Commit Graph

381 Commits

Author SHA1 Message Date
Paul Wouters
ed8559effa - Resolves: rhbz#1667742 SELinux is preventing unbound from 'name_bind' accesses on the udp_socket port 61000. 2020-04-29 17:29:43 -04:00
Artem Egorenkov
effb538e20 Upstream isue linked for patch 2020-04-16 17:58:05 +02:00
Artem Egorenkov
4f85ef9c9a bz1824536. Crash on termination fixed. 2020-04-16 16:49:04 +02:00
Petr Menšík
776a059376 Add dnstap and systemd option build support 2020-03-20 12:33:00 +01:00
Petr Menšík
b6d9ed08b0 Add source signature verification 2020-03-19 14:01:50 +01:00
Petr Menšík
c78f3c816f Update to 1.10.0 (#1805199)
Build with a new release.
2020-03-19 13:39:24 +01:00
Petr Menšík
c8f0468078 Use autopatch for new patches
Remove unused patch file, simplify adding a new patch. Just Patch: entry
is required with patch file name, autopatch will apply it.

Use new primary website for unbound upstream.
2020-03-19 11:13:20 +01:00
Fedora Release Engineering
7d6a427be7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-31 02:33:41 +00:00
Paul Wouters
cd68171bad * Fri Dec 13 2019 Paul Wouters <pwouters@redhat.com> - 1.9.6-1
- Resolves: rhbz#1758107 unbound-1.9.5 is available
- Resolves: CVE-2019-18934
2019-12-13 15:20:12 -05:00
Paul Wouters
8890aaa359 * Fri Nov 01 2019 Paul Wouters <pwouters@redhat.com> - 1.9.4-1
- Fix build on rhel/centos systems
- Resolves: rhbz#1767955 (CVE-2019-16866) uninitialized memory accesses leads to crash via a crafted NOTIFY query
2019-11-01 15:15:09 -04:00
Petr Menšík
57baf9aea1 Make obsoleted package removed without asking
Messages provided by dnf are somehow confusing. If user wants more recent
version, let it upgrade without additional flags to dnf.
2019-09-27 00:54:35 +02:00
Petr Menšík
e1df65a0ce Obsolete no longer provided python2 subpackage (#1749400)
Python2 is no longer provided. If one wants to upgrade, python2-unbound
has to be uninstalled. Since nothing directly depends on it and no update
is expected on Fedora 30+, make its uninstall smooth.
2019-09-27 00:15:49 +02:00
Paul Wouters
5bfdf89e03 * Tue Aug 27 2019 Paul Wouters <pwouters@redhat.com> - 1.9.3-1
- Updated to 1.9.3
- Resolves: rhbz#1672578 unbound-1.9.2 is available
- Resolves: rhbz#1694831 [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/
- Resolves: rhbz# 1667387 [abrt] unbound: memmove(): unbound killed by SIGABRT
2019-08-27 12:14:51 -04:00
Miro Hrončok
3031aeaab5 Subpackage python2-unbound has been removed 2019-08-22 17:11:45 +02:00
Miro Hrončok
6eaa4e758f Rebuilt for Python 3.8 2019-08-15 19:23:32 +02:00
Zbigniew Jędrzejewski-Szmek
373ff61647 Drop trailing comments afer %endif
RPM 4.15 doesn't like them.
2019-08-05 22:07:17 +02:00
Zbigniew Jędrzejewski-Szmek
98c6ca6194 Remove very old trigger
systemd-sysv-convert was removed many years ago.
2019-08-05 22:03:17 +02:00
Zbigniew Jędrzejewski-Szmek
3ebaa955a5 Drop build-time and install-time requirements on systemd
This follows the semi-recent guideline changes:
https://pagure.io/packaging-committee/pull-request/828
https://pagure.io/packaging-committee/pull-request/890#comment-86419
2019-08-05 22:03:17 +02:00
Fedora Release Engineering
8e665ac699 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-27 02:27:21 +00:00
Fedora Release Engineering
f4336b7b3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-03 10:46:32 +00:00
Paul Wouters
d2e15123b5 - Remove KSK-2010 from configs - it has been revoked 2019-01-11 10:37:16 -05:00
Paul Wouters
55f1ad68ab - Another dns64 fixup 2019-01-11 10:37:12 -05:00
Paul Wouters
42a7ed2926 - Updated to 1.8.3 with fixes the dns64 bug and has some other minor fixes 2018-12-11 22:07:23 -05:00
Paul Wouters
6e953c2adb - Fix dns64 allocation in wrong region for returned internal queries. 2018-12-10 15:10:31 -05:00
Paul Wouters
901f4a3b5b new sources 2018-12-04 14:10:46 -05:00
Paul Wouters
2cd0b94125 * Tue Dec 04 2018 Paul Wouters <pwouters@redhat.com> - 1.8.2-1
- Updated to 1.8.2.
- Enabled deny ANY query support and edns-tcp-keepalive
- Set serve-stale timeout to 4h
- Updated unbound.conf for latest options
2018-12-04 13:58:11 -05:00
Petr Menšík
9d074af91d Allow group by default to unbound-control (#1640259)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-10-22 16:16:09 +02:00
Petr Menšík
3d0c001d3e Update to 1.8.1
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-10-08 18:30:41 +02:00
Petr Menšík
b3942245cb - Fix #4188: IPv6 forwarders without ipv6 result in SERVFAIL, fixes
qname minimisation with a forwarder when connectivity has issues
      from rejecting responses.

