns 
update to 1.11.0

OBS-URL: https://build.opensuse.org/request/show/822962
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=130
 2020-07-27 11:41:56 +00:00
Michael Ströder
16f7d215db OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=128 2020-05-19 11:43:47 +00:00
Michael Ströder
1b47afa1a5 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=127 2020-05-19 11:43:39 +00:00
Michael Ströder
88ffddd376 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=126 2020-05-19 11:43:05 +00:00
Michael Ströder
62ddb10e65 Accepting request 807213 from home:stroeder:branches:server:dns 
update to 1.10.1 with security fixes

OBS-URL: https://build.opensuse.org/request/show/807213
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=125
 2020-05-19 11:07:03 +00:00
Marguerite Su
3b2fab437b Accepting request 777757 from home:stroeder:branches:server:dns 
Update to 1.10.0. Successfully tested on Tumbleweed x86_64.

OBS-URL: https://build.opensuse.org/request/show/777757
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=123
 2020-02-22 03:16:25 +00:00
Michael Ströder
1b132c4593 Accepting request 758270 from home:dimstar:Factory 
Allow systemd-mini

OBS-URL: https://build.opensuse.org/request/show/758270
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=121
 2019-12-19 20:13:29 +00:00
Michael Ströder
10b397f69c Accepting request 756734 from home:stroeder:branches:server:dns 
update to 1.9.6

OBS-URL: https://build.opensuse.org/request/show/756734
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=120
 2019-12-15 09:21:22 +00:00
Michael Ströder
fbfc0fa670 Accepting request 749749 from home:stroeder:branches:server:dns 
- update to 1.9.5
  Fix for CVE-2019-18934

OBS-URL: https://build.opensuse.org/request/show/749749
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=118
 2019-11-27 20:00:56 +00:00
Michael Ströder
dd01570bac Accepting request 734812 from home:stroeder:branches:server:dns 
update to 1.9.4 with fix for CVE-2019-16866

OBS-URL: https://build.opensuse.org/request/show/734812
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=116
 2019-10-03 14:25:08 +00:00
Michael Ströder
0200c0612b Accepting request 726828 from home:stroeder:branches:server:dns 
update to 1.9.3

OBS-URL: https://build.opensuse.org/request/show/726828
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=114
 2019-08-29 09:22:21 +00:00
Michael Ströder
f720a796be Accepting request 725966 from home:cboltz:branches:server:dns 
- change tmpfiles-unbound.conf from /var/run/ to /run/ to silence
  systemd-tmpfiles warning

Related log line:
Aug 25 11:52:32 tux systemd-tmpfiles[721]: [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/, updating /var/run/unbound → /run/unbound; please update the tmpfiles.d/ drop-in file accordingly.

OBS-URL: https://build.opensuse.org/request/show/725966
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=113
 2019-08-27 07:56:44 +00:00
Marguerite Su
ef6eb5c0ee Accepting request 719573 from home:dimstar:Factory 
- Update the Conflict in libunbound-devel-mini after the library
  package name from libunbound2 to libunbond8.

OBS-URL: https://build.opensuse.org/request/show/719573
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=111
 2019-07-31 04:01:23 +00:00
Michael Ströder
19a795f3af Accepting request 719515 from home:dstoecker 
- Correct library version from 2 to 8

OBS-URL: https://build.opensuse.org/request/show/719515
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=110
 2019-07-29 08:59:12 +00:00
Michael Ströder
788ded6a89 Accepting request 718879 from home:mgerstner:branches:server:dns 
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

OBS-URL: https://build.opensuse.org/request/show/718879
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=109
 2019-07-26 13:24:45 +00:00
Michael Ströder
1e9319f5e7 Accepting request 710430 from home:stroeder:branches:server:dns 
update to 1.9.2

OBS-URL: https://build.opensuse.org/request/show/710430
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=107
 2019-06-19 06:19:39 +00:00
Michael Ströder
eb4a783d92 Accepting request 693926 from home:dstoecker 
For hash-slinger I need python2 variant of unbound. This SR changes the build, so that python2 and python3 are built. I also dropped all pre-Leap version checks - they are long outdated.

P.S. Please remove the last sentence in the OBS package information. It's simply wrong :-)

OBS-URL: https://build.opensuse.org/request/show/693926
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=105
 2019-04-14 07:33:27 +00:00
Michael Ströder
eacb0eb027 Accepting request 686226 from home:stroeder:branches:server:dns 
removed accidently added PGP signature file

OBS-URL: https://build.opensuse.org/request/show/686226
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=103
 2019-03-18 20:22:27 +00:00
Michael Ströder
72c24a8616 Accepting request 686172 from home:stroeder:branches:server:dns 
update to 1.9.1

OBS-URL: https://build.opensuse.org/request/show/686172
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=102
 2019-03-18 20:08:16 +00:00
Michael Ströder
0898e5036a Accepting request 680171 from home:rtorrero:branches:server:dns 
- Remove old pwdutils dependency and add shadow to cover both useradd 
  and groupadd as suggested in (bsc#1126757)

OBS-URL: https://build.opensuse.org/request/show/680171
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=100
 2019-02-28 20:01:29 +00:00
Marguerite Su
455ebc820a Accepting request 664071 from home:dimstar:Factory 
- Require /usr/sbin/useradd to be present before installation, as
  we run it in the %pre script.

OBS-URL: https://build.opensuse.org/request/show/664071
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=98
 2019-01-12 02:29:52 +00:00
Marguerite Su
e06e1c64ed Accepting request 661852 from home:jengelh:branches:server:dns 
- Reorder scriptlet %if guards so that no empty scriptlets are
  emitted. Add one missing %if %{with systemd}.
- Replace %__-type macro indirections.

OBS-URL: https://build.opensuse.org/request/show/661852
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=96
 2018-12-29 13:03:29 +00:00
Marguerite Su
47ec6e5b44 Accepting request 657300 from home:rtorrero:branches:server:dns 
- Migrate from cron to systemd timers (bsc#1115417)

OBS-URL: https://build.opensuse.org/request/show/657300
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=94
 2018-12-21 06:38:50 +00:00
Michael Ströder
cfd08afadc Accepting request 657317 from home:stroeder:branches:server:dns 
- update to 1.8.3 fixes crash bug introduced in 1.8.2

OBS-URL: https://build.opensuse.org/request/show/657317
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=92
 2018-12-11 20:31:00 +00:00
Michael Ströder
6b7302fd9c Accepting request 655316 from home:stroeder:branches:server:dns 
update to 1.8.2

OBS-URL: https://build.opensuse.org/request/show/655316
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=91
 2018-12-10 09:58:05 +00:00
Marguerite Su
3cd2e1bceb Accepting request 645289 from home:dstoecker:oldos 
- Drop pre-rollover key 19036 from 2010, only leave 2017/2018 rollover
  key 20326 (bsc#1112009, bsc#1004165)

A temporary fix in my eyes - long term solution should be to find an way to generate these files on installation.

OBS-URL: https://build.opensuse.org/request/show/645289
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=89
 2018-11-03 02:58:17 +00:00
Marguerite Su
a2bedc10be Accepting request 642550 from home:kbabioch:branches:server:dns 
OBS-URL: https://build.opensuse.org/request/show/642550
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=88
 2018-10-23 12:56:35 +00:00
Marguerite Su
dd5b03221d Accepting request 640639 from home:stroeder:branches:server:dns 
- update to 1.8.1

OBS-URL: https://build.opensuse.org/request/show/640639
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=86
 2018-10-09 07:26:09 +00:00