openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

Revisions of unbound

buildservice-autocommit accepted request 1159844 from

Jorik Cronenberg (jcronenberg) about 1 month ago (revision 176)

baserev update by copy to link target

Jorik Cronenberg (jcronenberg) committed about 1 month ago (revision 175)

- Update to 1.19.3:

buildservice-autocommit accepted request 1156332 from

Jorik Cronenberg (jcronenberg) about 2 months ago (revision 174)

baserev update by copy to link target

Jorik Cronenberg (jcronenberg) committed about 2 months ago (revision 173)

- Update to 1.19.2:
  * Bug Fixes:
    - Fix CVE-2024-1931, Denial of service when trimming EDE text
      on positive replies.
      [bsc#1221164]

- Update to 1.19.2:
  * Bug Fixes:
    - Fix CVE-2024-1931, Denial of service when trimming EDE text
      on positive replies.
      [bsc#1221164]

Jorik Cronenberg (jcronenberg) accepted request 1144618 from

Stefan Seyfried (seife) about 2 months ago (revision 172)

disable outgoing-port-permit and outgoing-port-avoid in config file to
suppress the related unbound-checkconf warnings on every start

Jorik Cronenberg (jcronenberg) accepted request 1140878 from

Jakob Lorenz (onlyJak0b) about 2 months ago (revision 171)

- Use prefixes instead of sudo in unbound.service (boo#1215628)

buildservice-autocommit accepted request 1153210 from

Jorik Cronenberg (jcronenberg) 2 months ago (revision 170)

baserev update by copy to link target

Jorik Cronenberg (jcronenberg) accepted request 1152943 from

Pedro Monreal Gonzalez (pmonrealgonzalez) 2 months ago (revision 169)

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
    - Fix CVE-2023-50387, DNSSEC verification complexity can be
      exploited to exhaust CPU resources and stall DNS resolvers.
    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
    - Fix CVE-2023-50387, DNSSEC verification complexity can be
      exploited to exhaust CPU resources and stall DNS resolvers.
    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

buildservice-autocommit accepted request 1135978 from

Marguerite Su (MargueriteSu) 4 months ago (revision 168)

baserev update by copy to link target

Marguerite Su (MargueriteSu) accepted request 1127268 from

Pedro Monreal Gonzalez (pmonrealgonzalez) 4 months ago (revision 167)

- Update to 1.19.0:
  * Features:
    - Fix #850: [FR] Ability to use specific database in Redis, with
      new redis-logical-db configuration option.
    - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream
      requests. This can be helpful for devices that cannot handle
      DNSSEC information. But it should not be enabled otherwise, because
      that would stop DNSSEC validation. The DNSSEC validation would not
      work for Unbound itself, and also not for downstream users. Default
      is no. The option is disable-edns-do: no
    - Expose the script filename in the Python module environment 'mod_env'
      instead of the config_file structure which includes the linked list
      of scripts in a multi Python module setup; fixes #79.
    - Expose the configured listening and outgoing interfaces, if any, as
      a list of strings in the Python 'config_file' class instead of the
      current Swig object proxy; fixes #79.
    - Mailing list patches from Daniel Gröber for DNS64 fallback to plain
      AAAA when no A record exists for synthesis, and minor DNS64 code
      refactoring for better readability.
    - Merge #951: Cachedb no store. The cachedb-no-store: yes option is
      used to stop cachedb from writing messages to the backend storage.
      It reads messages when data is available from the backend.
      The default is no.
  * Bug Fixes:
    - Fix for version generation race condition that ignored changes.
    - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL.
    - Fix for WKS call to getservbyname that creates allocation on exit in
      unit test by testing numbers first and testing from the services list later.
    - Fix autoconf 2.69 warnings in configure.
    - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.

buildservice-autocommit accepted request 1109502 from

Marcus Rueckert (darix) 8 months ago (revision 166)

baserev update by copy to link target

Marcus Rueckert (darix) accepted request 1109457 from

Pedro Monreal Gonzalez (pmonrealgonzalez) 8 months ago (revision 165)