Resolves: rhbz#1633874
2018-10-01 20:11:11 +02:00
Petr Menšík
787382dfd5 Reset release and add changelog 2018-09-19 22:41:32 +02:00
Petr Menšík
b3bb4ed3ea Rebase to 1.8.0
Remove all patches accepted upstream
2018-09-17 15:30:23 +02:00
Paul Wouters
80badab047 - Ensure if even one of the required files is missing, to restart the keyservice 2018-08-14 22:16:28 -04:00
Paul Wouters
9e1a4984a2 - Fix for restarting unbound service after deleting key/pem files for remote control 2018-08-13 21:36:37 -04:00
Paul Wouters
d7f53648f5 Ensure keygen service is restart as part of the unbound service restart
So if the admin deletes the key/pem files, a systemctl restart unbound
still works (and generates new key/pem files)
2018-08-13 21:35:40 -04:00
Petr Menšík
e60bea7ca0 Release memory in unbound-host
triggered by command:
unbound-host -r -t any -v localhost.
2018-07-31 15:49:56 +02:00
Petr Menšík
6bacf118fb Remove unused patches from repo 2018-07-30 15:34:30 +02:00
Petr Menšík
b1834b1932 Remove unused Group tag 2018-07-23 18:33:13 +02:00
Petr Menšík
dbae66e0fe Cleanup generated client and server keys (#1601773)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-07-18 11:26:09 +02:00
Fedora Release Engineering
2c03912e4c - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 08:12:44 +00:00
Petr Menšík
f4f56550cc - Do not call ldconfig if possible
- Use systemd macros also for library
2018-07-09 21:32:23 +02:00
Petr Menšík
985c6a75ed Prefer local resolvers over direct root access. Enables successful trust
anchor updates also when no direct queries are available, but local
resolvers support dnssec. Fixes bug #1598078
2018-07-04 12:42:14 +02:00
Miro Hrončok
f39c7483df Rebuilt for Python 3.7 2018-07-02 18:24:21 +02:00
Petr Menšík
e9c5e93a5b Update sources to 1.7.3 2018-06-27 11:40:56 +02:00
Petr Menšík
d062cd9952 Update to 1.7.3 (#1593708) 2018-06-27 11:33:18 +02:00
Petr Menšík
631ffb8d75 Remove last python2 dependency from python3 build 2018-06-27 11:10:36 +02:00
Miro Hrončok
157c83d87f Rebuilt for Python 3.7 2018-06-19 11:29:56 +02:00
Paul Wouters
6361da5b33 add unbound-1.7.2-stub-fwd-ttl.patch 2018-06-11 16:56:20 -04:00
Paul Wouters
e9cb729533 * Mon Jun 11 2018 Paul Wouters <pwouters@redhat.com> - 1.7.2-1
- Resolves rhbz#1589807 unbound-1.7.2 is available
- Add patch to fix stub/forward zone not returning ServFail when TTL expires
- Enabled the new root-key-sentinel option
2018-06-11 16:49:15 -04:00
Petr Menšík
749ca6b65b Update to 1.7.1 (#1574495)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-05-30 21:08:03 +02:00
Petr Menšík
f81c94bdec Fix disabled python versions in non-Fedora builds 2018-04-09 16:50:39 +02:00