- Update to 1.18.0:
  * Features:
    - Аdd a metric about the maximum number of collisions in lrushah.
    - Set max-udp-size default to 1232. This is the same default value
      as the default value for edns-buffer-size. It restricts client
      edns buffer size choices, and makes unbound behave similar to
      other DNS resolvers.
    - Add harden-unknown-additional option. It removes unknown records
      from the authority section and additional section.
    - Added new static zone type block_a to suppress all A queries for
      specific zones.
    - [FR] Ability to use Redis unix sockets.
    - [FR] Ability to set the Redis password.
    - Features/dropqueuedpackets, with sock-queue-timeout option that
      drops packets that have been in the socket queue for too long.
      Added statistics num.queries_timed_out and query.queue_time_us.max
      that track the socket queue timeouts.
    - 'eqvinox' Lamparter: NAT64 support.
    - [FR] Use kernel timestamps for dnstap.
    - Add cachedb hit stat. Introduces 'num.query.cachedb' as a new
      statistical counter.
    - Add SVCB dohpath support.
    - Add validation EDEs to queries where the CD bit is set.
    - Add prefetch support for subnet cache entries.
    - Add EDE (RFC8914) caching.
    - Add support for EDE caching in cachedb and subnetcache.
    - Downstream DNS Server Cookies a la RFC7873 and RFC9018. Create server
      cookies for clients that send client cookies. This needs to be explicitly
      turned on in the config file with: `answer-cookie: yes`.
  * Bug Fixes

buildservice-autocommit accepted request 1105588 from

Marcus Rueckert (darix) 8 months ago (revision 164)

baserev update by copy to link target

Marcus Rueckert (darix) committed 8 months ago (revision 163)

add changes entry

Marcus Rueckert (darix) accepted request 1103293 from

Adrian Schröter (adrianSuSE) 8 months ago (revision 162)

openSUSE:Factory libunbound-devel-mini flavor is configured to sync build
counter with unbound package. This means it always triggers a bootstrap
no matter which of the packages got initially triggered.

I am not sure if this is needed at all, if yes, please accept this 
request and forward with an explenation.

If not, just decline it and we will remove the build counter syncing 
in factory as well.

thanks

Details:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6GUU6JUQE72WCWEZCSLQYJLVVTNHBVTE/

Marcus Rueckert (darix) accepted request 1084728 from

Frederic Crozat (fcrozat) 8 months ago (revision 161)

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

buildservice-autocommit accepted request 1067361 from

Marcus Rueckert (darix) about 1 year ago (revision 160)

baserev update by copy to link target

Marcus Rueckert (darix) accepted request 1067340 from

Pedro Monreal Gonzalez (pmonrealgonzalez) about 1 year ago (revision 159)

- Update to 1.17.1:
  * Features:
    - Expose 'statistics-inhibit-zero' as a configuration option;
      the default value retains Unbound's behavior.
    - Expose 'max-sent-count' as a configuration option; the default
      value retains Unbound's behavior.
    - Merge #461 from Christian Allred: Add max-query-restarts option.
      Exposes an internal configuration but the default value retains
      Unbound's behavior.
    - Merge #569 from JINMEI Tatuya: add keep-cache option to
      'unbound-control reload' to keep caches.
  * Bug Fixes:
    - Merge #768 from fobser: Arithmetic on a pointer to void is a
      GNU extension.
    - In unit test, print python script name list correctly.
    - testcode/dohclient sets log identity to its name.
    - Clarify the use of MAX_SENT_COUNT in the iterator code.
    - Fix that cachedb does not store failures in the external cache.
    - Merge #767 from jonathangray: consistently use IPv4/IPv6 in
      unbound.conf.5.
    - Fix to ignore tcp events for closed comm points.
    - Fix to make sure to not read again after a tcp comm point is
      closed.
    - Fix #775: libunbound: subprocess reap causes parent process
      reap to hang.
    - iana portlist update.
    - Complementary fix for distutils.sysconfig deprecation in
      Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2.
    - Fix #779: [doc] Missing documention in ub_resolve_event() for
      callback parameter was_ratelimited.

Marcus Rueckert (darix) accepted request 1045741 from

Wolfgang Frisch (wfrisch) about 1 year ago (revision 158)

- Tighten permissions (boo#1173619)
- Add missing dependency: unbound-control-setup needs /usr/bin/openssl.

buildservice-autocommit accepted request 1032866 from

Factory Maintainer (factory-maintainer) over 1 year ago (revision 157)

baserev update by copy to link target

Displaying revisions 1 - 20 of 176

Places

Revisions of unbound

Places